This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP3Xl-294h3IecO6dzFFrFb08HM.roa
File:                     uP3Xl-294h3IecO6dzFFrFb08HM.roa (raw, json)
Hash identifier:          CT0sen2dBTsMJYVlG6bruiq3gE4eTSmUvECtyp/0Tco=
Subject key identifier:   B8:FD:D7:97:ED:BD:E2:1D:C8:79:C3:BA:77:31:45:AC:56:F4:F0:73
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018878945C20E0B32207569B3351F13DD189
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP3Xl-294h3IecO6dzFFrFb08HM.roa
Signing time:             Thu 01 Jun 2023 20:09:28 +0000
ROA not before:           Thu 01 Jun 2023 20:09:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:78:94:5c:20:e0:b3:22:07:56:9b:33:51:f1:3d:d1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  1 20:09:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8fdd797edbde21dc879c3ba773145ac56f4f073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:b8:1c:1a:2f:fa:9c:40:cc:02:fc:bb:f2:
                    dd:db:4a:db:3e:d4:f5:fd:de:ca:66:05:8c:61:5e:
                    d1:23:f3:9f:b2:c4:db:a0:86:8b:54:3c:4d:9e:d7:
                    b2:19:ed:e0:93:36:e7:1c:3c:91:62:23:d7:e6:d2:
                    38:76:bb:e7:31:3d:29:37:9f:ac:85:43:38:a6:23:
                    b3:c5:69:03:8e:4d:af:a9:7b:15:d7:3a:e1:58:be:
                    b7:a7:04:10:7c:ae:dd:fa:a3:20:4e:c8:24:05:95:
                    4c:59:30:86:00:06:bf:a5:59:00:63:a5:59:6b:99:
                    2c:e5:4e:d9:6a:54:98:88:c4:06:a9:76:bc:d4:d2:
                    96:48:4b:bd:c0:3d:ac:37:a9:9f:8e:01:1b:c4:c2:
                    c4:05:6f:1f:56:7d:2e:66:65:f1:ad:f3:4d:65:27:
                    5b:95:be:3e:e3:23:37:5a:82:29:6e:81:ac:d9:51:
                    ca:84:00:92:d8:3f:92:04:2e:96:4f:5b:94:a6:07:
                    c8:8a:ed:4c:5b:1f:bb:8b:91:97:48:05:b9:9a:fa:
                    a0:ca:61:37:5a:97:58:8f:c8:85:bd:33:0d:46:14:
                    23:c6:88:48:79:33:e4:d1:ab:98:59:b0:be:79:1e:
                    b3:85:76:47:cc:88:c4:80:d7:ee:7d:e1:25:2d:f8:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:D7:97:ED:BD:E2:1D:C8:79:C3:BA:77:31:45:AC:56:F4:F0:73
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP3Xl-294h3IecO6dzFFrFb08HM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:99:a8:08:25:0f:bd:1f:40:64:98:bd:19:1e:82:39:c4:
         c1:9f:d7:80:c2:8e:dd:5e:e2:60:4c:6b:46:97:3f:3c:7c:ca:
         16:9d:a0:43:90:cc:2b:e6:d7:d9:7c:61:99:5e:f2:1d:51:b2:
         ab:4d:c2:43:b7:09:20:56:6a:a2:f7:ad:67:b7:6c:54:e8:4c:
         5f:62:45:fc:21:4a:89:27:06:1b:d3:3a:f9:c5:98:72:1f:63:
         93:ec:99:80:9a:7d:6e:f9:03:db:8d:1a:c4:91:ca:a7:e0:97:
         0c:07:27:e3:02:51:46:5e:81:dc:7a:f0:4e:2a:40:c6:1c:14:
         a7:c6:38:69:a6:fa:25:a0:f6:c7:7c:82:f5:4f:80:68:10:ed:
         48:6f:4e:53:10:b9:bf:d1:1e:77:2f:b8:98:b5:ba:2b:ea:bd:
         ec:99:5e:c3:32:98:d4:ae:33:ab:30:39:2c:a5:22:83:f3:e0:
         b9:bf:0e:03:bd:a0:5e:de:f8:a0:ae:f1:33:3e:d4:fe:77:f5:
         61:33:17:cb:c2:d3:43:05:d2:d3:a3:64:02:0c:1f:52:be:05:
         25:4e:b8:f3:46:3b:9a:1a:fb:6b:da:85:ba:80:9e:cd:75:17:
         3e:45:bc:08:30:77:65:79:5c:3f:5c:ba:4d:48:19:93:4f:66:
         c5:a2:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:29:26 2025 by rpki-client