This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np0rCpBrsz0g5DNgadXIA8fpahc.roa
File:                     np0rCpBrsz0g5DNgadXIA8fpahc.roa (raw, json)
Hash identifier:          n9BZD2wGexqqR58+f9mNSeyw4texT8uVy6OPjs3hx6Y=
Subject key identifier:   9E:9D:2B:0A:90:6B:B3:3D:20:E4:33:60:69:D5:C8:03:C7:E9:6A:17
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01860113EBD2486742E53758C95DBDC5F5C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np0rCpBrsz0g5DNgadXIA8fpahc.roa
Signing time:             Mon 30 Jan 2023 05:08:48 +0000
ROA not before:           Mon 30 Jan 2023 05:08:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:01:13:eb:d2:48:67:42:e5:37:58:c9:5d:bd:c5:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan 30 05:08:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e9d2b0a906bb33d20e4336069d5c803c7e96a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:7c:b8:ea:6d:53:18:82:43:b0:e0:f1:a4:
                    3c:f3:d8:b5:38:95:d9:ec:cb:0f:73:4c:9c:b7:e2:
                    44:f5:33:ba:63:b3:61:30:a7:dc:c4:12:91:20:ea:
                    f8:ad:54:32:42:25:5c:3c:bc:d8:5d:98:cb:7c:60:
                    cf:60:a1:45:81:ee:69:7c:48:b6:28:e3:0d:b3:2b:
                    0f:6c:d1:91:bb:2e:b4:1e:3c:44:e9:4e:57:1a:15:
                    1c:a4:27:ef:5f:a0:a5:1b:24:d3:75:c1:61:ce:7a:
                    d7:45:f4:d4:a4:7a:77:fe:db:f2:bf:47:6c:8b:a0:
                    50:4c:38:a0:e4:9e:5c:f2:b6:66:5c:8b:14:83:ed:
                    97:f3:d0:de:a6:3c:19:49:e7:58:92:43:8d:3f:0d:
                    73:40:21:69:a0:e2:c0:7e:f7:63:99:ab:44:d7:bf:
                    85:49:11:1b:ab:fd:3d:3a:22:8a:36:f3:34:8f:7a:
                    ec:99:17:a8:04:89:e7:7f:18:46:fc:05:61:23:bb:
                    e5:c3:56:d5:a7:26:d3:39:88:1f:0a:39:67:93:58:
                    c4:98:51:3f:bb:23:4c:80:f8:2c:98:97:12:77:16:
                    a9:ca:fc:3d:15:31:59:18:6e:c3:9f:69:8c:fa:59:
                    6b:8d:a9:b3:79:bc:ed:91:6a:0c:e9:8c:4b:38:6a:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:2B:0A:90:6B:B3:3D:20:E4:33:60:69:D5:C8:03:C7:E9:6A:17
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np0rCpBrsz0g5DNgadXIA8fpahc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:d4:12:92:e3:69:b9:44:ec:93:d5:98:53:58:9c:fd:d7:
         f5:3e:68:c8:30:89:f5:b5:c5:7c:a9:8c:93:8a:a6:c9:11:59:
         0f:d2:0c:81:ff:2c:c0:0e:34:ee:19:46:70:7f:1f:0c:5f:5d:
         62:61:45:fa:41:d4:01:38:84:d9:ea:42:8a:4a:0c:90:da:e7:
         16:95:7c:8d:93:65:cd:d7:4a:b9:b7:42:76:e0:97:95:4d:37:
         e2:7d:51:ad:66:1b:ed:2f:f6:53:1d:00:d8:fa:58:63:be:6d:
         5e:90:f6:58:f8:f9:c2:2b:75:a2:cb:7e:83:e9:95:0b:34:78:
         e6:11:c3:4f:dd:57:0c:7e:de:6e:29:4d:7d:60:21:ed:1e:92:
         05:4e:9e:c8:bc:8b:c7:a9:a5:9c:fe:51:01:ed:d1:d6:c5:7c:
         89:22:ea:e9:65:08:b1:e3:d2:42:38:7c:77:7d:01:a1:4e:81:
         bb:f0:fa:25:39:95:53:29:b8:37:cf:75:c5:6e:db:d7:1e:38:
         c3:30:59:f4:d1:6c:5f:9a:c5:41:a4:26:bc:4e:19:48:79:3f:
         d4:05:a0:85:2d:db:5e:04:eb:23:c6:5b:22:a0:3a:26:40:03:
         0f:de:da:4e:c2:71:af:76:74:42:d0:e5:fd:2d:ba:69:14:2e:
         70:99:32:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYBE+vSSGdC5TdYyV29xfXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTMwMDUwODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTlkMmIwYTkwNmJiMzNkMjBlNDMzNjA2OWQ1YzgwM2M3ZTk2YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9l8uOptUxiCQ7Dg8aQ889i1OJXZ
7MsPc0yct+JE9TO6Y7NhMKfcxBKRIOr4rVQyQiVcPLzYXZjLfGDPYKFFge5pfEi2
KOMNsysPbNGRuy60HjxE6U5XGhUcpCfvX6ClGyTTdcFhznrXRfTUpHp3/tvyv0ds
i6BQTDig5J5c8rZmXIsUg+2X89DepjwZSedYkkONPw1zQCFpoOLAfvdjmatE17+F
SREbq/09OiKKNvM0j3rsmReoBInnfxhG/AVhI7vlw1bVpybTOYgfCjlnk1jEmFE/
uyNMgPgsmJcSdxapyvw9FTFZGG7Dn2mM+llrjamzebztkWoM6YxLOGqdBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ6dKwqQa7M9IOQzYGnVyAPH6WoXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbnAwckNwQnJzejBnNUROZ2FkWElBOGZwYWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAITi1BKS42m5ROyT1ZhT
WJz91/U+aMgwifW1xXypjJOKpskRWQ/SDIH/LMAONO4ZRnB/HwxfXWJhRfpB1AE4
hNnqQopKDJDa5xaVfI2TZc3XSrm3Qnbgl5VNN+J9Ua1mG+0v9lMdANj6WGO+bV6Q
9lj4+cIrdaLLfoPplQs0eOYRw0/dVwx+3m4pTX1gIe0ekgVOnsi8i8eppZz+UQHt
0dbFfIki6ullCLHj0kI4fHd9AaFOgbvw+iU5lVMpuDfPdcVu29ceOMMwWfTRbF+a
xUGkJrxOGUh5P9QFoIUt214E6yPGWyKgOiZAAw/e2k7Cca92dELQ5f0tumkULnCZ
Mnw=
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:04:36 2025 by rpki-client