This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWk_XQiaazH10JtmMgZN-YeXWwA.roa
File:                     tWk_XQiaazH10JtmMgZN-YeXWwA.roa (raw, json)
Hash identifier:          YqZk4PzfZvIIfFXhtrUkxnHSQfuUntG5ILIqgy6CV68=
Subject key identifier:   B5:69:3F:5D:08:9A:6B:31:F5:D0:9B:66:32:06:4D:F9:87:97:5B:00
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01898A98F39D46C66F69FE49EBC84A8CBD6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWk_XQiaazH10JtmMgZN-YeXWwA.roa
Signing time:             Tue 25 Jul 2023 01:10:26 +0000
ROA not before:           Tue 25 Jul 2023 01:10:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8a:98:f3:9d:46:c6:6f:69:fe:49:eb:c8:4a:8c:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 25 01:10:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5693f5d089a6b31f5d09b6632064df987975b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:e3:99:b3:d5:80:c3:fd:07:7d:20:ca:34:
                    b7:19:62:f2:2a:c4:95:03:74:c6:ff:56:c2:a3:73:
                    5a:6e:87:80:20:33:d9:7a:49:e6:b8:2e:49:7e:74:
                    65:b1:bd:67:43:18:71:19:1f:54:50:37:67:59:74:
                    04:5a:59:38:2b:64:96:1e:7f:00:36:59:c7:6f:58:
                    1e:75:19:e7:e1:70:d6:35:4a:30:e7:7d:85:30:7d:
                    9d:1c:03:26:21:4d:95:bd:1b:25:62:2a:b3:88:50:
                    8d:a3:1d:5c:b0:fe:ca:b7:ed:c5:ed:4f:43:05:33:
                    6b:9b:31:ed:c0:56:6d:db:93:3a:e0:ae:9d:ea:62:
                    e1:b7:77:84:d5:e8:24:55:af:40:ab:2a:02:38:4c:
                    43:79:db:8a:fa:b5:48:34:3e:a9:5f:fc:f0:fe:d8:
                    e5:7f:2d:bd:42:f9:e2:b3:dc:32:18:5e:bf:8b:39:
                    0e:4e:f6:7e:79:1a:9f:36:4e:6d:9c:c8:06:f7:3f:
                    6b:0f:81:76:44:f3:d4:18:8d:a8:e1:48:c8:6c:de:
                    64:c0:cd:0b:17:75:a3:19:dc:bd:c0:89:66:cf:c6:
                    0d:1a:a2:cd:3f:20:78:6b:c6:d2:57:c9:ab:b2:38:
                    20:e6:f7:f6:ce:66:88:f3:43:43:78:04:49:cf:23:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:3F:5D:08:9A:6B:31:F5:D0:9B:66:32:06:4D:F9:87:97:5B:00
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWk_XQiaazH10JtmMgZN-YeXWwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:15:ed:e9:96:ca:94:76:a2:a0:dc:b3:15:e4:3b:75:9c:20:
         b3:86:08:8b:41:2f:3a:eb:fe:94:63:a2:27:f7:95:45:37:1f:
         f6:a5:56:f4:bd:7c:b3:15:38:9c:fd:13:5f:52:fd:72:0d:09:
         ad:71:42:b6:7e:ad:1c:cb:3f:e9:61:1d:0b:5d:07:1d:af:2c:
         be:02:18:bd:2a:b4:80:5f:66:bd:d9:67:8b:3d:64:bd:64:5a:
         93:da:c2:fa:45:35:9c:7f:1a:1c:24:88:d5:35:30:84:cb:48:
         b4:a6:f1:f9:ee:87:d7:d3:63:50:85:e9:79:ae:d1:be:dd:ae:
         f3:34:3c:99:f7:9a:09:d8:21:27:be:71:58:4e:23:fa:59:1b:
         33:1a:e6:a8:c1:9c:f5:86:9b:ad:2c:9c:bf:51:5d:01:ce:0d:
         90:b8:10:0f:f3:58:88:81:fa:20:d1:f3:bf:72:9e:e7:e1:7b:
         64:cc:5f:d3:f8:ee:52:21:67:82:00:7f:5f:aa:af:b7:c3:91:
         e2:e2:db:69:a5:4c:d0:8f:6b:e5:4e:34:9d:58:76:2e:a9:48:
         44:0a:b7:c4:94:31:35:55:b9:a5:df:b6:75:de:ba:7a:13:26:
         8a:dc:b6:a6:c4:99:6e:66:c6:2c:dd:77:df:50:51:bd:5f:46:
         a5:0a:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:17:29 2025 by rpki-client