This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRJBud3S467hv1xkfznUAZw1duQ.roa
File:                     oRJBud3S467hv1xkfznUAZw1duQ.roa (raw, json)
Hash identifier:          3c7X3/lu2z9tU14VsGX2FbSLnS+Rsnd0D8VtkvDtufA=
Subject key identifier:   A1:12:41:B9:DD:D2:E3:AE:E1:BF:5C:64:7F:39:D4:01:9C:35:76:E4
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       880B7A08
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRJBud3S467hv1xkfznUAZw1duQ.roa
Signing time:             Sun 29 May 2022 00:10:13 +0000
ROA not before:           Sun 29 May 2022 00:10:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282453512 (0x880b7a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 29 00:10:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a11241b9ddd2e3aee1bf5c647f39d4019c3576e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:ad:e9:a1:02:91:ab:70:71:89:a4:88:f1:
                    b2:dc:3d:b6:c9:2f:62:07:6c:22:74:48:52:23:f3:
                    c7:f4:75:34:bd:b7:87:c3:31:2c:a6:3d:cb:91:40:
                    ed:a6:a7:cf:75:0e:16:13:e2:c3:5b:12:e6:fc:e1:
                    bd:c1:07:3e:b6:2e:d2:12:60:49:a2:35:0a:72:50:
                    6b:d2:1a:e4:d8:93:04:7b:81:6e:a0:9f:f1:bf:f6:
                    20:15:c4:82:21:79:4b:f1:bf:eb:c2:52:a8:01:7f:
                    3f:21:b5:60:c4:5c:44:0b:7b:5a:08:b7:17:e7:08:
                    de:d0:f0:20:55:1c:56:d8:06:4c:59:78:db:06:ab:
                    00:39:4d:db:b1:54:7f:05:61:7a:81:85:77:94:ed:
                    4a:8f:65:6c:1b:3c:16:e8:5a:60:ca:15:41:69:15:
                    7e:ca:eb:3e:fa:98:c0:20:1f:b4:1f:47:2b:2b:5e:
                    5d:3c:cf:b0:c5:20:4d:be:d4:94:63:57:61:f0:09:
                    d2:6e:db:f4:3e:34:09:9c:ab:a5:05:9a:60:46:d0:
                    c3:4e:66:65:e6:4a:20:52:c3:5b:19:97:8e:7f:3d:
                    9e:60:cf:ae:ee:68:f8:86:cd:85:9a:88:f0:a5:09:
                    88:64:bf:69:e5:23:a6:ab:57:3f:b4:91:2a:31:33:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:41:B9:DD:D2:E3:AE:E1:BF:5C:64:7F:39:D4:01:9C:35:76:E4
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRJBud3S467hv1xkfznUAZw1duQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:b7:c4:7f:ed:24:a8:7e:bb:56:10:36:27:72:22:da:a6:
         d0:28:89:80:70:bf:63:bd:26:ff:30:2f:bd:56:23:7d:67:2d:
         b5:28:bc:94:11:4e:3e:26:f6:b2:74:4d:67:6e:3d:dd:8a:ed:
         7d:8d:ae:fa:42:ac:2a:25:34:4c:9f:8f:42:ee:3b:7f:5a:26:
         ec:c2:59:4f:d0:39:f7:f6:57:42:da:82:50:08:18:df:14:21:
         6e:71:07:71:70:2a:e3:7a:78:2c:0f:f8:36:a1:8b:1f:88:f2:
         14:9b:ef:40:a8:5d:1d:c7:bb:a3:88:81:bc:84:43:2e:e8:c8:
         29:89:9d:4f:89:b5:5a:e9:68:4a:d8:61:22:3d:dc:f4:04:84:
         5b:0d:77:fb:4e:23:ed:95:33:38:39:ca:c9:4d:22:41:d7:d8:
         60:6a:a6:6d:d0:4f:d6:05:56:04:e2:e8:0d:3c:df:cf:b5:a7:
         a1:05:dd:d6:f2:08:65:70:79:97:8f:a1:18:74:64:5d:b0:e9:
         5d:0a:1e:d6:5a:c7:69:d2:8f:55:83:e6:37:b6:5d:ad:dd:05:
         e4:a2:ba:89:75:6b:73:f0:49:ce:2c:68:88:17:f7:63:a0:45:
         84:99:c1:c8:c3:43:05:6e:03:de:36:85:fa:0b:da:45:fe:e3:
         d1:f1:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:14 2025 by rpki-client