This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9fyZkd_ISC996hKEhUPTU8zE3Iw.roa
File:                     9fyZkd_ISC996hKEhUPTU8zE3Iw.roa (raw, json)
Hash identifier:          Qhxph6QAavqp8nrl9p3F5pGTnFBjZsbq1y0O4piup70=
Subject key identifier:   F5:FC:99:91:DF:C8:48:2F:7D:EA:12:84:85:43:D3:53:CC:C4:DC:8C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8F06DC23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9fyZkd_ISC996hKEhUPTU8zE3Iw.roa
Signing time:             Wed 22 Jun 2022 17:12:32 +0000
ROA not before:           Wed 22 Jun 2022 17:12:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399591459 (0x8f06dc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 22 17:12:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5fc9991dfc8482f7dea12848543d353ccc4dc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8f:ad:8b:bf:5e:ea:21:47:53:78:e0:f6:38:
                    df:26:0f:5a:1d:0a:b7:ef:e2:b6:40:cd:5c:ec:fa:
                    ee:60:29:f8:65:df:59:3b:b8:b0:48:f4:0f:a5:b7:
                    5e:6e:15:7a:3a:e3:19:9a:e1:34:82:2e:ed:a1:f3:
                    0b:f8:d1:4c:b8:7b:fa:ec:7c:3a:67:f6:c4:70:d0:
                    de:78:e4:36:f6:f8:01:c1:a9:a8:54:4a:4b:89:79:
                    35:a8:82:93:5b:60:c6:a5:50:50:10:e3:3e:6d:f8:
                    0e:fa:1e:af:15:6d:24:95:9f:d9:cd:d6:b8:c2:dc:
                    cf:1e:e4:a2:55:6a:b9:a1:ce:b7:d3:f5:f0:cd:b3:
                    e9:05:ef:3e:7f:c1:16:b2:f2:9c:fb:79:9a:7b:3a:
                    37:ce:14:d2:8e:a6:93:f2:08:c3:b5:70:cb:81:c3:
                    9c:e6:22:20:9e:41:7b:3e:57:26:3a:3d:54:1c:6c:
                    33:1e:34:8c:ab:3c:4e:f0:04:34:a8:d4:45:a5:0a:
                    5e:3e:ca:10:26:37:cb:30:81:39:e9:c1:f8:07:8a:
                    47:55:9e:a5:f9:51:a8:28:25:87:f4:c9:8d:96:90:
                    0c:b4:55:83:7d:d0:83:f3:ad:53:66:3a:f6:63:87:
                    3a:2d:6e:81:65:39:44:f5:ca:a0:dc:85:64:b5:52:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FC:99:91:DF:C8:48:2F:7D:EA:12:84:85:43:D3:53:CC:C4:DC:8C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9fyZkd_ISC996hKEhUPTU8zE3Iw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:81:39:87:1c:48:ba:1d:7c:e4:ba:a2:95:92:a2:70:c3:
         a3:04:ce:7e:dd:89:49:4f:c4:23:2d:e3:b3:f9:6f:ad:97:aa:
         ec:84:7f:02:a2:01:96:60:7e:ef:88:55:fd:d0:51:cf:0d:77:
         c7:a5:c1:c7:e9:6e:cb:c4:1e:b5:0f:1d:af:1d:97:c5:62:e9:
         00:c9:e1:78:2b:a5:75:2d:a6:a8:99:e5:9c:ae:02:57:85:bf:
         c3:0e:bf:eb:2a:68:09:e1:d5:d1:fa:26:40:e6:cf:31:a8:cc:
         ef:84:49:b8:42:9f:ed:09:b9:24:22:a6:a5:02:f8:c9:16:f8:
         74:43:d8:8d:bf:b4:3a:01:f2:e6:d6:a6:bf:da:38:e7:6a:44:
         35:ed:ea:2c:a1:ad:2a:ff:a6:23:10:13:c3:1e:0f:14:fc:c7:
         5e:d3:4f:9a:00:7d:cb:c2:76:51:b7:4d:74:ab:8f:84:2b:06:
         ae:46:64:06:45:2f:e5:44:11:91:e7:4d:bc:a6:7d:1e:37:24:
         a2:b5:f1:a2:66:f8:ba:bf:4b:31:e0:96:78:76:7a:e8:8e:82:
         4c:77:d7:fc:12:82:f6:83:7f:f2:30:1b:ab:e8:5f:94:52:0b:
         7b:72:d8:1d:1e:03:5a:22:f9:0d:09:7a:dc:08:45:aa:3b:79:
         00:29:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:19:17 2025 by rpki-client