This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fE1DLUepf0yjQgJQ5pvgNMvsMo.roa
File:                     5fE1DLUepf0yjQgJQ5pvgNMvsMo.roa (raw, json)
Hash identifier:          x9VjQ72DUR7uxBhg4gthj7BlVqE5b9Pz/ZIvNDBwI80=
Subject key identifier:   E5:F1:35:0C:B5:1E:A5:FD:32:8D:08:09:43:9A:6F:80:D3:2F:B0:CA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01885CE18A26D85FC90164D8767BFC4904AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fE1DLUepf0yjQgJQ5pvgNMvsMo.roa
Signing time:             Sat 27 May 2023 11:04:24 +0000
ROA not before:           Sat 27 May 2023 11:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5ce1:5c8f/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5c:e1:8a:26:d8:5f:c9:01:64:d8:76:7b:fc:49:04:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 27 11:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5f1350cb51ea5fd328d0809439a6f80d32fb0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:88:1d:32:e3:b2:d4:b0:90:b2:43:e2:01:
                    7e:b9:15:60:1c:02:a6:c8:84:ba:1d:06:4c:1a:90:
                    9b:c2:b5:46:1e:e3:ca:ee:e7:1c:c0:01:e6:ce:a8:
                    c8:9d:2a:d9:21:45:2a:52:3f:a7:7b:8a:0f:bd:1f:
                    76:b0:40:27:d2:91:ab:4c:fe:36:08:9f:bc:7f:d3:
                    6a:08:db:85:e5:35:03:41:16:b9:04:75:99:a2:07:
                    3c:5c:e2:bc:a2:98:4f:ea:8c:58:92:19:a0:ea:76:
                    87:23:25:ce:77:c6:5a:95:f0:be:09:f5:34:39:59:
                    62:3f:c8:cc:cd:5c:09:63:76:a2:5d:f9:3c:1f:84:
                    f3:6c:5a:15:85:57:f4:90:73:8c:6f:95:f1:7b:26:
                    4a:04:c5:e9:9c:4d:74:7a:b2:f3:90:dc:89:e2:01:
                    5d:d5:ef:c2:59:17:57:3a:e0:36:02:21:51:76:78:
                    82:ba:36:1f:06:f8:5b:23:dc:bb:c1:83:1a:b4:97:
                    42:6b:53:a0:b6:55:7e:f6:22:7f:ab:3c:2c:0b:ab:
                    2b:57:78:f1:88:77:4b:c4:f8:de:f2:cf:f1:4e:ae:
                    d9:79:1d:d5:89:72:9e:ba:90:19:94:1a:0c:00:1e:
                    60:fe:1d:07:96:79:4b:44:24:3e:34:c7:0e:ae:af:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:35:0C:B5:1E:A5:FD:32:8D:08:09:43:9A:6F:80:D3:2F:B0:CA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fE1DLUepf0yjQgJQ5pvgNMvsMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:8c:ea:b9:5f:0b:45:ff:b3:71:18:be:19:a6:8d:47:95:
         22:e9:c0:5f:49:13:aa:7d:04:d6:a0:66:9f:25:81:a3:46:65:
         89:b3:c2:f8:a8:e6:3d:7f:fe:b1:35:ae:e2:a7:bd:08:a1:7d:
         38:9b:5d:8d:52:c7:cb:1a:40:10:8e:3f:51:be:24:9f:d5:49:
         fe:89:19:93:73:99:2e:d1:9a:7b:e3:56:ed:58:e8:6c:bd:c3:
         dc:a5:9a:df:05:43:07:f3:fb:02:10:c8:62:8c:85:91:90:51:
         7d:d6:19:2c:df:e2:19:06:ac:db:bd:dd:65:42:d6:dc:ad:82:
         21:84:e9:23:65:d7:0e:6f:b3:15:7c:80:80:47:69:a1:a8:3f:
         ee:31:07:7c:37:40:73:e0:e6:7d:ea:97:6a:0c:a8:7c:0d:53:
         49:ba:f3:6c:cb:91:7b:f6:36:93:cc:7f:d0:87:ef:ba:91:d3:
         13:1b:e9:86:b9:6e:d8:1e:53:11:2b:49:22:1f:f3:0b:48:1b:
         f9:40:7d:50:65:a6:f5:20:ec:6d:f9:9e:c3:83:30:ed:25:a5:
         83:b9:94:31:1f:db:16:e1:fa:8d:8b:90:78:2d:a1:0b:16:b0:
         a8:6a:9d:b9:f4:25:cb:65:02:c9:93:9b:9e:ba:a3:87:c8:fb:
         9c:16:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:57:48 2026 by rpki-client