This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2j7Py9-DDkUDEPDOMXiqV1Zuanc.roa
File:                     2j7Py9-DDkUDEPDOMXiqV1Zuanc.roa (raw, json)
Hash identifier:          jlxuysqYWn8fqB2Igq+TyCHDuL5Xr/q3g/mfrJu4oBs=
Subject key identifier:   DA:3E:CF:CB:DF:83:0E:45:03:10:F0:CE:31:78:AA:57:56:6E:6A:77
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187BBBD0D870EDB0F680666B4BC6143AA4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2j7Py9-DDkUDEPDOMXiqV1Zuanc.roa
Signing time:             Wed 26 Apr 2023 04:05:41 +0000
ROA not before:           Wed 26 Apr 2023 04:05:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:187:bbbc:5071/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bb:bd:0d:87:0e:db:0f:68:06:66:b4:bc:61:43:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 26 04:05:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da3ecfcbdf830e450310f0ce3178aa57566e6a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:ef:c9:05:c6:e9:17:2a:e6:50:6d:cb:dc:
                    ac:37:50:4b:0d:16:2f:0c:4c:b6:73:19:10:cb:85:
                    11:5b:3c:83:c7:a1:50:dd:56:1f:9a:6f:27:00:5e:
                    a7:20:07:f3:65:fb:d7:da:34:2c:1c:fd:bc:17:93:
                    f4:c2:83:fe:7d:94:12:be:22:c7:4f:ef:32:73:94:
                    f9:fa:16:57:71:41:6e:13:f4:ed:c5:ec:da:2a:28:
                    37:ba:89:30:67:d5:e5:eb:bd:21:91:0d:69:80:cf:
                    c1:d6:4f:8c:fb:b7:a2:2f:69:88:27:89:82:3a:e3:
                    5e:de:10:d6:58:28:0f:da:8b:09:ee:35:8c:2c:c7:
                    8b:54:f6:17:66:5f:9f:87:63:e9:87:d3:21:04:0d:
                    2f:88:e8:f0:a1:29:f9:0f:ce:51:2d:a4:ae:b3:69:
                    26:36:23:74:04:01:42:39:ca:a5:07:46:51:0b:2a:
                    40:29:eb:14:a2:33:bc:68:b2:02:8a:36:88:42:00:
                    f4:c9:06:f8:7f:4f:bf:d8:74:7f:7e:d4:d1:cf:41:
                    72:2b:3f:e8:21:c7:a4:fc:b4:1f:05:0f:96:67:c5:
                    36:23:8c:26:23:d6:8e:cc:17:5b:55:d2:d7:ea:39:
                    27:82:6c:5e:a7:46:f3:6f:3a:10:9e:d4:79:41:67:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:CF:CB:DF:83:0E:45:03:10:F0:CE:31:78:AA:57:56:6E:6A:77
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2j7Py9-DDkUDEPDOMXiqV1Zuanc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:a9:65:eb:66:98:a5:e1:81:19:50:46:58:e7:e8:18:63:
         c0:2b:b7:34:2c:f3:29:72:28:b5:31:8f:8f:f5:24:01:1e:75:
         46:97:ce:38:a0:c7:38:d8:d9:cc:2f:01:bd:19:69:52:31:23:
         e8:93:03:e2:12:37:09:6a:4b:59:27:4b:bf:35:43:c6:77:87:
         c2:76:9b:d5:33:b2:19:a2:80:a4:a9:bd:5f:ea:51:0d:b8:ce:
         93:2e:04:d0:e7:d1:ea:ae:f0:54:c4:51:f6:3f:5a:16:4c:c8:
         46:18:36:8a:d6:a6:7f:88:3b:f4:6e:ba:9c:a2:d8:e6:ca:65:
         38:92:1a:05:51:c8:8c:28:0c:79:44:92:60:40:21:d6:f5:f7:
         22:af:9c:42:84:a1:28:d1:eb:0f:b9:2e:54:e9:49:5a:f6:64:
         ed:18:fe:88:ad:9c:2c:7e:72:a4:49:be:4e:aa:9a:9f:ac:e1:
         6e:fe:fa:91:0a:18:eb:1d:3b:ca:17:28:04:e1:0e:26:b7:43:
         03:77:12:c6:2a:92:78:19:c9:ec:05:19:1a:d9:1d:ed:fe:f2:
         9e:55:00:a1:c9:e5:be:55:96:84:b9:5f:b3:4f:d6:07:33:8d:
         eb:e2:a2:34:0a:01:85:57:d5:49:e2:a9:43:51:3f:f8:b8:11:
         8d:61:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 02:16:32 2025 by rpki-client