This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q894EENqNgyavJUTUesGjmxDaZ0.roa
File:                     q894EENqNgyavJUTUesGjmxDaZ0.roa (raw, json)
Hash identifier:          RwRiWb0bRYNpmkS4/UCG19pT54SUO+jJ828nTMQgVhQ=
Subject key identifier:   AB:CF:78:10:43:6A:36:0C:9A:BC:95:13:51:EB:06:8E:6C:43:69:9D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6AB895BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q894EENqNgyavJUTUesGjmxDaZ0.roa
Signing time:             Tue 15 Feb 2022 05:24:41 +0000
ROA not before:           Tue 15 Feb 2022 05:24:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790481850 (0x6ab895ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 15 05:24:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abcf7810436a360c9abc951351eb068e6c43699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:14:25:0b:09:a4:ee:c0:2c:ab:c8:60:f7:
                    26:82:e7:33:14:d0:7c:16:c9:ab:05:68:30:e8:9f:
                    85:59:fd:dc:27:ce:c8:1a:f4:14:25:d2:f6:01:e1:
                    85:17:3b:72:48:67:7c:19:48:56:bd:0f:cb:cd:81:
                    b0:f7:62:43:d6:e2:03:48:29:9c:13:bc:92:0d:57:
                    a1:53:f5:a3:66:98:4c:81:cb:00:26:a6:80:71:85:
                    fe:d5:da:32:ed:33:36:95:4d:d0:54:96:88:3d:0a:
                    24:57:1f:a9:7e:9c:d9:41:ac:a0:ba:10:2d:d4:a0:
                    6a:7c:01:a2:65:35:cd:e1:b5:8e:a0:40:9d:53:0e:
                    de:78:55:fb:07:c2:46:8b:91:4d:ed:c3:d5:fd:f7:
                    cb:eb:fb:01:9d:34:d0:16:56:66:e4:a1:5d:53:1b:
                    f3:18:25:b2:e5:88:92:ea:22:74:05:86:53:fd:36:
                    f6:0e:02:a2:e7:12:44:f2:a0:c3:8f:74:a0:73:1c:
                    20:0d:47:f2:4f:5b:97:88:97:d0:d6:b7:9f:b7:02:
                    da:4c:10:ad:7b:75:af:d8:70:d0:a4:54:44:f2:7d:
                    26:66:52:99:ef:b0:64:3a:ac:32:9b:c4:57:a2:86:
                    d1:29:d5:6b:ae:63:b9:fa:c1:7e:04:1d:6f:55:d6:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:78:10:43:6A:36:0C:9A:BC:95:13:51:EB:06:8E:6C:43:69:9D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q894EENqNgyavJUTUesGjmxDaZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:8d:2f:33:b1:04:d2:55:02:d6:d9:fa:04:b9:43:8f:e0:
         dc:10:85:95:a3:bd:e3:9c:9e:d6:f0:cc:a5:80:14:81:70:ff:
         a3:a0:84:e6:61:f5:1f:ba:85:d0:e6:9d:ed:3d:ce:74:3d:bf:
         90:2e:3e:d0:dc:9e:12:25:96:22:ce:00:a5:54:f0:b2:8f:bd:
         60:f8:45:ed:59:62:45:aa:61:11:fa:02:77:23:f7:10:cd:31:
         bc:8f:ad:a9:31:c5:7f:c9:a3:dd:34:a9:00:6e:e8:f0:ad:d8:
         b9:79:c6:8b:f5:42:09:37:9e:63:21:05:76:03:68:07:2e:cb:
         52:09:31:69:d8:92:30:2d:08:3f:25:59:ee:b8:01:f3:6d:ce:
         db:ef:5d:c1:3e:dd:e1:ec:68:e7:52:81:01:f9:80:b4:75:cd:
         74:54:33:8a:89:cf:35:04:48:5c:5e:20:79:c0:ed:5c:78:7e:
         b3:85:06:2a:97:da:7e:6d:9b:dc:97:bf:8e:a0:40:71:f3:68:
         0a:7c:cd:7d:11:c3:04:67:e8:d3:cb:75:85:f2:62:c5:ae:a2:
         a2:0e:3e:f4:56:fb:dd:7f:97:e7:c1:6b:79:f9:44:80:70:ce:
         4d:87:3f:cb:38:18:f1:53:b0:6c:be:a1:f7:8e:ff:c2:8a:f4:
         83:d5:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:14:27 2025 by rpki-client