This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa
File:                     t9wEPaki_jSgz7o7mERNSglp-Io.roa (raw, json)
Hash identifier:          +z0sAQQKLu08PKWLt0SNOyF9YpiIGxEJ8x0khGoeg90=
Subject key identifier:   B7:DC:04:3D:A9:22:FE:34:A0:CF:BA:3B:98:44:4D:4A:09:69:F8:8A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01826F6E20682CC569A83E149A4C601BC4EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa
Signing time:             Fri 05 Aug 2022 19:14:24 +0000
ROA not before:           Fri 05 Aug 2022 19:14:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6f:6e:20:68:2c:c5:69:a8:3e:14:9a:4c:60:1b:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug  5 19:14:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7dc043da922fe34a0cfba3b98444d4a0969f88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:d1:55:82:3c:77:2e:b1:0a:b9:f5:0e:15:
                    69:b7:25:ee:06:9b:14:a4:3f:b7:86:80:ed:83:cf:
                    7d:7d:dc:bd:19:90:ac:75:c6:ef:64:f5:e0:4e:7a:
                    e6:32:3d:f8:87:ce:54:ed:ff:2f:63:4b:ff:7d:a8:
                    cc:65:53:02:13:38:0d:64:83:30:9d:c3:c0:40:dc:
                    7d:5e:6d:ec:0a:4b:0e:10:ca:eb:bd:8d:ff:e0:ed:
                    33:71:42:15:fa:a6:a1:0f:cd:04:ce:ad:0d:1b:1b:
                    94:53:6e:77:2e:41:27:90:aa:80:01:8f:b0:66:23:
                    64:bf:9b:83:92:bf:63:6f:ac:0e:08:81:47:2b:01:
                    82:a7:79:20:bc:89:28:11:10:87:b3:b8:8b:e6:4c:
                    0c:2e:f8:a9:26:7e:c2:ed:dd:28:93:81:93:2f:db:
                    10:9e:6b:7e:f6:c8:70:3c:ab:cd:a1:22:7a:a5:8f:
                    bf:bb:77:cc:05:c5:cc:51:f0:d4:10:13:c6:78:c4:
                    00:15:a4:d2:1d:ac:54:9d:6a:79:9f:6f:5f:ea:12:
                    1d:8c:80:a7:0a:e3:50:0b:3b:cd:66:df:38:91:77:
                    12:13:83:83:41:e6:fb:fc:6b:fa:e0:d0:43:6f:d5:
                    32:2a:45:f0:0f:5b:38:e3:d9:51:e1:fc:72:5f:14:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:04:3D:A9:22:FE:34:A0:CF:BA:3B:98:44:4D:4A:09:69:F8:8A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:42:99:de:f2:b9:6a:1a:86:b6:f6:09:3b:c2:4d:72:ae:
         14:32:f9:35:4a:02:ed:5d:32:7b:d1:22:e9:96:14:04:fe:7b:
         51:61:3e:6c:84:b6:d3:96:36:f1:7c:f9:7b:f9:fa:8e:5a:7e:
         7e:81:fc:4f:5b:ac:42:ac:c3:c6:26:d3:15:3b:a2:d3:82:6b:
         8a:cb:11:6c:d7:ca:c1:05:76:97:3b:e1:55:79:a2:93:a4:2f:
         c6:44:13:a5:e5:4f:2a:4b:35:c7:69:c4:a1:ab:69:d5:d3:9c:
         80:e3:df:90:e1:15:12:16:a8:ea:b9:f0:82:9e:35:61:6e:cb:
         8d:68:6c:4f:6c:fb:fa:d3:2c:15:3f:80:a0:53:ed:29:f1:58:
         6c:53:2d:a5:4b:77:54:07:78:d1:bf:e8:71:07:6d:f7:4f:a5:
         f7:5f:24:65:c8:d1:41:7d:ba:ca:9d:26:98:f4:da:f6:85:2d:
         8b:c5:8d:af:11:81:27:86:84:6e:85:d7:83:f1:35:35:83:ea:
         eb:59:95:5d:ec:aa:bc:f6:8c:06:97:97:f3:94:c4:71:78:28:
         01:10:01:6c:bf:f7:66:fe:a4:ee:74:93:32:6b:fa:5b:bb:98:
         6f:1f:f5:5f:b2:ff:b0:9e:e9:03:96:96:e5:80:dd:3e:f5:62:
         85:c2:da:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJvbiBoLMVpqD4UmkxgG8TqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA1MTkxNDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2RjMDQzZGE5MjJmZTM0YTBjZmJhM2I5ODQ0NGQ0YTA5NjlmODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTRVYI8dy6xCrn1DhVptyXuBpsU
pD+3hoDtg899fdy9GZCsdcbvZPXgTnrmMj34h85U7f8vY0v/fajMZVMCEzgNZIMw
ncPAQNx9Xm3sCksOEMrrvY3/4O0zcUIV+qahD80Ezq0NGxuUU253LkEnkKqAAY+w
ZiNkv5uDkr9jb6wOCIFHKwGCp3kgvIkoERCHs7iL5kwMLvipJn7C7d0ok4GTL9sQ
nmt+9shwPKvNoSJ6pY+/u3fMBcXMUfDUEBPGeMQAFaTSHaxUnWp5n29f6hIdjICn
CuNQCzvNZt84kXcSE4ODQeb7/Gv64NBDb9UyKkXwD1s449lR4fxyXxRS3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLfcBD2pIv40oM+6O5hETUoJafiKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDl3RVBha2lfalNnejdvN21FUk5TZ2xwLUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9gQpne8rlqGoa29gk7
wk1yrhQy+TVKAu1dMnvRIumWFAT+e1FhPmyEttOWNvF8+Xv5+o5afn6B/E9brEKs
w8Ym0xU7otOCa4rLEWzXysEFdpc74VV5opOkL8ZEE6XlTypLNcdpxKGradXTnIDj
35DhFRIWqOq58IKeNWFuy41obE9s+/rTLBU/gKBT7SnxWGxTLaVLd1QHeNG/6HEH
bfdPpfdfJGXI0UF9usqdJpj02vaFLYvFja8RgSeGhG6F14PxNTWD6utZlV3sqrz2
jAaXl/OUxHF4KAEQAWy/92b+pO50kzJr+lu7mG8f9V+y/7Ce6QOWluWA3T71YoXC
2uE=
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:19:51 2025 by rpki-client