This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUz6cdvVpRMKXgUpPlycNEls998.roa
File:                     uUz6cdvVpRMKXgUpPlycNEls998.roa (raw, json)
Hash identifier:          DCBn+jg8ydLnZI+nE9eqbzuKAojGIHxfQczdrYTCyPk=
Subject key identifier:   B9:4C:FA:71:DB:D5:A5:13:0A:5E:05:29:3E:5C:9C:34:49:6C:F7:DF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01820D9429AFDE12243B689FF4F5CCF76986
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUz6cdvVpRMKXgUpPlycNEls998.roa
Signing time:             Sun 17 Jul 2022 19:13:10 +0000
ROA not before:           Sun 17 Jul 2022 19:13:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0d:94:29:af:de:12:24:3b:68:9f:f4:f5:cc:f7:69:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 17 19:13:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b94cfa71dbd5a5130a5e05293e5c9c34496cf7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:9f:3a:23:8e:81:aa:87:7b:79:60:af:78:
                    44:10:9f:30:ec:d5:3f:f7:b0:18:d5:16:d9:d7:0c:
                    e7:eb:47:4e:22:98:d6:37:3f:67:29:c0:43:f4:7c:
                    03:60:26:8b:df:a0:e1:59:ad:59:7f:95:47:ac:27:
                    64:26:2e:ec:17:eb:16:62:57:82:79:c2:a8:ee:2b:
                    7a:59:55:8b:97:da:a7:8a:89:33:02:01:45:e6:5d:
                    78:60:07:dc:41:73:30:a0:55:c0:1d:f6:0d:d8:44:
                    e7:bc:62:19:ae:83:db:82:dc:70:49:80:d3:51:72:
                    0b:e5:b5:52:84:c7:8e:2f:34:cf:9b:d4:49:89:a0:
                    5d:2a:98:ee:41:cd:c1:2f:d2:81:f8:96:f2:c6:6c:
                    e2:0e:c9:d3:97:96:38:23:8c:e6:16:09:82:43:aa:
                    16:38:b4:de:4e:d8:25:5a:76:1f:38:af:85:81:c6:
                    e1:9f:43:3d:fd:ff:72:9f:40:8b:a8:c2:c7:08:04:
                    f4:ff:e6:ce:3a:ba:6b:28:70:bd:d6:0a:21:82:96:
                    5a:54:91:70:37:a3:9d:dd:54:56:64:c7:46:a3:0c:
                    be:03:e1:1c:9e:a8:ac:29:13:b7:68:09:12:82:f0:
                    d5:f6:e4:f5:9a:56:09:1c:a6:ce:9b:80:64:9b:b7:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:FA:71:DB:D5:A5:13:0A:5E:05:29:3E:5C:9C:34:49:6C:F7:DF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUz6cdvVpRMKXgUpPlycNEls998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:82:8a:52:6a:d1:b1:c5:22:1a:fe:ff:1a:cf:42:c5:7c:
         e4:40:07:e3:8e:ca:97:d8:1b:bd:14:f9:7e:33:d6:0f:30:a6:
         c7:b8:ca:cb:a9:2d:dc:cc:66:30:3d:96:c3:ee:4e:bc:d6:4c:
         57:7d:8e:4e:79:a0:30:96:08:9e:38:ae:6a:20:de:e5:da:f9:
         63:13:8f:42:9b:d8:ff:89:b4:17:67:d5:5c:aa:1e:a9:45:33:
         ec:34:df:7e:9f:23:bd:37:25:aa:8d:f9:cb:d9:4f:fb:05:34:
         3f:fd:9e:b8:70:8c:99:d8:1f:76:fb:5c:d7:e7:9a:d8:54:eb:
         1d:0e:1f:d9:1e:3a:bd:10:c7:c5:2b:67:84:7e:31:02:dd:ab:
         c5:a3:72:ce:41:d6:36:d3:a0:3f:d6:12:40:77:2a:fb:7b:f6:
         8f:db:05:0f:f8:81:7a:31:89:89:6a:ee:30:a1:a1:0a:8d:ab:
         9b:5e:31:b5:8c:99:19:6a:f6:23:58:24:cb:71:83:04:4c:7b:
         65:80:46:1f:18:2d:19:95:a8:c7:08:cc:e4:f4:ea:e6:10:4b:
         9e:15:c0:9e:fa:b1:6d:fa:ad:66:6e:08:16:de:2f:ad:95:d1:
         3e:4c:e3:b2:b3:18:84:32:5b:b6:66:e1:68:e5:51:ec:64:a8:
         f4:d4:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:02:52 2025 by rpki-client