This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa
File:                     NNL_88Woct_T6luEswoue12Xh5I.roa (raw, json)
Hash identifier:          JY5j0w75d0IzVK/O1rqDiG1/Sae9JDT0ruM/33Thf3A=
Subject key identifier:   34:D2:FF:F3:C5:A8:72:DF:D3:EA:5B:84:B3:0A:2E:7B:5D:97:87:92
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C1955064C7767E21750DFB97C7DABA65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa
Signing time:             Wed 08 Mar 2023 14:17:13 +0000
ROA not before:           Wed 08 Mar 2023 14:17:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:95:50:64:c7:76:7e:21:75:0d:fb:97:c7:da:ba:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  8 14:17:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34d2fff3c5a872dfd3ea5b84b30a2e7b5d978792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:57:af:0a:72:ce:49:09:5a:05:f5:50:46:
                    24:49:de:53:08:fe:65:84:3c:ea:6f:12:11:ec:03:
                    e1:5b:d6:ce:b3:86:98:4d:6d:93:37:b1:b4:af:12:
                    60:03:d9:aa:c5:86:1a:b3:f9:22:15:6e:27:e6:a9:
                    15:34:69:d9:0a:25:62:b9:78:4e:22:00:53:18:54:
                    01:ea:33:04:38:2a:19:3a:8a:11:49:f1:9c:7e:46:
                    16:2c:43:e4:8c:f8:d1:67:ff:62:26:97:11:2c:06:
                    53:0d:00:f7:62:d8:11:e6:9b:e3:79:c5:69:6e:2b:
                    d3:88:98:04:4e:90:46:98:4c:b8:c1:2e:d0:53:00:
                    e8:12:3d:90:b8:6a:f5:b6:b7:2b:e1:17:b0:7a:0a:
                    01:79:6d:aa:bc:0a:6d:cc:1f:85:37:4d:d8:04:f4:
                    6c:87:7c:31:b1:32:f3:19:43:36:0a:c6:d5:70:c9:
                    24:04:7e:aa:60:59:3e:bc:af:3a:05:c9:89:5b:87:
                    d2:6a:d9:cc:b5:a1:9c:c9:99:b6:8d:a1:2d:a0:9a:
                    3e:75:9f:06:71:46:19:4b:17:1f:5f:42:7f:48:77:
                    5d:74:48:49:58:1e:3e:ba:e3:da:b9:a9:5f:f6:16:
                    ec:a6:86:ac:2b:4d:44:cc:c7:58:8f:eb:b7:0e:5f:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:FF:F3:C5:A8:72:DF:D3:EA:5B:84:B3:0A:2E:7B:5D:97:87:92
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:40:08:d9:08:87:35:6b:90:4c:c4:4e:66:f7:ce:63:1b:
         20:b9:09:1a:74:9d:58:a2:56:df:3f:1b:0c:a5:0b:e3:13:b6:
         57:3d:36:ba:5c:0b:70:54:a7:dd:53:34:b7:0c:62:12:06:0f:
         07:d1:50:dd:e5:c7:28:5a:30:78:03:0e:18:42:c6:bf:ee:96:
         25:de:8f:0c:a9:23:96:c7:1c:ee:37:fd:6a:ab:1c:e3:58:da:
         25:ed:54:ff:6b:cf:7e:97:3c:0e:ae:a8:99:3e:83:36:9b:c4:
         0f:37:23:55:da:45:06:c0:41:36:08:8f:70:ab:30:1c:c5:2e:
         b0:9b:c1:c1:d0:f2:1e:58:0d:a3:e4:ba:b6:87:54:49:f1:17:
         ff:fc:40:a5:5d:ef:b3:07:de:43:ac:b9:d5:87:20:57:ba:75:
         00:2f:3d:49:52:a1:db:1c:59:52:61:2f:b6:ce:89:bb:3d:87:
         f3:28:0b:83:6b:4f:0a:7a:c4:c8:ed:6c:95:31:00:dc:3d:91:
         bb:6f:6f:b8:ab:ea:e5:de:e1:26:7a:47:66:10:54:09:98:72:
         5d:20:41:36:b7:1d:92:88:a8:a4:47:9f:df:5d:4d:a6:d7:e4:
         e9:8b:45:22:d6:2a:fe:13:c9:98:97:48:4a:91:f7:6d:6f:1d:
         1d:a8:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 07:28:22 2026 by rpki-client