This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa
File:                     zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa (raw, json)
Hash identifier:          M7vYrXizWJo5G7XD03Tfg+XaYqnh0tRBo2sVVmxIz4s=
Subject key identifier:   CC:2D:89:B4:85:1C:54:60:3C:94:22:7F:5E:3A:93:C3:27:79:5B:A6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6F82378A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa
Signing time:             Fri 04 Mar 2022 05:07:34 +0000
ROA not before:           Fri 04 Mar 2022 05:07:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870804874 (0x6f82378a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  4 05:07:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc2d89b4851c54603c94227f5e3a93c327795ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:db:db:c5:79:13:f5:a6:34:1c:0f:65:4e:
                    f9:0f:09:7b:55:3c:ef:65:c3:f2:5e:e2:f5:34:50:
                    80:59:07:3f:76:06:cf:cc:c3:7a:a2:85:73:1f:43:
                    8e:ec:32:1a:45:ef:8e:b7:28:ed:ef:f7:22:da:95:
                    70:fe:e2:41:ea:01:89:86:dd:bd:f1:9d:e5:0e:1e:
                    20:d2:a4:49:04:f5:6a:13:07:14:5b:89:71:db:12:
                    48:6e:fc:81:e2:df:77:85:f2:ff:9a:cb:19:ad:15:
                    f7:ea:71:8a:1e:d4:f2:e3:33:fe:38:46:14:da:1f:
                    22:9e:c9:65:9d:27:5d:d5:63:4e:77:1e:01:08:28:
                    99:b5:0f:16:3c:44:72:4e:86:62:13:f2:5b:87:4f:
                    f4:0d:53:f6:42:dd:4c:ac:1e:db:d4:57:fe:a4:8c:
                    45:93:25:b0:c7:28:32:6f:fb:2b:72:c2:81:e1:63:
                    0f:8e:e9:c9:4d:51:fc:32:1b:ea:33:6c:e5:b5:83:
                    7f:df:60:fd:19:fd:b1:7b:68:64:bc:a3:16:99:2c:
                    e4:d8:b5:a0:de:a0:ae:cc:4d:c2:31:16:5a:dc:c6:
                    84:f9:8d:90:2a:36:56:55:b8:e5:dd:ad:24:33:6b:
                    eb:38:f0:7b:f9:b4:79:ab:ec:5b:96:ef:ea:84:9e:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:89:B4:85:1C:54:60:3C:94:22:7F:5E:3A:93:C3:27:79:5B:A6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:9d:75:18:b4:d9:e1:d5:23:47:36:2f:b3:e5:18:da:5e:
         58:90:6c:e2:02:c3:f6:46:80:4a:1a:29:60:e4:de:d7:f9:5d:
         4a:03:5c:af:63:45:15:d6:31:61:dd:59:d0:1d:6b:2b:71:b5:
         b1:dd:9e:96:56:35:4a:61:e5:22:eb:ea:2e:19:8c:d1:5d:ae:
         0d:c2:ae:55:a0:b6:cd:f0:3f:81:72:d8:64:f8:4a:cf:9b:8e:
         9b:e5:1f:cf:cd:8a:92:c7:d0:9b:5a:b3:a6:b6:70:e5:23:ab:
         b2:80:a5:b8:66:c1:2f:5b:39:ff:5b:fd:80:6e:d3:b1:e9:df:
         5f:e0:3c:ea:3e:15:52:95:ac:b0:9e:73:87:5e:83:0f:83:87:
         24:df:1d:f9:ed:e4:08:a6:6f:79:e5:51:56:b5:c6:6a:cb:ec:
         ce:ce:ef:1e:ca:5c:40:92:18:a5:2c:79:ea:e3:fb:93:ec:fd:
         9b:cf:2d:30:23:1f:68:1f:c6:0e:35:2b:0f:b4:74:2f:9b:83:
         0c:72:45:c3:cd:a8:98:b4:25:6f:3d:5f:81:74:cb:41:30:5d:
         fc:28:cb:64:7c:03:39:eb:d3:d5:ba:f1:3f:8c:54:0a:12:71:
         8c:1d:1b:1b:22:f2:7c:58:0b:fd:2f:4b:be:4b:ba:53:99:c0:
         d7:0f:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:44 2025 by rpki-client