This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w9-_LYuDAclKJsPXjmlYZ_ungIE.roa
File:                     w9-_LYuDAclKJsPXjmlYZ_ungIE.roa (raw, json)
Hash identifier:          mOvm6Rdy77LQBnDlTkpyzZAbI//cV5h0sAH/Q+tP96I=
Subject key identifier:   C3:DF:BF:2D:8B:83:01:C9:4A:26:C3:D7:8E:69:58:67:FB:A7:80:81
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188A56DBC47417DB5B064D2C1E211526076
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w9-_LYuDAclKJsPXjmlYZ_ungIE.roa
Signing time:             Sat 10 Jun 2023 13:10:12 +0000
ROA not before:           Sat 10 Jun 2023 13:10:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a5:6d:bc:47:41:7d:b5:b0:64:d2:c1:e2:11:52:60:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 10 13:10:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3dfbf2d8b8301c94a26c3d78e695867fba78081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:5e:8a:89:63:e1:cf:ed:9a:72:85:f8:28:
                    3a:a1:4e:43:da:06:88:3c:4d:c6:44:0c:5d:8d:0a:
                    bf:29:2c:e5:34:72:9c:28:74:55:41:4b:91:58:5d:
                    88:74:69:ec:db:86:91:27:ae:47:85:ec:a1:2d:e7:
                    31:c8:9a:4a:04:0d:18:0e:b8:95:46:f1:d4:12:06:
                    e5:26:1e:01:90:ec:68:76:7f:6d:27:cf:55:9d:7e:
                    5f:31:7c:d1:02:b2:75:4e:5c:16:b6:41:bb:b9:bd:
                    c7:94:87:01:59:73:e8:80:3c:5c:a5:3b:dc:b8:75:
                    22:2e:06:29:d9:bf:fa:d0:c3:a4:a3:fc:c4:1b:ba:
                    75:7b:9d:ef:f1:b3:ba:61:d0:63:a6:fd:58:54:63:
                    1b:86:76:41:d6:45:d4:43:fb:96:d9:e1:cd:0b:d5:
                    16:f0:d5:eb:a7:82:9c:58:7c:14:05:7e:5b:93:b4:
                    cf:78:20:77:db:54:53:fa:e6:bf:d2:35:ad:fa:69:
                    4e:e0:17:85:3f:98:1f:9d:4f:03:b4:7b:18:19:0e:
                    ff:e3:36:a1:03:fd:d3:ce:7e:6a:58:ef:9d:2d:08:
                    d5:44:76:a4:7d:fd:5d:ca:1e:db:85:88:7c:11:cd:
                    25:8a:e1:5f:8e:f2:f5:b7:41:6b:21:43:8f:f1:34:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:BF:2D:8B:83:01:C9:4A:26:C3:D7:8E:69:58:67:FB:A7:80:81
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w9-_LYuDAclKJsPXjmlYZ_ungIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:91:69:54:e0:52:1e:6b:9a:b9:00:06:58:bf:77:9d:d5:0e:
         7b:54:44:61:48:f8:32:09:26:eb:17:b8:9a:1e:bc:59:16:0c:
         c8:a5:a6:97:25:9a:2c:5e:4a:b4:f9:9a:95:e4:9f:ff:67:2e:
         75:59:12:b0:fa:51:a1:2e:0f:d4:2a:d1:07:54:c3:93:03:e2:
         a7:8a:34:bd:d9:64:25:a8:a1:d7:7f:1c:c6:28:2d:87:a3:12:
         78:e3:f6:b0:b6:7c:a6:6f:d5:c8:40:96:a5:5f:90:74:90:2b:
         e3:56:f3:0e:2b:c6:8f:fe:f1:ac:c1:6d:0d:0d:3d:97:c9:83:
         60:61:b9:ad:c6:9d:e9:6c:b7:f8:a9:91:5a:db:b7:73:e4:80:
         d1:49:70:72:9f:37:cb:bd:c6:18:58:84:bb:04:db:ef:08:ed:
         5e:38:87:25:8a:41:78:32:4f:32:7e:3f:f5:3d:dd:93:e4:af:
         17:2e:b8:d3:a8:b4:2d:95:64:b4:60:ee:46:46:a7:aa:0b:cc:
         ee:2e:ee:d4:85:8a:17:94:e9:65:6c:fd:b2:cd:11:51:25:d6:
         bf:f6:a1:b0:9f:d8:1e:c5:1e:10:e5:c2:bb:d9:92:f4:8d:d9:
         8d:15:16:d4:5e:6a:8b:1c:a0:d7:32:2d:0d:5c:59:ef:12:64:
         ae:28:7d:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYilbbxHQX21sGTSweIRUmB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMTMxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2RmYmYyZDhiODMwMWM5NGEyNmMzZDc4ZTY5NTg2N2ZiYTc4MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUleiolj4c/tmnKF+Cg6oU5D2gaI
PE3GRAxdjQq/KSzlNHKcKHRVQUuRWF2IdGns24aRJ65HheyhLecxyJpKBA0YDriV
RvHUEgblJh4BkOxodn9tJ89VnX5fMXzRArJ1TlwWtkG7ub3HlIcBWXPogDxcpTvc
uHUiLgYp2b/60MOko/zEG7p1e53v8bO6YdBjpv1YVGMbhnZB1kXUQ/uW2eHNC9UW
8NXrp4KcWHwUBX5bk7TPeCB321RT+ua/0jWt+mlO4BeFP5gfnU8DtHsYGQ7/4zah
A/3Tzn5qWO+dLQjVRHakff1dyh7bhYh8Ec0liuFfjvL1t0FrIUOP8TR63QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMPfvy2LgwHJSibD145pWGf7p4CBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdzktX0xZdURBY2xLSnNQWGptbFlaX3VuZ0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFGRaVTgUh5rmrkABli/
d53VDntURGFI+DIJJusXuJoevFkWDMilppclmixeSrT5mpXkn/9nLnVZErD6UaEu
D9Qq0QdUw5MD4qeKNL3ZZCWoodd/HMYoLYejEnjj9rC2fKZv1chAlqVfkHSQK+NW
8w4rxo/+8azBbQ0NPZfJg2Bhua3Gnelst/ipkVrbt3PkgNFJcHKfN8u9xhhYhLsE
2+8I7V44hyWKQXgyTzJ+P/U93ZPkrxcuuNOotC2VZLRg7kZGp6oLzO4u7tSFiheU
6WVs/bLNEVEl1r/2obCf2B7FHhDlwrvZkvSN2Y0VFtReaoscoNcyLQ1cWe8SZK4o
fdo=
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:52:20 2025 by rpki-client