This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IaMlLV_pScNeHzMgcWpLptvYpgk.roa
File:                     IaMlLV_pScNeHzMgcWpLptvYpgk.roa (raw, json)
Hash identifier:          saiOyEjgOLoaJuoKIgWNyOxG6d3SKduwCZSNsMc4vO0=
Subject key identifier:   21:A3:25:2D:5F:E9:49:C3:5E:1F:33:20:71:6A:4B:A6:DB:D8:A6:09
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018636F2D1C991A9FE82780121B1D2721546
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IaMlLV_pScNeHzMgcWpLptvYpgk.roa
Signing time:             Thu 09 Feb 2023 16:12:08 +0000
ROA not before:           Thu 09 Feb 2023 16:12:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:f2:d1:c9:91:a9:fe:82:78:01:21:b1:d2:72:15:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb  9 16:12:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21a3252d5fe949c35e1f3320716a4ba6dbd8a609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:26:65:5d:d3:62:1e:45:99:b0:3c:63:d2:
                    b0:4e:41:32:91:6b:2c:74:91:5c:78:31:dd:b3:d9:
                    48:b8:ad:93:2e:f1:8e:2c:18:4d:b3:66:49:a2:5b:
                    04:58:a0:aa:48:e8:61:62:2a:78:ca:d6:4f:4f:50:
                    22:db:1b:5a:f0:ca:36:25:27:a5:7d:1e:bd:61:f3:
                    ae:95:cb:dd:19:f9:fc:6c:23:eb:5c:17:71:eb:93:
                    21:bc:0b:32:a7:21:83:5f:4e:ed:0e:31:30:90:0e:
                    47:3f:48:d7:1d:42:3c:d2:b8:6f:44:7e:4c:76:a0:
                    eb:5b:07:99:e6:bf:94:87:e3:8a:02:df:f2:c9:a4:
                    28:e2:56:b5:2f:7d:ad:68:1b:63:2a:fd:ed:c7:4e:
                    95:60:72:41:79:f6:7e:6e:58:ab:da:46:c1:ec:4d:
                    d9:ca:18:2e:a3:ae:22:9e:76:10:69:b5:28:4c:73:
                    ed:3d:87:ed:1c:9b:49:cf:d5:60:e8:b1:0b:9b:28:
                    3f:f3:10:b0:63:04:c6:7d:f5:ed:0a:4f:21:3f:c2:
                    d1:ff:65:70:43:c3:76:25:b5:31:25:81:f0:b5:29:
                    f2:7d:cc:99:82:eb:6d:e9:57:b7:96:88:d4:d2:ac:
                    34:f8:47:02:3d:67:c6:19:be:91:f9:4f:0b:14:7d:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A3:25:2D:5F:E9:49:C3:5E:1F:33:20:71:6A:4B:A6:DB:D8:A6:09
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IaMlLV_pScNeHzMgcWpLptvYpgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:c0:62:2e:9d:6d:04:90:9c:db:ff:de:2a:f4:d4:53:ee:
         7b:1f:b7:41:23:b6:33:67:6f:eb:ce:ee:36:5c:4f:92:02:d6:
         b4:38:87:f4:10:95:fc:2a:f9:25:13:13:87:d4:d7:03:f1:ca:
         19:77:f5:44:ff:5f:8c:ae:9d:b5:30:43:b2:8d:7f:4c:18:f9:
         de:31:ba:31:22:15:4f:7e:0a:fb:52:a0:6e:ce:3d:81:c5:c4:
         d1:5c:68:46:d3:b6:73:32:c8:43:a7:ed:4d:bd:54:84:3c:60:
         98:c6:d7:44:53:fb:aa:fe:17:cb:ed:f5:2e:fb:55:aa:28:de:
         7e:72:3c:d6:04:94:d0:31:85:24:8f:e5:11:29:76:92:f8:b2:
         af:98:78:57:c4:d2:9c:9e:4b:96:91:f0:97:b6:98:67:18:a8:
         4c:bd:ed:44:0c:b5:f1:8e:45:f1:00:98:db:84:7a:2b:69:3a:
         4a:26:b0:e1:35:c5:66:ef:6a:66:e6:b7:f9:6b:79:d3:91:db:
         92:c6:b7:17:08:85:ca:f1:74:84:7a:c6:38:e9:81:34:6a:9c:
         be:71:47:47:b4:d3:55:2e:1a:47:f5:ee:3a:e2:ae:88:6c:56:
         2a:46:82:77:7d:64:48:d3:4e:2e:b3:e2:f8:68:4d:30:5c:47:
         62:d8:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:40:12 2025 by rpki-client