This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeHBZ7kqWNLvbFQGsvz-wnj-H5U.roa
File:                     QeHBZ7kqWNLvbFQGsvz-wnj-H5U.roa (raw, json)
Hash identifier:          28IsIQ6UtYFhpGW5uRNmhp/zgKBWEGXiWDL5T3j+pJg=
Subject key identifier:   41:E1:C1:67:B9:2A:58:D2:EF:6C:54:06:B2:FC:FE:C2:78:FE:1F:95
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018959E69612C4803B7D95DEFCEC49609F3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeHBZ7kqWNLvbFQGsvz-wnj-H5U.roa
Signing time:             Sat 15 Jul 2023 14:13:51 +0000
ROA not before:           Sat 15 Jul 2023 14:13:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:59:e6:96:12:c4:80:3b:7d:95:de:fc:ec:49:60:9f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 15 14:13:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41e1c167b92a58d2ef6c5406b2fcfec278fe1f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:17:ae:5b:c9:54:28:eb:92:fc:68:8d:20:
                    54:9a:05:15:fa:c6:c1:0c:53:9c:3f:3d:9f:f2:62:
                    6d:5c:c2:fb:2c:d8:c5:d6:0f:16:09:6f:80:93:14:
                    d8:5a:8d:df:08:03:d4:25:98:2e:cd:5c:73:25:eb:
                    92:0f:95:04:9d:34:18:a2:13:36:f9:bb:21:c6:73:
                    89:17:fd:12:30:c8:1d:f3:04:0d:1e:80:99:e1:44:
                    e0:72:bb:a0:be:54:fa:fc:a8:0e:28:4f:e5:18:e2:
                    de:31:c2:37:fd:3d:98:4c:0e:ea:01:06:ca:0c:95:
                    ab:25:90:e2:de:79:20:28:a5:38:53:da:4b:73:62:
                    c1:6a:ef:f3:a6:80:37:0a:2c:65:90:66:f2:3a:b9:
                    9c:d5:d9:5e:2b:56:89:26:39:b7:79:0d:a9:8f:df:
                    5a:b2:38:24:39:5d:76:97:76:65:60:ca:28:2a:27:
                    8c:c5:31:fe:a9:65:39:3a:35:97:45:18:56:71:14:
                    13:1b:69:99:2c:9a:27:a9:f3:fc:9a:a5:79:a2:b6:
                    4f:7d:34:06:f7:1c:39:bc:a6:59:ef:4f:f7:53:96:
                    50:28:a4:5d:10:2d:54:e0:3d:c3:be:ff:90:e3:04:
                    47:f9:7d:7b:29:8f:0d:18:fa:98:78:a5:72:5e:5a:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E1:C1:67:B9:2A:58:D2:EF:6C:54:06:B2:FC:FE:C2:78:FE:1F:95
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeHBZ7kqWNLvbFQGsvz-wnj-H5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:95:54:fd:56:1d:59:b2:57:0c:f4:03:1b:09:a2:40:e8:4c:
         65:ca:af:86:79:a7:1f:c6:7e:b8:6e:2c:76:5e:40:f7:8f:e5:
         26:0a:c9:ca:70:c9:69:c1:48:aa:d5:79:d7:45:73:d9:2d:ee:
         4c:b6:ff:78:b9:3d:7f:67:82:12:e8:bd:53:e5:e2:1d:cc:49:
         95:f9:16:cb:93:4a:1e:45:d9:17:4b:de:a2:6c:0b:82:6d:42:
         c2:f8:ef:86:0a:43:cb:f3:91:77:9d:c4:fb:3a:92:a4:c2:d8:
         26:eb:8d:1e:cd:7a:96:04:1a:f6:0f:1d:d2:38:2e:c5:79:9f:
         ca:35:fa:27:07:3c:5d:cd:29:a7:36:e5:e9:70:cd:42:38:8b:
         3d:cf:96:b7:04:5d:67:91:e1:db:c8:30:d3:35:72:9f:fb:04:
         6d:da:49:98:68:c7:03:d1:d0:35:a6:88:6a:8e:9f:4d:e8:ed:
         3b:f2:57:67:49:13:bb:f8:7c:7a:23:c9:d7:d2:96:9b:2d:87:
         58:a2:95:10:d1:5c:d4:9d:18:b4:e0:50:98:d2:26:cd:89:20:
         ef:b5:e1:91:ef:f7:2e:b9:1f:65:dd:d0:3e:00:09:1d:14:01:
         3c:5c:08:08:6d:52:e0:ec:a3:35:42:f7:d3:b3:0d:01:ba:88:
         74:ff:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:48:29 2025 by rpki-client