This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDDIiZRuaGFaFIP026fgsoFhwMY.roa
File:                     sDDIiZRuaGFaFIP026fgsoFhwMY.roa (raw, json)
Hash identifier:          MsbWORtJXtmcgv1twYqbZHY54KcWEIahU6OQuCJb/F0=
Subject key identifier:   B0:30:C8:89:94:6E:68:61:5A:14:83:F4:DB:A7:E0:B2:81:61:C0:C6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188202E0FEA43D19F3FACB91B8BA9115B89
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDDIiZRuaGFaFIP026fgsoFhwMY.roa
Signing time:             Mon 15 May 2023 16:11:09 +0000
ROA not before:           Mon 15 May 2023 16:11:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:2e:0f:ea:43:d1:9f:3f:ac:b9:1b:8b:a9:11:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 15 16:11:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b030c889946e68615a1483f4dba7e0b28161c0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:15:48:08:a4:58:74:f3:cc:40:54:11:48:
                    e4:9c:0a:5d:4f:db:98:5c:d7:57:02:dd:a9:fe:ca:
                    ac:d0:7b:53:bc:aa:cf:ab:2d:d3:d7:7d:8d:89:c2:
                    12:78:aa:4c:cd:eb:0f:ff:94:38:89:29:94:dd:9d:
                    48:0d:35:c7:ef:d8:fb:8a:05:7c:db:ea:d3:47:61:
                    32:7d:e5:6a:f2:38:ba:92:f5:92:f9:25:90:92:c4:
                    23:52:1a:8c:0e:f2:7f:48:d1:ed:52:37:69:70:ff:
                    56:98:b2:b7:26:f9:0f:46:6c:c6:da:23:60:cf:9b:
                    3d:ff:c3:66:77:0d:72:d8:6a:18:e1:93:23:33:26:
                    f3:17:61:5a:3c:e1:5f:38:a4:41:fa:80:ad:42:1d:
                    c0:1d:b0:74:83:8d:a0:5e:7c:3d:27:96:17:d4:c2:
                    23:4d:df:83:b3:68:54:92:c8:1b:05:82:fc:f6:6f:
                    97:d8:9c:c2:60:95:9c:ea:91:c2:8f:1a:da:10:5b:
                    97:63:07:73:4c:0e:a7:04:8a:78:b5:67:e7:e2:e5:
                    67:77:dd:cd:1c:a5:d4:4b:75:bf:24:f5:71:60:d0:
                    dc:d8:da:ee:38:27:5c:9d:33:67:9f:a8:cf:f5:4f:
                    cb:46:8a:ff:79:47:dd:31:16:01:97:86:12:90:d7:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:C8:89:94:6E:68:61:5A:14:83:F4:DB:A7:E0:B2:81:61:C0:C6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDDIiZRuaGFaFIP026fgsoFhwMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:d9:18:90:79:e3:12:9f:34:3c:4e:e7:20:de:13:e8:69:fd:
         d5:bb:02:0c:15:e8:00:98:d7:46:8f:74:66:25:0e:56:3a:13:
         d9:65:1a:86:67:77:30:ba:4a:22:68:21:13:5f:7c:5f:94:c2:
         c5:31:62:f4:49:74:7a:78:fa:53:c5:7b:dc:94:3c:73:fb:50:
         ad:ac:8c:90:72:ec:c2:ea:42:2d:1b:b4:fe:ce:fd:1c:69:3a:
         88:aa:ac:29:eb:70:70:56:ca:53:9a:44:c7:ec:ce:80:ea:f1:
         3a:16:ba:31:b5:98:8a:fe:9f:95:d9:d9:63:34:27:1b:9e:fa:
         45:b7:16:72:66:a9:9a:09:ad:7a:c8:72:b5:70:6c:ee:f2:01:
         15:eb:dd:e5:f4:92:36:d0:f5:a0:ec:18:ea:2a:a4:ce:f9:52:
         67:25:72:17:2c:96:49:7a:10:40:18:51:61:bc:f1:25:9b:79:
         55:94:de:09:07:b4:62:08:29:a2:e9:aa:5e:e9:b4:86:7f:75:
         be:cb:c0:3d:39:35:c2:2e:96:72:17:95:41:06:0c:36:c2:4a:
         17:6a:31:52:d3:6e:22:2d:37:e6:02:35:b1:93:7d:fb:0c:f1:
         6a:1a:7b:4c:46:bf:68:1d:fc:d1:5f:b3:08:ba:02:4a:6e:88:
         18:1b:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:39:37 2025 by rpki-client