This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yTU_TafAurSKOkFWHrkWcY4BpmI.roa
File:                     yTU_TafAurSKOkFWHrkWcY4BpmI.roa (raw, json)
Hash identifier:          q7sURiOuF+0jij2oI636/KCRM5ur2bqSt+eolhsn0DY=
Subject key identifier:   C9:35:3F:4D:A7:C0:BA:B4:8A:3A:41:56:1E:B9:16:71:8E:01:A6:62
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186DEC1488FB65FAC7A97DD2BAB5E5A13E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yTU_TafAurSKOkFWHrkWcY4BpmI.roa
Signing time:             Tue 14 Mar 2023 06:14:13 +0000
ROA not before:           Tue 14 Mar 2023 06:14:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:de:c1:48:8f:b6:5f:ac:7a:97:dd:2b:ab:5e:5a:13:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 14 06:14:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9353f4da7c0bab48a3a41561eb916718e01a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:4e:44:94:54:49:75:6d:c8:55:b2:73:8d:
                    c3:49:34:d3:52:25:7f:ba:c0:2f:38:50:31:e1:5a:
                    2c:89:0c:5b:69:1a:94:8f:e2:fb:fe:5c:e3:40:01:
                    11:56:28:bb:4d:df:57:3c:6f:4c:59:67:89:40:17:
                    71:b7:81:86:df:d7:5b:bb:ed:6d:28:44:db:de:e2:
                    aa:c4:eb:70:2a:bd:a1:70:09:3c:fc:81:47:1d:d7:
                    44:0b:39:52:9a:23:7f:9d:48:a5:20:4e:db:b9:3b:
                    d7:93:ee:c7:bb:3f:48:8f:d6:b8:05:78:98:7a:ed:
                    09:03:36:f4:f0:73:49:f9:6d:d2:61:15:d3:c4:3e:
                    8d:15:ba:2b:1b:a8:d0:08:cb:95:e6:3b:f6:2f:48:
                    85:ee:8d:ec:88:48:c0:95:13:5a:b2:4e:17:af:91:
                    21:7c:37:00:2e:a9:a4:86:50:d6:49:07:2b:fd:22:
                    66:9c:76:23:22:d4:26:dd:8b:88:d0:83:2d:3f:b4:
                    f0:76:69:63:64:22:37:6d:04:fd:49:a7:de:f8:24:
                    02:0f:8b:46:91:40:81:1e:33:2b:c6:54:e7:b3:3d:
                    ad:30:5c:77:cf:47:39:3a:1c:53:89:93:9f:d1:c6:
                    72:86:b7:dc:6c:64:ad:a0:59:56:f3:65:54:43:70:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:35:3F:4D:A7:C0:BA:B4:8A:3A:41:56:1E:B9:16:71:8E:01:A6:62
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yTU_TafAurSKOkFWHrkWcY4BpmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:d8:da:99:ee:09:63:67:80:75:38:f8:c8:e1:b4:94:13:
         b5:d5:db:09:25:2f:c7:c4:71:12:e1:4b:08:ce:95:1c:2c:00:
         da:6c:ac:fc:b3:4f:d7:03:b3:a0:01:f4:88:92:5a:bf:6e:71:
         c4:b6:6d:c3:7a:4a:43:28:ce:23:0c:0a:df:6d:fd:56:c4:eb:
         02:44:ee:54:f2:cb:2f:5f:ef:80:ae:07:3f:0b:28:39:5f:d3:
         09:2b:6d:97:9e:41:c7:17:f8:45:f9:87:15:68:44:19:aa:5e:
         b4:67:e1:7f:3a:04:fc:da:3e:6f:28:23:97:8a:f0:f0:b9:14:
         a4:55:83:29:b4:49:72:98:7a:06:73:dd:16:65:3e:b6:75:0d:
         77:5d:63:93:94:f2:2e:a5:40:0c:2c:cc:fb:d4:2f:83:2d:8d:
         80:b3:30:7f:12:1b:3d:d9:a1:02:29:1a:ee:74:04:3f:83:46:
         80:be:ad:ca:16:6f:d0:b5:82:81:f8:19:ea:78:ea:c6:ce:36:
         08:56:15:01:3c:e7:5e:d1:cb:a5:2e:96:97:ce:57:ce:e2:9c:
         9f:f3:9b:ed:bf:70:84:44:64:80:fb:3d:8b:47:66:61:b3:47:
         1c:e8:55:4a:f4:2b:db:ee:2f:f5:68:7f:38:76:c7:fb:dc:fe:
         94:44:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:53:54 2025 by rpki-client