This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np2htL-F64YPX24Up9yM9qXmxEU.roa
File:                     np2htL-F64YPX24Up9yM9qXmxEU.roa (raw, json)
Hash identifier:          i7xid+47/XaxdfJUHIZCrSXAPQyIdIDE+JoBp3YwuCg=
Subject key identifier:   9E:9D:A1:B4:BF:85:EB:86:0F:5F:6E:14:A7:DC:8C:F6:A5:E6:C4:45
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01871A9FB5F5444975D261E769DC35819D53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np2htL-F64YPX24Up9yM9qXmxEU.roa
Signing time:             Sat 25 Mar 2023 21:14:47 +0000
ROA not before:           Sat 25 Mar 2023 21:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:1a:9f:b5:f5:44:49:75:d2:61:e7:69:dc:35:81:9d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 25 21:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e9da1b4bf85eb860f5f6e14a7dc8cf6a5e6c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:3a:9f:1c:80:e6:67:e8:bb:be:7c:7b:93:
                    c7:fc:9b:40:0b:9f:80:29:9f:c5:ad:f9:02:13:41:
                    28:a3:1d:32:30:5d:99:e6:bc:91:4a:2d:d0:40:14:
                    99:c5:8b:6a:c7:f4:97:d6:95:9c:23:99:7d:fb:9e:
                    89:c2:c1:78:30:e0:7c:33:06:3d:d1:db:15:1c:bd:
                    d0:dd:95:19:bc:bb:96:00:2f:65:5f:e3:3a:40:70:
                    93:45:db:9c:3f:6d:89:8e:8d:3e:c4:a5:4e:3c:a9:
                    e3:1c:cc:1e:b8:96:77:9b:7a:dd:01:26:69:c5:22:
                    24:a8:76:22:78:10:e1:6c:11:a3:4b:17:4f:4d:b1:
                    a3:b3:bc:ae:16:03:a4:71:6d:44:7a:95:b4:75:80:
                    97:35:40:18:ef:d3:83:c1:e7:56:84:53:5f:cf:00:
                    19:11:9c:0c:28:8e:cf:7d:09:6a:17:0d:48:ee:80:
                    ce:de:eb:da:cf:31:bf:fb:8e:a2:44:49:4f:34:c5:
                    18:a1:c8:2c:5d:90:a0:c2:a3:db:29:4a:4e:0a:73:
                    05:57:ef:8e:49:65:91:be:3d:22:76:0c:cf:e4:e6:
                    b1:b7:29:00:70:1a:e5:80:92:eb:b0:ec:0f:7b:dd:
                    49:7c:d7:b9:d8:2d:cc:a1:2f:24:03:c8:ab:80:da:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:A1:B4:BF:85:EB:86:0F:5F:6E:14:A7:DC:8C:F6:A5:E6:C4:45
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np2htL-F64YPX24Up9yM9qXmxEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:58:52:dc:7a:dc:af:a2:ad:7d:fc:0e:5c:66:0c:6e:7d:
         ba:d2:84:e7:82:43:db:a9:12:03:27:fd:61:92:5e:5a:8d:dc:
         70:0a:10:8c:81:64:53:c3:ba:b7:cf:7a:91:84:c4:97:e1:0e:
         b3:96:2b:23:51:d2:33:c5:72:cc:8a:7c:af:bb:f6:99:a3:7a:
         a4:90:8a:83:3f:8c:dc:cb:f2:98:b8:d1:d4:ab:a0:ae:12:c3:
         fc:fe:08:97:a3:4e:80:f3:a1:dc:59:bb:20:74:88:af:8e:28:
         f3:ad:3b:60:60:b5:bb:2c:6d:7b:68:9d:a3:13:bb:32:37:4f:
         2b:aa:91:d0:f4:ad:cc:6d:69:a6:90:74:4a:f5:48:81:32:86:
         3e:76:2d:af:0a:ff:a9:eb:0d:10:6f:02:c7:a4:6f:e4:ca:cc:
         7b:87:c1:09:60:bb:bf:d5:26:b8:96:fd:c8:25:2a:4c:48:ef:
         26:d4:96:1d:34:66:ee:80:f1:e6:73:3c:bc:61:74:83:70:d1:
         5f:66:ed:50:4e:48:e1:fa:a6:f1:1a:eb:fa:6b:5e:e3:df:b6:
         2c:97:f4:05:fe:70:3d:36:aa:0e:fb:e7:6f:cd:a1:22:c5:1d:
         84:75:08:01:5b:b2:b7:aa:34:77:e3:18:4a:d9:1a:6a:73:e5:
         49:b7:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----