This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiDoVtGSgvErhIx9IQYUI8JY8oU.roa
File:                     wiDoVtGSgvErhIx9IQYUI8JY8oU.roa (raw, json)
Hash identifier:          PinfI+vh1/IogOMlzNq8kKO6OVaWLu0PmiazXq+znso=
Subject key identifier:   C2:20:E8:56:D1:92:82:F1:2B:84:8C:7D:21:06:14:23:C2:58:F2:85
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018930E8CC643F6FF48E704C369AF41FACE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiDoVtGSgvErhIx9IQYUI8JY8oU.roa
Signing time:             Fri 07 Jul 2023 15:11:50 +0000
ROA not before:           Fri 07 Jul 2023 15:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:30:e8:cc:64:3f:6f:f4:8e:70:4c:36:9a:f4:1f:ac:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  7 15:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c220e856d19282f12b848c7d21061423c258f285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:25:84:48:2d:c4:b7:0e:ae:7c:d6:90:f8:
                    6a:34:58:e5:67:0a:be:fd:10:ee:02:aa:d8:28:9d:
                    f2:68:b6:cf:ca:d4:0d:98:b0:26:7b:33:63:df:de:
                    b1:c4:e5:90:9a:65:b0:eb:b3:76:d8:85:15:ce:12:
                    22:4a:37:89:54:c9:02:14:6c:23:78:c0:d7:ca:10:
                    cb:24:a3:ec:6e:61:c9:df:1c:b4:d2:18:8c:7e:23:
                    5e:1c:1e:1a:b3:c6:72:ee:51:5a:7f:cf:9e:21:8c:
                    08:c6:cf:ed:74:c7:9c:6f:2e:e0:a1:56:e3:21:54:
                    04:c5:cb:7a:c8:32:cd:b2:0c:8c:4b:47:00:83:01:
                    af:2d:54:d0:90:73:a1:e7:9a:0a:a5:f7:a3:60:6d:
                    1b:7b:97:90:b9:6f:eb:23:6a:9d:74:76:84:71:69:
                    be:83:dc:71:f4:28:3a:58:27:ed:f8:88:41:0d:17:
                    88:e3:9b:69:45:08:0e:5d:36:25:54:88:c5:24:34:
                    04:14:1d:60:29:07:0d:95:5e:04:45:9c:bf:bc:fa:
                    be:8c:45:47:ed:c6:0f:28:c0:e6:63:e1:8c:75:d2:
                    af:39:79:27:bb:0d:2a:f6:22:0e:70:64:2a:68:53:
                    0b:4d:ef:b0:f0:3a:1e:12:41:6f:b2:7d:03:7a:96:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:E8:56:D1:92:82:F1:2B:84:8C:7D:21:06:14:23:C2:58:F2:85
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wiDoVtGSgvErhIx9IQYUI8JY8oU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:60:85:43:fb:f5:81:9e:44:82:3c:a2:23:2e:62:4d:66:ba:
         e4:85:e2:29:e6:e7:2f:0a:dd:7e:09:57:e6:d3:06:ec:d2:a7:
         94:da:05:16:b1:20:41:fb:94:ff:14:1c:b4:7c:19:13:b9:c3:
         b4:26:9b:1f:a3:d2:56:de:3a:9e:21:dd:92:0f:45:88:fe:5c:
         b7:01:8c:be:a7:7c:5a:2b:55:b5:f8:76:ce:cb:0a:68:6a:10:
         d0:5e:10:ea:7b:26:55:78:e3:d3:7f:82:84:e1:e7:8c:0a:29:
         6a:01:d2:d6:fb:7a:7c:ba:66:1a:ee:f1:9e:d8:b3:68:84:f8:
         05:b2:4b:9f:44:96:23:bf:2b:4d:80:14:f4:2d:b7:ba:6a:ab:
         70:31:42:48:d8:9c:89:ea:88:9b:76:a7:de:c8:80:1d:2e:7b:
         10:ab:c0:7f:5c:54:17:ba:95:a9:39:70:1d:fa:d2:0e:65:35:
         76:6b:e8:d5:f3:c4:b9:1f:88:ae:0e:a0:20:01:d5:26:63:34:
         3a:92:ee:de:7a:d8:8f:f1:91:42:93:c8:1d:60:4a:c1:30:87:
         ee:a1:1a:25:f7:5e:43:1c:a5:1e:08:57:68:86:05:c5:26:42:
         7b:6d:a8:94:6d:fc:b9:ae:39:86:3d:4e:c1:eb:53:1a:8b:bd:
         dc:17:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:59:43 2025 by rpki-client