This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5IezZRpgRXf27LILRT7bkfFs9Qg.roa
File:                     5IezZRpgRXf27LILRT7bkfFs9Qg.roa (raw, json)
Hash identifier:          uWzFx0utECstxP8NF0zV3kF4W/Kwf1xJnqVF+UW5PLM=
Subject key identifier:   E4:87:B3:65:1A:60:45:77:F6:EC:B2:0B:45:3E:DB:91:F1:6C:F5:08
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01883F44F93B7F9FC7C3A9E3DD7E03F2048F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5IezZRpgRXf27LILRT7bkfFs9Qg.roa
Signing time:             Sun 21 May 2023 17:04:24 +0000
ROA not before:           Sun 21 May 2023 17:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:3f44:df02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:3f:44:f9:3b:7f:9f:c7:c3:a9:e3:dd:7e:03:f2:04:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 21 17:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e487b3651a604577f6ecb20b453edb91f16cf508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:66:5e:5b:03:0b:b4:27:e1:b6:94:93:8d:
                    ff:39:9c:6e:b4:a7:7d:8b:4f:0a:9f:11:1c:12:5d:
                    9a:2b:39:fd:4c:52:88:51:dc:d3:54:67:07:4f:a9:
                    bd:97:31:9e:94:0e:ba:df:31:e6:fb:10:42:b3:5e:
                    c6:33:a8:6d:5b:64:b6:21:7b:ac:98:e8:41:5e:15:
                    83:c6:bd:93:42:02:97:f3:96:18:b9:fb:d0:5e:fe:
                    b4:93:ca:ec:06:cb:e3:a1:05:91:87:93:ed:f1:4c:
                    c0:71:45:29:87:6c:a3:76:09:03:ab:3c:1a:93:e2:
                    74:a3:e1:37:b1:f1:db:36:77:d1:91:ac:3a:60:ee:
                    1e:2c:22:07:c4:64:a4:85:60:db:e7:f3:6b:e4:91:
                    5f:76:08:97:c3:a1:ae:ba:8a:67:87:da:9c:19:ba:
                    51:cd:97:d6:11:d6:a5:c7:1e:52:16:33:6e:e9:ce:
                    70:59:33:19:63:ca:18:65:78:91:d6:db:72:be:bb:
                    7c:31:cb:cd:31:80:94:2e:0b:34:b8:fa:f4:7c:50:
                    77:ae:2a:0c:23:12:be:e4:4f:7e:30:80:5d:42:e7:
                    0e:af:86:06:99:d7:54:0c:13:aa:78:cf:ca:24:af:
                    c6:70:34:ed:48:c1:80:14:77:1e:c5:f8:85:4f:45:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:87:B3:65:1A:60:45:77:F6:EC:B2:0B:45:3E:DB:91:F1:6C:F5:08
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5IezZRpgRXf27LILRT7bkfFs9Qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:fe:93:4f:6e:bb:e3:57:cf:6b:24:0e:0f:d4:96:de:9d:
         61:68:13:d6:54:2c:70:8f:54:c6:10:0b:01:a1:26:fd:12:55:
         54:fc:dc:f2:34:56:06:be:0a:65:b3:d0:c5:4c:00:7e:29:d7:
         b7:3d:dc:b0:ff:60:63:ca:0f:f3:67:a3:a5:e5:06:75:3a:6c:
         90:66:09:59:70:fd:d2:d5:d2:93:b0:bb:62:63:00:a1:1f:b1:
         5e:af:c1:c2:f8:10:4b:48:bc:b2:fc:8c:4c:6c:d9:b3:ad:e4:
         c9:98:74:8b:92:56:25:5a:04:49:aa:29:a2:80:c9:99:18:3a:
         d4:cd:15:17:6f:07:b8:d5:32:16:4d:7b:05:fe:cf:d7:bc:36:
         6f:26:34:bb:a3:d3:e2:37:3f:84:05:eb:fe:8b:67:21:22:c5:
         04:4a:0d:2a:a8:49:86:61:85:0c:72:1d:e2:17:41:e4:94:4a:
         8e:af:d9:16:c3:96:5c:30:21:2d:e5:62:14:fe:90:eb:5b:43:
         d1:5f:cd:76:f2:e6:12:bb:41:ca:64:a4:bc:da:84:af:fa:d5:
         86:e5:85:d9:6e:9d:f0:c3:60:d9:62:48:93:bc:63:ba:3f:ac:
         b9:0a:82:90:eb:98:8b:bc:0d:e6:5a:53:fb:d3:11:05:4f:e2:
         9d:59:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:26:08 2025 by rpki-client