This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uOXxRsiNTujo4UiWybGhLKe78A.roa
File:                     1-uOXxRsiNTujo4UiWybGhLKe78A.roa (raw, json)
Hash identifier:          DZ3/qyYz71K/e60jLKyvBpJKAWUkhXtJtHEVA8qePq8=
Subject key identifier:   FA:E3:97:C5:1B:22:35:3B:A3:A3:85:22:5B:26:C6:84:B2:9E:EF:C0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01881C4AE2AF8E6A42E17F46AB97928557D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uOXxRsiNTujo4UiWybGhLKe78A.roa
Signing time:             Sun 14 May 2023 22:04:09 +0000
ROA not before:           Sun 14 May 2023 22:04:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:188:1c4a:c15f/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1c:4a:e2:af:8e:6a:42:e1:7f:46:ab:97:92:85:57:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 14 22:04:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fae397c51b22353ba3a385225b26c684b29eefc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:06:ad:15:c9:70:b2:bc:8f:a4:b1:26:f7:
                    e1:68:1b:37:80:b2:9f:db:ab:cf:9b:5f:0c:14:23:
                    55:d1:64:58:eb:bd:c6:f6:9d:11:63:54:dd:bf:5f:
                    94:b4:4e:a1:28:15:ee:54:73:01:c9:01:85:55:cc:
                    7f:98:ac:84:00:e5:9a:98:19:76:14:b4:1b:3b:f1:
                    63:af:30:1b:f8:40:a2:9f:72:5c:a5:81:7a:bd:90:
                    79:40:4b:0d:ad:e8:23:e5:eb:b6:bd:b9:a4:00:2c:
                    9b:d4:3a:69:ec:cc:57:cf:9f:db:a2:59:8b:86:f8:
                    dd:5d:cd:fb:91:25:6b:63:ee:24:9a:c4:50:b9:93:
                    12:7b:5d:fc:16:15:81:45:fc:a1:cc:7e:da:70:8a:
                    1b:87:77:8d:df:9e:e1:a8:33:03:6e:38:cd:6b:67:
                    e4:71:6d:b3:ed:55:86:56:35:00:2b:0b:c0:61:70:
                    55:bb:78:05:30:ae:b8:ae:07:92:a3:1b:56:3c:5b:
                    b4:d8:5c:ce:be:73:15:6f:2c:7a:25:e6:a3:90:01:
                    ce:5d:f6:a7:75:d5:e2:fe:58:86:3b:e1:c3:a1:20:
                    cd:ea:56:f7:16:73:71:08:15:45:ea:24:5e:e2:53:
                    f7:6f:60:69:a2:c0:11:2b:75:e0:c9:5c:21:46:f7:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:97:C5:1B:22:35:3B:A3:A3:85:22:5B:26:C6:84:B2:9E:EF:C0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uOXxRsiNTujo4UiWybGhLKe78A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:92:f3:35:95:fd:95:ba:9c:0b:09:1c:70:ca:11:7a:9d:
         fa:6f:bf:9a:06:11:34:50:73:ac:83:89:b2:c1:28:48:da:fb:
         c9:8e:2d:c0:0a:8e:ee:67:51:4c:94:74:f7:90:96:14:ce:5d:
         cd:da:60:93:92:17:38:b0:47:95:7f:df:4b:0b:55:0c:0e:eb:
         1e:56:1d:ba:7f:b4:11:6e:e9:3d:6a:d2:d1:9e:91:4c:93:7d:
         a9:7a:69:8e:87:d8:df:f4:cf:17:50:3c:3c:e0:df:23:51:3d:
         9f:05:42:c3:7e:61:50:1e:80:60:31:67:c5:60:c1:19:e4:0c:
         47:c9:fe:3e:5d:7c:f8:ef:de:4c:bb:80:c9:3e:4e:78:b7:62:
         47:25:3d:8c:0e:e1:62:04:f6:85:94:ac:8e:3c:36:b6:85:cc:
         4a:66:dc:f6:44:bd:59:89:5b:86:79:71:8a:4b:b4:c9:0e:35:
         67:55:69:77:60:70:a3:2a:07:05:69:41:d3:ee:6c:45:d6:18:
         30:a0:ba:13:37:e4:d7:f6:c8:9b:3d:f0:94:83:9b:d7:ad:4b:
         1f:3b:73:29:ff:48:89:24:8c:13:b2:09:c7:36:df:22:3b:17:
         87:99:4f:a6:8a:a7:e1:24:ac:08:1a:9c:ca:af:29:9a:aa:d2:
         00:40:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:23:21 2025 by rpki-client