This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6e-bSLZ7Rf7tpt_sec6jb0bY6o.roa
File:                     D6e-bSLZ7Rf7tpt_sec6jb0bY6o.roa (raw, json)
Hash identifier:          aTmBjj1CUhbW6/eCwHdPES8RAMKsdQwX6Cx6tC2sv6k=
Subject key identifier:   0F:A7:BE:6D:22:D9:ED:17:FB:B6:9B:7F:B1:E7:3A:8D:BD:1B:63:AA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189585DD3D35C761CA1CD3E1F52D94BD119
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6e-bSLZ7Rf7tpt_sec6jb0bY6o.roa
Signing time:             Sat 15 Jul 2023 07:04:51 +0000
ROA not before:           Sat 15 Jul 2023 07:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:189:585d:5ef2/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:58:5d:d3:d3:5c:76:1c:a1:cd:3e:1f:52:d9:4b:d1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 15 07:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0fa7be6d22d9ed17fbb69b7fb1e73a8dbd1b63aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:08:3e:18:bb:9c:42:55:ce:46:3b:8e:0f:
                    aa:7b:fc:d8:07:9f:27:13:56:22:c3:dd:48:13:a7:
                    3a:fd:74:20:56:9c:49:4b:ee:31:a1:44:49:a6:ee:
                    50:e8:a4:a1:23:99:9d:d9:e7:85:99:b9:1e:7f:b3:
                    d2:7b:68:fb:31:1f:eb:fc:66:57:9d:df:90:ad:83:
                    d8:91:92:08:95:1a:ae:c5:6e:fe:37:e9:33:d9:f4:
                    3d:f0:7e:68:96:53:17:c2:64:f1:aa:c5:91:6b:ee:
                    52:d0:ab:7f:9c:0d:a2:bd:7e:5e:74:49:58:40:7f:
                    be:3c:d2:d4:11:e3:b5:fb:f3:c7:dd:10:06:8f:a7:
                    66:61:59:8a:e4:39:b9:f2:c9:3b:23:3b:20:98:96:
                    b5:9d:e5:23:cd:1e:ee:44:ac:b0:8e:5b:6e:48:77:
                    db:cb:5e:f3:87:e7:7f:82:d2:77:d7:b5:76:1e:40:
                    c0:1c:71:18:4e:2a:a1:1e:e8:2c:ba:fb:d0:b7:77:
                    ca:41:93:ad:b2:e2:06:f7:5a:c6:33:9a:41:de:b0:
                    2d:fb:85:bb:da:6d:45:07:c2:75:75:76:50:19:17:
                    47:1a:3b:3a:58:d4:10:08:0e:85:3b:29:64:c8:2e:
                    9b:cd:6d:8b:29:e8:f9:14:c6:35:f6:cf:22:7e:aa:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A7:BE:6D:22:D9:ED:17:FB:B6:9B:7F:B1:E7:3A:8D:BD:1B:63:AA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6e-bSLZ7Rf7tpt_sec6jb0bY6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:83:ff:b8:6a:f5:a5:32:37:ab:e0:ee:41:d6:aa:67:3e:21:
         59:46:48:6c:ca:11:08:d8:07:25:2f:f4:42:d9:0c:d5:36:9c:
         e4:8e:36:45:52:51:88:64:c0:66:86:52:4d:75:35:0c:d6:a0:
         52:4c:32:76:b8:b0:e2:34:3e:0c:09:17:1f:d6:6c:da:e0:ac:
         a2:df:14:e2:0f:ba:d9:8b:a5:9e:85:d4:de:65:23:dc:9e:c2:
         d7:40:4e:99:8d:29:a5:9b:54:c9:b1:e4:92:46:49:d3:8f:30:
         e7:64:ef:ab:3c:24:79:4f:92:c2:76:aa:dd:04:2c:88:5d:7c:
         af:65:24:69:c8:06:b7:26:c6:12:82:4a:02:c1:73:e1:41:d5:
         2d:63:19:cd:de:ac:61:f0:5c:f6:87:30:ac:be:f3:38:1e:83:
         12:01:25:32:35:82:ce:5a:7f:77:f6:0a:7a:d7:e0:63:0f:2e:
         e9:6d:9a:d9:a3:d9:83:f9:ca:e7:7c:da:32:8e:ab:17:b9:64:
         06:e1:0f:82:1e:3c:45:dd:aa:e4:d8:ca:35:15:41:3f:2c:1d:
         39:4f:51:37:1d:4d:19:bb:c2:b4:d2:25:2b:52:62:d4:f0:3d:
         23:29:e6:df:22:35:a5:98:a6:9e:8e:79:ab:09:08:3a:da:0c:
         cb:3b:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:44:26 2025 by rpki-client