This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Kmi2VSwT2ZW_CD8g3-cDA0FzBA.roa
File:                     7Kmi2VSwT2ZW_CD8g3-cDA0FzBA.roa (raw, json)
Hash identifier:          dbW4SYTz1CjwpmSaSHEDQYxj2oELxIXjmk9hrrHj8hE=
Subject key identifier:   EC:A9:A2:D9:54:B0:4F:66:56:FC:20:FC:83:7F:9C:0C:0D:05:CC:10
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186B6000395B14ECA2A009A2C90A8431959
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Kmi2VSwT2ZW_CD8g3-cDA0FzBA.roa
Signing time:             Mon 06 Mar 2023 08:18:19 +0000
ROA not before:           Mon 06 Mar 2023 08:18:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:00:03:95:b1:4e:ca:2a:00:9a:2c:90:a8:43:19:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  6 08:18:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eca9a2d954b04f6656fc20fc837f9c0c0d05cc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:0d:e0:a2:26:15:d3:f4:2e:68:d3:50:cb:
                    89:db:79:29:56:87:62:6d:66:99:4c:cd:35:29:71:
                    91:c6:7f:a9:6d:44:be:d9:2f:12:21:41:dd:a6:cf:
                    b4:01:f3:69:62:0f:9d:6f:f6:67:f1:53:a9:87:f1:
                    fb:9e:db:60:32:1d:3d:49:45:df:96:89:4f:99:a3:
                    20:ef:30:ae:ae:70:07:4d:38:74:dd:3c:d0:da:2f:
                    56:6e:e6:2b:5d:ff:8d:ba:21:76:86:4f:91:99:0a:
                    f2:b2:c7:a7:7d:f2:18:25:a7:ee:43:a9:1c:59:47:
                    9a:ae:00:80:49:19:45:c7:f6:bd:c1:1a:34:e6:6f:
                    3f:3e:5e:dd:b1:e8:4d:0e:2d:b7:7a:2e:10:99:87:
                    d2:ef:05:4a:47:2b:a5:1f:21:58:68:aa:4d:c9:6f:
                    b3:54:35:dd:ab:5b:d5:03:4f:5f:e1:5e:be:39:91:
                    b8:eb:45:90:1c:8b:fe:bb:24:ef:4b:d9:d5:58:d7:
                    55:ba:52:6e:d9:c8:8a:48:20:dc:f5:68:71:38:94:
                    ca:8c:88:4f:08:fa:23:0b:71:4e:64:c7:57:65:4f:
                    87:3a:8c:54:1c:87:0d:0f:6a:a0:72:e7:e8:5f:c4:
                    63:43:d6:70:a5:3f:65:df:73:9d:16:a5:89:a1:74:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:A2:D9:54:B0:4F:66:56:FC:20:FC:83:7F:9C:0C:0D:05:CC:10
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Kmi2VSwT2ZW_CD8g3-cDA0FzBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:06:45:73:b5:14:a4:29:17:2d:69:8a:42:d7:4f:8c:17:76:
         fa:b2:38:f2:2d:af:2e:32:a2:2f:0e:ca:7d:a3:ac:05:d1:39:
         35:33:32:ad:fc:77:05:d9:e9:9f:01:c8:fa:94:eb:4b:77:1f:
         51:7f:3e:43:03:5a:91:49:ed:7b:28:6d:8c:a9:f8:75:bf:a0:
         1e:e8:df:2c:72:b5:d1:4c:5f:f6:f9:95:57:be:5a:2a:41:ab:
         97:fa:ec:40:0c:48:7a:61:32:5b:30:a1:ca:20:fa:a3:a8:64:
         49:35:c7:f7:75:b0:66:09:05:7e:c7:69:87:53:17:93:c4:ff:
         e1:ee:1a:3f:ae:cf:55:58:3b:53:7a:81:c1:bf:69:bb:f1:13:
         b9:4a:5b:3a:bf:90:9d:07:eb:5c:4f:24:12:13:fe:8f:15:c4:
         b6:49:83:19:dc:18:4c:44:f5:48:b2:15:86:be:5e:4d:81:1e:
         d2:84:9f:61:b7:ea:20:58:51:68:5b:6b:a0:10:81:53:be:6b:
         d4:41:94:61:8d:49:f7:99:6e:67:51:eb:aa:89:e3:7d:bf:45:
         2d:a8:05:9e:3e:ad:95:21:1e:ac:f2:57:21:6f:3b:a3:74:b8:
         2a:14:33:86:03:8f:3e:89:98:42:90:b9:6c:da:e4:45:d2:66:
         1b:29:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:20:16 2025 by rpki-client