This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYzBV18QslpiqpanM2yhYgOwyCo.roa
File:                     qYzBV18QslpiqpanM2yhYgOwyCo.roa (raw, json)
Hash identifier:          6gWk/XC7huI2Wy1d0fHwg4DsiAgyd3SZYSfBVeIDvrc=
Subject key identifier:   A9:8C:C1:57:5F:10:B2:5A:62:AA:96:A7:33:6C:A1:62:03:B0:C8:2A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01874324C048466D756942A0982C5AC54EC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYzBV18QslpiqpanM2yhYgOwyCo.roa
Signing time:             Sun 02 Apr 2023 18:04:54 +0000
ROA not before:           Sun 02 Apr 2023 18:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4324:1ac1/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:43:24:c0:48:46:6d:75:69:42:a0:98:2c:5a:c5:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  2 18:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a98cc1575f10b25a62aa96a7336ca16203b0c82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:55:dd:66:e9:0f:8e:09:fb:c4:8a:65:28:
                    91:c4:ab:06:93:84:74:5b:8d:39:98:b5:c6:e4:ac:
                    1a:44:38:6a:4c:6d:01:85:0c:c7:19:60:39:ae:71:
                    6d:e3:ab:90:76:ea:82:71:1f:bb:25:2a:52:ef:ed:
                    11:3d:19:dc:8e:cb:8f:a4:c6:0c:db:8e:d4:af:70:
                    38:38:f2:0f:e7:bb:95:00:63:57:fd:d1:77:76:a0:
                    a8:d2:95:b6:1c:f7:f9:77:d5:7d:e5:d3:90:0e:ad:
                    89:f1:c7:87:b6:79:32:da:a2:5c:6c:dd:8f:c1:54:
                    6a:bb:18:ba:5f:b2:05:98:4c:c7:57:a4:10:b3:46:
                    e0:04:46:8d:98:d8:9a:8c:45:8e:19:70:bf:69:fa:
                    42:48:ec:0c:58:75:8d:64:5a:94:4b:9f:a7:b1:b7:
                    a0:4c:94:b4:60:c0:1e:f0:9c:f3:55:5a:50:2d:b1:
                    91:14:7d:64:0a:8d:b5:c1:55:cd:fe:ec:48:fa:bb:
                    8a:0e:d9:15:24:5e:a3:a5:03:35:68:6e:cb:37:5d:
                    b3:ce:6c:0f:07:f8:d2:60:53:65:09:74:00:17:5c:
                    1b:0f:60:79:43:9f:02:fd:57:db:fc:90:53:03:fd:
                    b4:50:6f:07:21:ed:46:0b:91:2c:a4:5f:da:57:55:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:C1:57:5F:10:B2:5A:62:AA:96:A7:33:6C:A1:62:03:B0:C8:2A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYzBV18QslpiqpanM2yhYgOwyCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:7d:56:48:84:54:a6:9c:47:a2:a1:aa:40:cb:70:3f:9f:
         91:37:8c:ab:06:3d:9f:73:3a:8a:d6:01:27:a9:41:b3:0e:fa:
         99:1a:5c:d6:98:1d:69:bf:2b:6a:89:56:83:48:bd:ed:4d:8a:
         62:4b:3f:c2:eb:45:de:15:28:88:00:a2:97:69:bf:fb:72:17:
         49:02:f9:a4:d5:87:83:c3:37:fb:06:55:df:a9:72:ef:7e:ae:
         d2:2e:b8:85:19:b7:aa:dc:4e:96:e6:e6:49:48:13:a8:ca:27:
         43:4b:2a:8c:49:ec:70:7a:93:7d:7d:68:38:58:54:ff:a6:6e:
         39:8a:97:19:e9:60:23:bc:35:dd:ae:75:e8:b4:ef:67:e0:a1:
         dd:87:d4:5d:21:79:a2:c5:be:cc:02:2a:3a:15:af:88:c2:83:
         cf:bc:5a:c6:55:6f:a9:8f:91:f8:63:a1:4d:3e:8f:7c:2b:30:
         04:84:11:fd:46:5f:58:b6:c6:83:8f:64:7c:4b:6d:25:09:7c:
         0f:b9:ff:48:51:31:9a:36:6e:05:6a:12:d1:98:ee:31:83:f2:
         10:71:cc:00:c4:d3:46:77:d9:3e:d2:6b:1d:48:dc:13:2c:34:
         fe:3a:d1:7a:9a:5d:ee:d4:9f:df:52:61:2b:81:48:de:3e:2c:
         20:5a:5d:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdDJMBIRm11aUKgmCxaxU7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAyMTgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThjYzE1NzVmMTBiMjVhNjJhYTk2YTczMzZjYTE2MjAzYjBjODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0lV3WbpD44J+8SKZSiRxKsGk4R0
W405mLXG5KwaRDhqTG0BhQzHGWA5rnFt46uQduqCcR+7JSpS7+0RPRncjsuPpMYM
247Ur3A4OPIP57uVAGNX/dF3dqCo0pW2HPf5d9V95dOQDq2J8ceHtnky2qJcbN2P
wVRquxi6X7IFmEzHV6QQs0bgBEaNmNiajEWOGXC/afpCSOwMWHWNZFqUS5+nsbeg
TJS0YMAe8JzzVVpQLbGRFH1kCo21wVXN/uxI+ruKDtkVJF6jpQM1aG7LN12zzmwP
B/jSYFNlCXQAF1wbD2B5Q58C/Vfb/JBTA/20UG8HIe1GC5EspF/aV1W5JwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKmMwVdfELJaYqqWpzNsoWIDsMgqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcVl6QlYxOFFzbHBpcXBhbk0yeWhZZ093eUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHusfVZIhFSmnEeioapA
y3A/n5E3jKsGPZ9zOorWASepQbMO+pkaXNaYHWm/K2qJVoNIve1NimJLP8LrRd4V
KIgAopdpv/tyF0kC+aTVh4PDN/sGVd+pcu9+rtIuuIUZt6rcTpbm5klIE6jKJ0NL
KoxJ7HB6k319aDhYVP+mbjmKlxnpYCO8Nd2udei072fgod2H1F0heaLFvswCKjoV
r4jCg8+8WsZVb6mPkfhjoU0+j3wrMASEEf1GX1i2xoOPZHxLbSUJfA+5/0hRMZo2
bgVqEtGY7jGD8hBxzADE00Z32T7Sax1I3BMsNP460XqaXe7Un99SYSuBSN4+LCBa
XcQ=
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:59:36 2025 by rpki-client