This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/omlXGPINv75yEahLSsIQgkyfUSE.roa
File:                     omlXGPINv75yEahLSsIQgkyfUSE.roa (raw, json)
Hash identifier:          tgRuKXkgnZhLCeyFv9fJr+rT+yMrNCZDjT3wYVjaBa8=
Subject key identifier:   A2:69:57:18:F2:0D:BF:BE:72:11:A8:4B:4A:C2:10:82:4C:9F:51:21
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8F5F9A20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/omlXGPINv75yEahLSsIQgkyfUSE.roa
Signing time:             Fri 24 Jun 2022 03:11:03 +0000
ROA not before:           Fri 24 Jun 2022 03:11:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405407264 (0x8f5f9a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 24 03:11:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2695718f20dbfbe7211a84b4ac210824c9f5121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:b3:0a:78:2f:ae:c6:28:72:cf:40:18:e2:
                    82:03:34:00:92:91:cf:b2:7d:29:ce:08:b6:f4:15:
                    dd:3d:ec:5b:c8:b2:e4:60:64:a3:ef:56:99:b9:ac:
                    ba:21:f4:d6:7f:39:1d:8e:6a:76:60:2c:e4:7d:ee:
                    93:6d:d9:90:c5:7d:e6:a4:db:6e:3e:71:8f:1c:ac:
                    c4:a1:15:0b:e2:52:b5:b5:70:79:43:9f:14:4d:a6:
                    24:d5:45:e3:b1:7b:8f:af:31:da:e7:a4:17:95:8f:
                    03:35:39:f3:39:01:d5:5b:85:df:8e:43:12:a8:df:
                    08:b7:9b:a5:9c:ac:23:79:37:d2:c4:0c:55:e7:90:
                    5c:ef:7e:0f:c5:65:23:d6:47:02:42:86:98:6c:61:
                    4e:87:d5:e0:41:b4:de:1a:d8:ba:77:a7:94:89:1f:
                    89:7a:8d:9e:7b:e2:f5:66:55:bf:e5:86:f2:8d:51:
                    90:1f:5c:28:9c:e7:b2:6d:23:0c:9f:87:92:7b:c7:
                    39:7b:94:d8:23:e7:09:75:2e:0c:90:f4:6c:21:8e:
                    53:ce:e9:2c:0e:2e:0d:81:88:4d:d9:9a:46:19:14:
                    ec:98:d3:e8:11:bb:fe:ea:4d:9c:34:50:c5:65:e9:
                    8c:29:6b:bc:46:c1:f0:3c:98:37:8b:e1:9d:2e:8c:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:57:18:F2:0D:BF:BE:72:11:A8:4B:4A:C2:10:82:4C:9F:51:21
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/omlXGPINv75yEahLSsIQgkyfUSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:cd:25:0e:5d:86:34:0a:a3:57:17:b5:c3:ab:8e:3b:b4:
         b4:75:95:59:df:98:8a:c3:8e:f0:fa:15:98:d1:0b:c5:26:f1:
         3d:c8:96:bd:d5:94:37:fe:1f:df:49:f1:89:dd:a2:2b:1a:76:
         4d:f3:e0:0c:08:24:c0:14:f3:17:17:cd:c2:dd:d1:82:49:ce:
         00:b8:51:60:80:e3:35:c0:92:9d:4b:5c:4b:6e:13:f2:7d:67:
         c4:98:72:88:a9:cf:a5:5c:8d:f2:2b:43:9b:58:5b:1c:5f:e7:
         61:02:21:e1:56:96:7f:91:95:73:9b:b2:f2:2d:b9:d9:d3:4c:
         7e:71:96:42:95:b9:44:a1:21:fb:da:7e:b7:f1:25:59:37:81:
         51:17:83:b5:72:11:70:70:1a:3d:45:b2:ef:de:b5:c2:68:e2:
         b1:22:e9:e0:06:74:c3:90:50:e0:d3:da:08:6c:91:f7:a4:18:
         2e:1d:aa:a3:e1:2d:34:41:11:02:87:f6:82:6d:20:38:21:cf:
         78:87:77:90:8a:52:ab:61:de:26:71:05:cc:bb:5e:73:67:00:
         0c:57:b7:50:73:6c:dc:b7:6f:0f:8b:db:d0:e9:bb:6d:60:0f:
         39:a0:42:90:76:96:54:c7:b0:c2:ae:4d:8a:40:4c:66:76:fc:
         e9:7b:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:01:52 2025 by rpki-client