This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XiDHKeuYvA5V0ANcrdjIi0yn-Q.roa
File:                     7XiDHKeuYvA5V0ANcrdjIi0yn-Q.roa (raw, json)
Hash identifier:          XYCEkZKxkitAU6vOljQWh02+pKHChY01zYPNtpVjnjc=
Subject key identifier:   ED:78:83:1C:A7:AE:62:F0:39:57:40:0D:72:B7:63:22:2D:32:9F:E4
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018975C8949EEDAEBECCBDB4C5082714163E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XiDHKeuYvA5V0ANcrdjIi0yn-Q.roa
Signing time:             Fri 21 Jul 2023 00:10:26 +0000
ROA not before:           Fri 21 Jul 2023 00:10:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:75:c8:94:9e:ed:ae:be:cc:bd:b4:c5:08:27:14:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 21 00:10:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed78831ca7ae62f03957400d72b763222d329fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:35:e7:08:f9:40:cf:d2:62:0d:78:a8:34:
                    6d:c9:ac:36:f1:4c:ce:db:33:36:f8:f5:0c:b6:71:
                    82:83:7e:0e:ed:7f:37:36:da:4d:18:cf:22:72:39:
                    97:ea:42:60:7d:73:e3:7b:01:57:52:68:df:b0:22:
                    74:7b:47:57:7a:21:cc:d9:bb:48:2d:32:1f:de:99:
                    04:6f:28:a7:3e:09:5c:98:0e:71:32:c5:ef:13:51:
                    da:9d:71:2f:6f:36:98:44:ea:5e:47:66:e9:5f:d1:
                    8b:85:4e:03:72:eb:75:31:95:d7:f3:25:88:0b:ee:
                    47:7c:e4:0a:49:bc:da:a6:c8:01:2e:c0:fd:58:fc:
                    b8:b2:cc:d1:d9:89:54:a3:2d:ce:44:58:62:89:15:
                    52:3f:b6:e1:86:3e:63:15:73:f0:d6:aa:13:11:21:
                    d8:52:fd:da:60:8c:30:e2:f3:c3:b7:5b:8b:95:6b:
                    d6:5b:1d:dc:c2:bf:11:54:e8:d1:00:46:aa:93:12:
                    46:e7:ba:60:ce:27:3c:aa:77:35:36:e2:6e:60:84:
                    3c:fa:ad:dc:fc:9e:e2:45:b5:ab:a6:06:00:4e:b5:
                    75:70:f2:31:b2:32:0a:c6:c4:ed:e8:8d:a0:f8:fa:
                    06:ad:a7:14:22:e9:da:7b:88:03:26:fe:17:ae:f9:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:78:83:1C:A7:AE:62:F0:39:57:40:0D:72:B7:63:22:2D:32:9F:E4
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XiDHKeuYvA5V0ANcrdjIi0yn-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:98:79:6f:6f:d9:c2:10:72:9a:2d:d1:e2:dc:0b:b6:f2:
         1a:71:d7:b3:d4:d3:d1:d4:34:64:b1:ca:dd:d6:6a:e1:2e:00:
         1b:eb:6f:ee:cd:f1:b7:70:1a:85:70:2f:87:52:ce:cf:30:d2:
         5c:2d:34:90:f9:87:29:a1:11:a4:74:9a:cd:e6:59:a2:2b:91:
         85:c3:b4:03:6e:30:55:1a:26:0e:4d:a2:9f:33:ad:69:78:07:
         57:78:de:53:24:9f:c8:d0:83:40:41:93:8a:56:2b:21:04:8a:
         a7:3d:35:7d:07:51:18:fc:6a:49:6f:56:ac:bc:cf:d1:ae:1a:
         89:d6:f0:53:33:85:d7:a6:96:f8:83:4d:cc:1c:64:08:97:21:
         63:4e:de:75:6a:ec:28:c0:d7:76:83:f9:28:55:12:a6:c4:a0:
         93:45:c9:b8:89:da:3d:9c:e6:c8:f2:29:8a:93:7a:09:8e:8b:
         84:65:1c:46:4c:50:5c:8a:9e:d5:4d:70:8d:39:35:a2:7e:9b:
         96:6d:1a:26:1d:0e:11:31:27:2c:c6:ce:37:23:da:bb:2d:8f:
         73:05:bb:84:61:d9:e7:26:2d:f0:f8:14:0f:c3:c8:1d:3e:50:
         73:57:bf:f3:c1:3c:4c:1c:6a:5f:9b:ef:8a:2c:79:3f:d5:e1:
         cc:74:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:50:38 2026 by rpki-client