This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa
File:                     01CcSlGlYnwYOsFQXgGbVcAbqpc.roa (raw, json)
Hash identifier:          akvYNaVBYwKSLlFMSBJCSR+/T9KYXNBmqLpRFzFcerM=
Subject key identifier:   D3:50:9C:4A:51:A5:62:7C:18:3A:C1:50:5E:01:9B:55:C0:1B:AA:97
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C9F5CA665037815B18DC4038C1C8FD437
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa
Signing time:             Mon 25 Dec 2023 05:04:58 +0000
ROA not before:           Mon 25 Dec 2023 05:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18c:9f5c:1d3f/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9f:5c:a6:65:03:78:15:b1:8d:c4:03:8c:1c:8f:d4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 25 05:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3509c4a51a5627c183ac1505e019b55c01baa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:5f:04:0b:6b:70:28:1f:e5:d1:c4:23:95:
                    5b:94:35:bb:7c:b6:82:4b:7e:c7:28:65:d2:68:2f:
                    39:2e:a2:de:00:8b:67:fd:60:9d:89:f2:09:e3:76:
                    1e:9d:fc:c5:5f:8c:b7:05:e1:a7:96:cf:b3:11:a2:
                    02:0b:af:e8:70:6e:8c:44:8b:fe:8d:e9:f9:ed:ec:
                    ce:f2:8d:70:b4:80:a0:e5:35:12:fa:62:6f:c3:fe:
                    50:c7:b7:0c:f9:36:95:80:e9:72:41:16:db:fc:e3:
                    8f:b2:a5:c8:c9:c9:91:84:8d:86:c8:bf:04:6c:0e:
                    35:93:81:e1:86:11:77:cc:43:6b:c8:4b:f8:24:ca:
                    6d:bd:d2:ea:99:76:d6:6d:c0:da:03:d0:78:a6:97:
                    4e:21:16:8f:c7:35:2c:27:0e:cb:7c:d8:a9:2c:be:
                    0a:28:0e:9a:ae:b2:b5:fa:35:d0:9a:1c:67:ce:23:
                    e8:10:b9:fc:94:b5:af:7c:06:c2:b8:93:1f:48:52:
                    5a:79:7a:58:31:6d:46:79:10:b1:e2:bb:9d:f5:f1:
                    75:82:b2:59:bf:68:b8:96:ee:36:cf:76:f4:c8:83:
                    01:0d:7c:f6:a3:02:e8:af:c8:91:0b:5c:e4:08:e7:
                    94:5a:b3:bd:e8:c9:b1:73:cf:c8:e6:48:ed:a9:c2:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:50:9C:4A:51:A5:62:7C:18:3A:C1:50:5E:01:9B:55:C0:1B:AA:97
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:cb:45:42:ea:7f:7b:3f:ae:73:75:26:cf:ed:2f:e3:fa:
         94:43:d0:37:9f:66:f2:13:7a:ad:ff:40:84:eb:39:36:22:8f:
         f3:0a:f0:e6:0d:bc:41:a6:e1:7d:37:82:95:a6:5a:06:aa:cf:
         95:ad:c0:8c:4f:7e:3c:ba:f2:cb:bb:5f:8f:bd:19:f2:61:7e:
         e0:a6:e0:52:fe:4a:de:c2:97:25:b7:9f:a8:50:6a:b2:dd:28:
         17:c7:42:53:b3:fc:82:c6:8a:41:a6:53:47:72:7c:2a:e8:9d:
         f1:d0:92:c7:a3:42:ce:5d:22:f4:27:6a:43:3c:f6:0d:1d:e9:
         37:c8:bb:36:df:63:b2:2e:b1:bb:00:4d:55:77:0e:bf:6e:80:
         40:11:fb:44:5f:57:af:4d:e2:b5:9e:e3:25:07:e5:39:78:4b:
         2a:65:78:1a:c8:bb:1d:18:29:52:2d:42:f0:c3:ba:13:7a:f3:
         35:06:6c:81:05:f4:ef:2d:d0:89:48:0f:fc:9b:00:19:89:3e:
         1d:ba:5a:28:92:7f:4d:e2:0b:5f:b5:7f:4d:79:48:a7:de:53:
         9e:9e:8e:1f:56:04:71:97:4a:1d:9a:0f:ea:b0:fe:95:c6:98:
         e3:a5:05:2c:14:c4:6b:e8:56:f0:db:38:ee:04:53:83:0a:bd:
         f5:f4:dc:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyfXKZlA3gVsY3EA4wcj9Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI1MDUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzUwOWM0YTUxYTU2MjdjMTgzYWMxNTA1ZTAxOWI1NWMwMWJhYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+JfBAtrcCgf5dHEI5VblDW7fLaC
S37HKGXSaC85LqLeAItn/WCdifIJ43YenfzFX4y3BeGnls+zEaICC6/ocG6MRIv+
jen57ezO8o1wtICg5TUS+mJvw/5Qx7cM+TaVgOlyQRbb/OOPsqXIycmRhI2GyL8E
bA41k4HhhhF3zENryEv4JMptvdLqmXbWbcDaA9B4ppdOIRaPxzUsJw7LfNipLL4K
KA6arrK1+jXQmhxnziPoELn8lLWvfAbCuJMfSFJaeXpYMW1GeRCx4rud9fF1grJZ
v2i4lu42z3b0yIMBDXz2owLor8iRC1zkCOeUWrO96Mmxc8/I5kjtqcJs5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNNQnEpRpWJ8GDrBUF4Bm1XAG6qXMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMDFDY1NsR2xZbndZT3NGUVhnR2JWY0FicXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF1jy0VC6n97P65zdSbP
7S/j+pRD0DefZvITeq3/QITrOTYij/MK8OYNvEGm4X03gpWmWgaqz5WtwIxPfjy6
8su7X4+9GfJhfuCm4FL+St7ClyW3n6hQarLdKBfHQlOz/ILGikGmU0dyfCronfHQ
ksejQs5dIvQnakM89g0d6TfIuzbfY7IusbsATVV3Dr9ugEAR+0RfV69N4rWe4yUH
5Tl4SypleBrIux0YKVItQvDDuhN68zUGbIEF9O8t0IlID/ybABmJPh26WiiSf03i
C1+1f015SKfeU56ejh9WBHGXSh2aD+qw/pXGmOOlBSwUxGvoVvDbOO4EU4MKvfX0
3Po=
-----END CERTIFICATE-----
Generated at Mon Dec 15 13:15:05 2025 by rpki-client