This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KoqHqKKyjQAfvP3JnMT46w7qt7w.roa
File:                     KoqHqKKyjQAfvP3JnMT46w7qt7w.roa (raw, json)
Hash identifier:          Wuv0gu9YUJyIWa2DafDbtgg3Xqfi4RgdYRlsV0W8+0A=
Subject key identifier:   2A:8A:87:A8:A2:B2:8D:00:1F:BC:FD:C9:9C:C4:F8:EB:0E:EA:B7:BC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187164BEB935B7D7674DF93E5F3C62AA845
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KoqHqKKyjQAfvP3JnMT46w7qt7w.roa
Signing time:             Sat 25 Mar 2023 01:04:46 +0000
ROA not before:           Sat 25 Mar 2023 01:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:187:164b:bdc6/128 maxlen: 128
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:16:4b:eb:93:5b:7d:76:74:df:93:e5:f3:c6:2a:a8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 25 01:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2a8a87a8a2b28d001fbcfdc99cc4f8eb0eeab7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:ff:55:45:4a:80:51:46:8d:94:a9:d4:35:
                    4a:b0:e9:1f:6c:b6:63:6c:a6:38:ef:54:7f:2c:9a:
                    f8:0a:13:7d:e2:62:8b:22:23:4e:64:e7:33:e3:7f:
                    37:df:42:b8:bd:c8:4f:55:e7:93:a9:ad:3c:3e:46:
                    78:a0:7e:fe:d4:f3:f7:84:a6:97:be:2d:75:8c:78:
                    5f:80:36:ba:b1:6f:62:d8:3c:e3:ea:b2:5c:45:b8:
                    23:7d:23:dd:93:23:06:cb:54:b4:ac:c4:1b:bd:8c:
                    e2:46:c9:3b:95:0c:ab:7a:75:d9:80:e9:14:2e:f3:
                    6d:c9:82:c0:16:82:a7:a9:57:3a:46:50:7f:b9:9c:
                    00:ec:58:6d:4d:11:d4:55:01:00:78:1d:59:2d:da:
                    e4:82:18:80:02:db:c5:5f:4f:08:d0:02:5e:dc:bc:
                    cd:60:cb:27:9f:47:77:04:3c:81:f7:1b:52:7d:6a:
                    85:27:a7:40:81:60:8b:04:92:a8:fe:c8:6f:a3:15:
                    a5:12:8c:fe:05:0a:20:ba:5e:b4:3a:5e:d2:f5:d1:
                    20:96:bf:1c:14:18:02:a9:d4:1b:ae:8c:94:30:fc:
                    94:62:6c:a5:2f:32:78:ad:33:38:d0:74:1e:a1:97:
                    e0:e1:81:02:a4:67:5f:d1:45:0e:32:aa:12:bc:76:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:87:A8:A2:B2:8D:00:1F:BC:FD:C9:9C:C4:F8:EB:0E:EA:B7:BC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KoqHqKKyjQAfvP3JnMT46w7qt7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:33:bc:56:80:87:5f:9d:5d:31:4c:bc:88:4a:ba:c8:c6:
         f7:90:0a:39:7d:c7:7a:29:08:7d:92:26:de:c3:8d:37:01:c0:
         14:6c:82:88:7e:c1:92:57:5a:1d:15:e6:45:d9:f6:1d:d8:cb:
         84:c7:89:39:90:7a:ef:cc:b3:16:e9:0e:87:9c:e1:3e:0b:6a:
         f8:77:74:25:05:81:6a:9c:b4:5c:94:e6:6c:90:ee:7d:56:4c:
         04:56:8d:a4:e0:fb:e7:e1:32:a9:aa:6c:cc:9d:ab:0e:c2:41:
         88:d9:be:52:51:ef:4b:d2:34:6c:11:9a:59:1b:d2:17:ef:8a:
         98:21:6e:a6:5d:e1:83:d1:58:b8:9e:27:01:d2:76:68:dc:72:
         04:54:75:1a:93:68:0f:f1:24:85:06:e1:19:2d:3a:f4:6d:25:
         31:08:60:54:42:cf:7a:ff:ad:83:66:33:b3:50:cd:c1:37:56:
         6d:79:0a:04:b9:f9:ed:f1:0e:d6:ba:c7:d5:39:f5:ed:21:ac:
         59:6f:78:00:ee:aa:c0:f7:78:6b:27:79:14:16:3f:34:2d:de:
         96:20:b2:1b:d1:bf:dc:31:a4:cc:b6:19:4b:b6:3f:13:1e:39:
         0a:41:5c:5c:91:54:13:f6:70:6a:e0:14:bb:ed:91:8a:2f:ec:
         86:1e:ec:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcWS+uTW312dN+T5fPGKqhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MDEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYThhODdhOGEyYjI4ZDAwMWZiY2ZkYzk5Y2M0ZjhlYjBlZWFiN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApub/VUVKgFFGjZSp1DVKsOkfbLZj
bKY471R/LJr4ChN94mKLIiNOZOcz438330K4vchPVeeTqa08PkZ4oH7+1PP3hKaX
vi11jHhfgDa6sW9i2Dzj6rJcRbgjfSPdkyMGy1S0rMQbvYziRsk7lQyrenXZgOkU
LvNtyYLAFoKnqVc6RlB/uZwA7FhtTRHUVQEAeB1ZLdrkghiAAtvFX08I0AJe3LzN
YMsnn0d3BDyB9xtSfWqFJ6dAgWCLBJKo/shvoxWlEoz+BQogul60Ol7S9dEglr8c
FBgCqdQbroyUMPyUYmylLzJ4rTM40HQeoZfg4YECpGdf0UUOMqoSvHa8twIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCqKh6iiso0AH7z9yZzE+OsO6re8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS29xSHFLS3lqUUFmdlAzSm5NVDQ2dzdxdDd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG8WM7xWgIdfnV0xTLyI
SrrIxveQCjl9x3opCH2SJt7DjTcBwBRsgoh+wZJXWh0V5kXZ9h3Yy4THiTmQeu/M
sxbpDoec4T4Lavh3dCUFgWqctFyU5myQ7n1WTARWjaTg++fhMqmqbMydqw7CQYjZ
vlJR70vSNGwRmlkb0hfvipghbqZd4YPRWLieJwHSdmjccgRUdRqTaA/xJIUG4Rkt
OvRtJTEIYFRCz3r/rYNmM7NQzcE3Vm15CgS5+e3xDta6x9U59e0hrFlveADuqsD3
eGsneRQWPzQt3pYgshvRv9wxpMy2GUu2PxMeOQpBXFyRVBP2cGrgFLvtkYov7IYe
7Lo=
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:40 2026 by rpki-client