This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IcNxG0Dya1fZDsadZEs_un8KBk.roa
File:                     3IcNxG0Dya1fZDsadZEs_un8KBk.roa (raw, json)
Hash identifier:          n5KWR4fn2HnhgtenUWvl0espFTa4ezxnn6K/Cpbc0jY=
Subject key identifier:   DC:87:0D:C4:6D:03:C9:AD:5F:64:3B:1A:75:91:2C:FE:E9:FC:28:19
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186BEC006412B2C6A0210E7F60B2DDB19CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IcNxG0Dya1fZDsadZEs_un8KBk.roa
Signing time:             Wed 08 Mar 2023 01:05:00 +0000
ROA not before:           Wed 08 Mar 2023 01:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:bebf:45f1/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:be:c0:06:41:2b:2c:6a:02:10:e7:f6:0b:2d:db:19:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  8 01:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc870dc46d03c9ad5f643b1a75912cfee9fc2819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:3b:c7:69:d3:f7:67:f7:b3:cb:1e:9f:93:
                    33:7c:5c:50:d5:97:5b:0f:17:b6:6a:ae:a8:69:61:
                    e7:4d:c1:98:40:92:1d:3c:3a:47:71:ed:eb:2b:bb:
                    54:59:8a:c5:39:59:81:78:98:a5:01:eb:47:a0:32:
                    1a:8a:b5:e7:51:38:37:d5:71:5d:77:67:7f:66:7a:
                    6a:b5:38:89:90:41:2e:6e:35:df:34:2f:5b:7f:2b:
                    f6:13:23:5d:71:f9:e1:be:59:dc:26:f8:6e:94:cc:
                    c6:3f:15:cf:e7:cc:b4:4d:7f:23:24:cf:49:da:7a:
                    a1:ee:ca:4e:0d:3b:1d:c9:bd:b6:3a:5d:f9:5c:d3:
                    e9:ad:53:35:ad:76:0b:28:5c:58:2b:63:4f:30:8e:
                    18:e6:ad:4a:7b:21:59:2e:0f:7c:e2:2a:1a:a0:f1:
                    89:b2:a6:5a:f8:eb:02:55:dd:8d:52:fb:ac:1b:33:
                    de:71:5d:73:ae:cc:df:59:cb:27:8d:99:15:64:6a:
                    75:d4:06:d0:53:2d:31:c0:dc:0c:a6:04:80:4a:61:
                    5a:36:ee:db:42:ee:d9:8d:c8:22:67:36:80:fd:20:
                    ea:09:ad:6d:43:05:ea:53:69:be:62:b2:01:f0:9d:
                    05:5b:ac:f8:6a:78:cc:60:a4:c2:a0:17:ce:b9:0a:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:0D:C4:6D:03:C9:AD:5F:64:3B:1A:75:91:2C:FE:E9:FC:28:19
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IcNxG0Dya1fZDsadZEs_un8KBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:a0:7e:10:0a:fb:96:be:e9:a2:9f:fd:4a:b7:1a:70:0e:
         41:d9:37:e8:ff:dd:f9:bb:90:a8:93:40:9c:b0:8b:ae:18:cb:
         6c:7e:25:1e:bc:b9:cc:82:43:16:80:af:f4:1f:c8:e4:46:9f:
         91:c6:86:0e:7b:93:a2:da:49:9a:02:30:e8:bd:f4:84:89:49:
         f3:e1:11:e4:a2:77:e8:79:85:1f:28:10:ee:de:c3:ee:c7:bf:
         a9:50:ea:e1:a4:7b:f6:0e:21:6f:bb:01:3f:96:29:92:e5:8c:
         7d:88:d0:3a:09:c6:f2:18:2b:d2:24:11:ab:16:57:52:f5:d1:
         0e:6f:8d:ef:c9:fc:3f:0e:b4:2e:e0:4e:6e:c7:65:90:18:3a:
         f9:9b:db:dd:55:31:e8:f0:2f:d3:f0:71:c0:56:80:53:0b:f8:
         e4:24:ea:99:f1:43:91:ac:14:3b:15:e7:86:ae:08:de:7c:d4:
         5e:51:fb:b4:2b:68:12:b4:53:e3:0d:3f:12:5f:a2:55:8e:47:
         42:ef:a2:f2:02:90:40:7d:65:0b:d9:bc:0e:8f:39:0d:96:db:
         4e:5f:a5:11:9d:0d:16:8a:72:65:56:db:51:d1:23:d6:86:58:
         e0:ed:00:b2:65:9b:8b:4d:19:f6:8d:09:a4:0d:a7:91:5b:c4:
         64:2b:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:23:05 2025 by rpki-client