This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n9v9Gjj8cCJ5sNFo-8JMZMnaCFw.roa
File:                     n9v9Gjj8cCJ5sNFo-8JMZMnaCFw.roa (raw, json)
Hash identifier:          zC/iwTASAXxFddPXnqQSPTaYNu2yFQDjTlNPHaRVso4=
Subject key identifier:   9F:DB:FD:1A:38:FC:70:22:79:B0:D1:68:FB:C2:4C:64:C9:DA:08:5C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01868D022BA05918262B1484795578B9B89A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n9v9Gjj8cCJ5sNFo-8JMZMnaCFw.roa
Signing time:             Sun 26 Feb 2023 09:16:15 +0000
ROA not before:           Sun 26 Feb 2023 09:16:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8d:02:2b:a0:59:18:26:2b:14:84:79:55:78:b9:b8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 26 09:16:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fdbfd1a38fc702279b0d168fbc24c64c9da085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:4c:d7:82:eb:2d:a0:ba:5e:fa:40:aa:9f:
                    57:96:b3:1a:81:fc:18:c4:86:94:9c:1c:21:c8:88:
                    22:52:d1:cc:e0:f2:fe:93:51:4b:fd:74:a6:bd:d3:
                    4e:b6:a4:07:4c:17:3a:07:c3:39:2b:c8:d0:eb:0b:
                    3c:bf:a8:48:b5:a4:7b:5c:ef:fe:0c:77:d6:aa:96:
                    2e:36:2c:f7:cc:1d:c6:c4:48:e2:51:99:7a:ec:9e:
                    0b:b1:07:4c:60:65:f1:c8:cb:52:c2:95:b6:56:a3:
                    49:35:0b:44:fc:32:e1:d0:63:30:83:51:58:47:ae:
                    67:e9:6b:85:d9:b8:ec:86:d2:20:2a:84:b0:52:46:
                    92:83:d0:16:8a:40:d8:f1:0c:1e:9c:3b:a5:ab:81:
                    03:ed:ec:8a:4e:95:6d:4f:74:c3:28:5b:5d:ae:82:
                    93:af:c8:5c:04:51:a8:b7:cd:9b:67:f2:86:45:12:
                    7a:ee:e3:3a:8e:c8:c8:d4:b5:69:f6:a6:a6:bb:c5:
                    30:60:9f:66:a5:77:65:c9:af:b2:0d:3f:90:07:d0:
                    06:67:51:4c:f2:a3:33:d7:a5:29:c1:95:43:f9:74:
                    cd:8f:19:df:32:58:27:57:1b:7e:8a:2c:c9:a7:9f:
                    06:d3:02:94:5d:d3:0e:f6:4d:f8:14:dd:3c:78:e0:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:FD:1A:38:FC:70:22:79:B0:D1:68:FB:C2:4C:64:C9:DA:08:5C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n9v9Gjj8cCJ5sNFo-8JMZMnaCFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:8d:4a:0d:02:9e:ba:ba:98:17:c8:97:cd:ff:ea:3a:3a:
         fa:b7:62:6d:85:e8:46:57:41:a5:f4:55:6a:54:25:88:3f:c1:
         5e:8a:7d:70:71:ba:54:0a:1f:00:e7:c8:02:0b:25:df:1d:bc:
         33:31:45:e4:f5:f5:56:4e:b0:0c:7f:84:89:4d:dc:08:2c:47:
         0a:17:0f:f0:85:2c:49:3f:0c:35:24:50:32:f6:0e:36:d6:d7:
         4a:f4:b3:59:d1:74:1a:1e:35:e0:c0:83:b9:29:8c:00:84:6c:
         41:a4:66:82:9f:f6:11:4e:dc:1d:0f:76:3a:51:6f:32:de:5f:
         48:e5:60:53:92:d9:d0:c5:78:dc:7c:b2:4e:18:ee:89:cc:d3:
         5d:7b:18:0f:98:6c:78:ac:a7:0e:a3:fd:ce:7e:ce:93:af:b4:
         16:e0:b8:36:5e:39:d1:d3:bc:14:e4:f9:e4:45:fc:db:40:03:
         1f:6a:6f:6c:3f:3b:26:30:f8:b2:95:de:e9:33:36:2a:ce:06:
         c2:26:09:25:d5:ec:92:6a:be:58:0b:9f:b7:b1:37:1c:f6:7c:
         d3:6f:1d:c3:49:83:65:38:0e:bc:cb:ff:5a:39:04:b4:93:e1:
         da:b3:79:d7:4b:e0:b2:04:d8:24:03:8c:de:3c:fd:d4:df:fc:
         7a:62:e1:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaNAiugWRgmKxSEeVV4ubiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MDkxNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmRiZmQxYTM4ZmM3MDIyNzliMGQxNjhmYmMyNGM2NGM5ZGEwODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5dM14LrLaC6XvpAqp9XlrMagfwY
xIaUnBwhyIgiUtHM4PL+k1FL/XSmvdNOtqQHTBc6B8M5K8jQ6ws8v6hItaR7XO/+
DHfWqpYuNiz3zB3GxEjiUZl67J4LsQdMYGXxyMtSwpW2VqNJNQtE/DLh0GMwg1FY
R65n6WuF2bjshtIgKoSwUkaSg9AWikDY8QwenDulq4ED7eyKTpVtT3TDKFtdroKT
r8hcBFGot82bZ/KGRRJ67uM6jsjI1LVp9qamu8UwYJ9mpXdlya+yDT+QB9AGZ1FM
8qMz16UpwZVD+XTNjxnfMlgnVxt+iizJp58G0wKUXdMO9k34FN08eOAzNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/b/Ro4/HAiebDRaPvCTGTJ2ghcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbjl2OUdqajhjQ0o1c05Gby04Sk1aTW5hQ0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABzbjUoNAp66upgXyJfN
/+o6Ovq3Ym2F6EZXQaX0VWpUJYg/wV6KfXBxulQKHwDnyAILJd8dvDMxReT19VZO
sAx/hIlN3AgsRwoXD/CFLEk/DDUkUDL2DjbW10r0s1nRdBoeNeDAg7kpjACEbEGk
ZoKf9hFO3B0PdjpRbzLeX0jlYFOS2dDFeNx8sk4Y7onM0117GA+YbHispw6j/c5+
zpOvtBbguDZeOdHTvBTk+eRF/NtAAx9qb2w/OyYw+LKV3ukzNirOBsImCSXV7JJq
vlgLn7exNxz2fNNvHcNJg2U4DrzL/1o5BLST4dqzeddL4LIE2CQDjN48/dTf/Hpi
4Zg=
-----END CERTIFICATE-----
Generated at Tue Dec 23 06:49:47 2025 by rpki-client