This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DD8COiVzDNofGpb95NpG21Rlj1A.roa
File:                     DD8COiVzDNofGpb95NpG21Rlj1A.roa (raw, json)
Hash identifier:          AAqDgiap/OG/5zy+YY2V0HWRrtxXBsaAZcvAcIA1hXM=
Subject key identifier:   0C:3F:02:3A:25:73:0C:DA:1F:1A:96:FD:E4:DA:46:DB:54:65:8F:50
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01872FD483A2C1AF8052DF11CDEB5165F365
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DD8COiVzDNofGpb95NpG21Rlj1A.roa
Signing time:             Thu 30 Mar 2023 00:04:29 +0000
ROA not before:           Thu 30 Mar 2023 00:04:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:187:2fd4:370c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2f:d4:83:a2:c1:af:80:52:df:11:cd:eb:51:65:f3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 30 00:04:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c3f023a25730cda1f1a96fde4da46db54658f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:d4:f8:6e:8f:ab:de:b8:b0:f5:07:ee:46:
                    69:28:3d:ec:18:d9:90:7d:97:a2:39:7b:6b:a3:a9:
                    a0:8c:6f:b7:28:8b:77:b6:e9:2a:21:41:46:eb:1c:
                    ab:34:4b:e3:48:0b:62:1b:d4:4e:2e:ff:70:f4:76:
                    55:fa:a7:a9:66:38:c8:05:d6:55:11:3f:df:2f:b4:
                    c2:60:17:1a:c6:2d:4c:54:8f:b3:20:41:55:98:77:
                    93:a4:ba:70:d2:1f:f7:78:6a:71:ea:26:4e:1e:ab:
                    cd:d7:bd:4d:55:8f:a8:eb:40:57:84:02:55:6d:4e:
                    40:5a:d0:f1:a6:fd:d2:e6:d8:10:02:4b:e9:b9:81:
                    cc:ce:5a:fb:f7:80:62:7b:fc:f2:80:4f:b0:48:86:
                    af:d8:51:c3:11:3f:40:33:dd:4f:ef:ba:d6:fe:4a:
                    88:98:e8:c2:e4:fe:74:6d:1e:9e:25:ca:fe:7a:f1:
                    41:99:1a:2d:5c:3a:01:bb:17:aa:68:be:39:52:ee:
                    fe:2a:ef:54:00:d1:fd:d3:dd:30:1f:1a:2b:d7:32:
                    59:5e:17:e5:04:e9:01:2d:cd:1d:dd:45:30:af:dd:
                    36:d3:32:5d:68:4d:f0:49:10:00:dc:07:aa:75:38:
                    94:ca:63:53:88:b3:4b:92:b4:ac:2f:09:f4:39:a0:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3F:02:3A:25:73:0C:DA:1F:1A:96:FD:E4:DA:46:DB:54:65:8F:50
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DD8COiVzDNofGpb95NpG21Rlj1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:50:e8:6b:a3:52:d5:a4:01:de:ff:ca:7b:b2:2d:ef:12:
         00:fe:bf:bf:c3:06:54:4b:29:06:11:3d:20:57:45:8d:db:11:
         4e:94:a1:e1:57:bb:9a:03:13:e7:dc:59:60:ac:6b:4c:52:f2:
         ff:f0:5b:fe:c8:7a:3e:c9:cb:8b:b6:c7:9b:37:98:c3:a2:c3:
         98:af:40:0f:77:ba:3e:2a:b6:30:7c:09:b4:57:6b:90:9e:4d:
         e4:b7:f7:73:54:05:a2:49:45:82:8e:a6:f7:07:93:21:e8:86:
         c5:32:00:20:11:4e:90:12:73:5d:72:5c:4a:40:fa:c5:61:df:
         3a:58:d5:9f:01:e5:30:bc:a1:a1:e7:3f:03:9f:7c:e6:71:aa:
         66:8e:8d:1d:03:bb:19:9b:02:04:93:8b:2a:8c:65:5f:7e:b2:
         cb:81:f2:aa:23:f1:51:ee:d5:36:ee:94:50:aa:6a:d7:b6:82:
         2f:23:73:27:15:af:34:05:0b:ef:b0:36:4d:bf:38:45:a5:ad:
         d8:c1:8f:50:a2:0f:59:7a:a2:60:b5:af:df:12:41:3f:7a:21:
         4e:b7:84:fb:86:9c:3b:6f:e2:5b:5f:40:c9:3e:64:f6:f5:06:
         b0:79:3c:b5:f6:4b:3a:40:61:1c:5b:cf:d8:3a:4e:9e:43:2f:
         e8:fd:7c:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcv1IOiwa+AUt8RzetRZfNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMwMDAwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzNmMDIzYTI1NzMwY2RhMWYxYTk2ZmRlNGRhNDZkYjU0NjU4ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdfU+G6Pq964sPUH7kZpKD3sGNmQ
fZeiOXtro6mgjG+3KIt3tukqIUFG6xyrNEvjSAtiG9ROLv9w9HZV+qepZjjIBdZV
ET/fL7TCYBcaxi1MVI+zIEFVmHeTpLpw0h/3eGpx6iZOHqvN171NVY+o60BXhAJV
bU5AWtDxpv3S5tgQAkvpuYHMzlr794Bie/zygE+wSIav2FHDET9AM91P77rW/kqI
mOjC5P50bR6eJcr+evFBmRotXDoBuxeqaL45Uu7+Ku9UANH9090wHxor1zJZXhfl
BOkBLc0d3UUwr9020zJdaE3wSRAA3AeqdTiUymNTiLNLkrSsLwn0OaCM+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAw/AjolcwzaHxqW/eTaRttUZY9QMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvREQ4Q09pVnpETm9mR3BiOTVOcEcyMVJsajFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGr4UOhro1LVpAHe/8p7
si3vEgD+v7/DBlRLKQYRPSBXRY3bEU6UoeFXu5oDE+fcWWCsa0xS8v/wW/7Iej7J
y4u2x5s3mMOiw5ivQA93uj4qtjB8CbRXa5CeTeS393NUBaJJRYKOpvcHkyHohsUy
ACARTpASc11yXEpA+sVh3zpY1Z8B5TC8oaHnPwOffOZxqmaOjR0DuxmbAgSTiyqM
ZV9+ssuB8qoj8VHu1TbulFCqate2gi8jcycVrzQFC++wNk2/OEWlrdjBj1CiD1l6
omC1r98SQT96IU63hPuGnDtv4ltfQMk+ZPb1BrB5PLX2SzpAYRxbz9g6Tp5DL+j9
fLM=
-----END CERTIFICATE-----
Generated at Wed Dec 31 19:37:46 2025 by rpki-client