This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvrMdTXtilIdoyAYJ0TSK_GvHLo.roa
File:                     MvrMdTXtilIdoyAYJ0TSK_GvHLo.roa (raw, json)
Hash identifier:          5F0y+DYm76DrwoLrrbWGc+OscRIgC5FVltQqubfdTrE=
Subject key identifier:   32:FA:CC:75:35:ED:8A:52:1D:A3:20:18:27:44:D2:2B:F1:AF:1C:BA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189819053FD449D9CA7AE9B705C1509DDDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvrMdTXtilIdoyAYJ0TSK_GvHLo.roa
Signing time:             Sun 23 Jul 2023 07:04:26 +0000
ROA not before:           Sun 23 Jul 2023 07:04:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:189:8190:278d/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:81:90:53:fd:44:9d:9c:a7:ae:9b:70:5c:15:09:dd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 23 07:04:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32facc7535ed8a521da320182744d22bf1af1cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:e5:77:11:db:9f:11:b4:ea:07:00:d7:de:
                    31:74:9b:8a:22:aa:7a:79:2e:10:0d:59:85:ca:c4:
                    fd:59:50:6e:f5:0b:fa:13:9c:a6:6f:5b:28:ae:c1:
                    dc:d4:44:a8:eb:a8:2f:ae:c6:e0:06:d1:3f:2e:d6:
                    fa:f4:e7:ee:1b:f9:bb:54:ea:54:b6:20:e3:c6:f4:
                    9e:98:f5:4d:3d:41:4b:16:4c:99:d7:c6:74:23:ae:
                    f5:03:51:6a:0d:3d:17:a4:d7:78:b4:9f:0f:ac:01:
                    6c:e3:c2:0b:3a:20:bc:40:1d:02:bd:57:a2:c7:ed:
                    99:92:f6:d5:83:72:ce:95:ae:89:5e:0e:2a:73:21:
                    18:7d:df:48:b9:a3:af:0c:d5:fb:db:ec:a8:be:14:
                    fc:27:9e:53:56:89:21:bc:a3:63:64:7e:25:57:a4:
                    9f:b7:c1:e5:da:c3:ae:98:9c:d2:7d:06:ac:64:b9:
                    56:76:cf:40:51:fc:a0:ed:49:65:3c:25:30:c5:91:
                    80:da:cf:1a:a6:84:33:e4:ef:a2:02:82:58:0b:24:
                    98:5e:0f:ee:32:b9:e4:50:23:14:d4:1a:1d:8d:7a:
                    86:5b:2b:c4:de:e8:1b:2f:91:00:20:bf:67:ad:30:
                    b7:67:5a:a0:a2:8c:76:a0:2a:03:22:8c:07:8f:7b:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:CC:75:35:ED:8A:52:1D:A3:20:18:27:44:D2:2B:F1:AF:1C:BA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvrMdTXtilIdoyAYJ0TSK_GvHLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:ae:48:29:32:2b:fd:15:b0:0c:58:73:6e:8d:00:3a:9a:5f:
         4b:7a:9a:05:14:74:51:56:67:99:b8:c8:96:40:ea:67:25:0b:
         e8:24:db:57:d2:33:8d:3d:45:e7:a5:a3:a4:18:a3:32:6c:85:
         f1:34:0c:19:10:fe:de:ef:2c:75:7f:ce:5f:74:d6:3c:eb:c6:
         38:07:ee:6d:13:12:b6:42:d3:e3:e3:98:4d:22:23:87:17:75:
         e5:d9:bc:b8:e7:e7:ba:d1:32:e4:89:2b:36:0b:eb:b0:88:4a:
         f2:27:55:94:a1:f6:c1:04:3f:75:1d:dd:e6:51:f8:82:50:1e:
         fd:ad:4e:0e:e0:35:27:62:f9:f0:91:d4:e1:43:c2:eb:33:8c:
         53:51:c0:06:81:40:eb:2c:3c:5d:50:8b:79:5d:c1:a6:97:01:
         f3:34:26:4e:6f:f0:36:c1:5f:3e:9c:b4:eb:78:b8:d2:6c:f0:
         83:ee:89:09:59:d0:4f:d7:45:2c:3a:aa:27:d1:c5:81:8e:f6:
         95:52:d4:bd:5b:6e:4a:48:32:05:ae:7f:67:38:70:c5:68:3a:
         9d:a2:e7:e3:45:99:fe:08:09:b7:52:bd:a4:20:6b:cf:ae:74:
         55:dc:86:88:ce:6b:5f:18:17:00:51:78:65:01:0c:5b:2d:63:
         e5:18:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:27:22 2025 by rpki-client