This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAbiAEN7Vc1hSoJW1p_WecIGq_A.roa
File:                     cAbiAEN7Vc1hSoJW1p_WecIGq_A.roa (raw, json)
Hash identifier:          q2tbvYVMhuVbM84dn4gFwyhkil64/cvFb8ky7TvwsPg=
Subject key identifier:   70:06:E2:00:43:7B:55:CD:61:4A:82:56:D6:9F:D6:79:C2:06:AB:F0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A2B4B2491174A005AA923E8A29145DAF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAbiAEN7Vc1hSoJW1p_WecIGq_A.roa
Signing time:             Fri 25 Aug 2023 06:04:19 +0000
ROA not before:           Fri 25 Aug 2023 06:04:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:2b4b:1373/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2b:4b:24:91:17:4a:00:5a:a9:23:e8:a2:91:45:da:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 25 06:04:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7006e200437b55cd614a8256d69fd679c206abf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:7c:25:38:e7:b4:27:19:14:d0:39:f2:e1:
                    b2:72:c4:d0:a3:a9:f9:b5:8e:56:23:0f:ad:2f:f4:
                    19:fa:b6:5a:71:e8:d7:6e:cf:60:68:4d:41:5e:6b:
                    c0:08:63:02:47:de:bd:f2:93:78:41:65:bd:1f:9a:
                    73:91:a4:c7:94:93:29:21:db:0e:0c:9c:91:d4:b8:
                    23:31:e0:c2:36:e7:7e:4c:48:01:50:90:bc:f1:e7:
                    60:a9:fb:a0:7b:55:fe:97:16:4c:91:e6:b1:37:18:
                    b5:06:89:09:90:1c:af:e2:a3:52:71:60:06:37:e6:
                    7d:21:b2:d2:b7:2d:8f:e4:c7:17:1f:68:39:d5:00:
                    95:bd:fe:16:a3:dc:71:b8:be:14:0b:5b:6e:a6:aa:
                    ad:77:25:ac:f0:2c:91:43:68:fa:d2:39:9d:ac:d1:
                    68:02:b0:66:7a:95:b7:ef:88:f5:d4:8c:64:55:d1:
                    18:63:f7:0a:34:35:5d:e8:d2:01:6f:40:af:a2:9e:
                    08:49:13:b3:be:32:3e:2a:e0:43:fb:65:20:6c:1c:
                    3b:e7:93:5b:2f:65:87:c3:1f:58:d5:9d:ec:5b:31:
                    ae:d9:65:ee:11:00:3d:17:b4:b1:ea:d5:9a:83:75:
                    17:d3:dd:83:cd:39:72:26:a7:e4:c3:69:8a:4e:02:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:E2:00:43:7B:55:CD:61:4A:82:56:D6:9F:D6:79:C2:06:AB:F0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAbiAEN7Vc1hSoJW1p_WecIGq_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:da:d1:93:a6:e7:6c:02:5b:3d:71:bf:e4:c1:59:c4:91:47:
         cc:b5:5b:97:5f:b7:d1:29:a7:26:c8:78:cf:58:22:ce:0b:f3:
         6b:5f:fc:69:59:37:15:d0:32:62:aa:6d:a3:bd:99:8d:f4:1e:
         47:95:17:56:af:7c:05:0b:c0:0a:74:f7:b3:c3:4a:79:48:59:
         56:65:0c:c0:52:86:2d:f0:b5:95:bd:74:b6:e0:ed:24:41:82:
         f1:f9:b7:d7:63:7f:64:40:43:a4:6e:d5:e8:a6:fe:8d:82:5f:
         44:fa:e7:48:4c:58:64:6d:1c:2f:2a:f1:b5:68:42:b5:80:c6:
         ef:7b:d8:50:c9:a8:f2:be:99:37:a4:fb:d3:40:7e:aa:53:0d:
         00:2d:d0:b1:40:ef:42:45:be:e6:61:eb:5d:62:8d:53:d9:03:
         0c:13:f8:40:fd:ce:6e:17:0b:c0:6f:d4:fb:9d:fd:90:e0:ab:
         a2:19:b1:74:2b:51:a0:02:46:62:17:83:1f:e9:0c:15:df:a6:
         94:3c:4a:ac:21:a2:d6:a9:62:7e:ba:38:70:78:fc:d9:19:89:
         f2:5b:3d:65:53:91:0e:b0:33:8f:eb:95:93:ab:9b:1b:7c:c3:
         89:bd:78:c2:1d:1b:b5:13:45:4f:21:b8:68:ba:a0:c9:82:39:
         ea:12:cb:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYorSySRF0oAWqkj6KKRRdryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MDYwNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDA2ZTIwMDQzN2I1NWNkNjE0YTgyNTZkNjlmZDY3OWMyMDZhYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02R8JTjntCcZFNA58uGycsTQo6n5
tY5WIw+tL/QZ+rZacejXbs9gaE1BXmvACGMCR9698pN4QWW9H5pzkaTHlJMpIdsO
DJyR1LgjMeDCNud+TEgBUJC88edgqfuge1X+lxZMkeaxNxi1BokJkByv4qNScWAG
N+Z9IbLSty2P5McXH2g51QCVvf4Wo9xxuL4UC1tupqqtdyWs8CyRQ2j60jmdrNFo
ArBmepW374j11IxkVdEYY/cKNDVd6NIBb0Cvop4ISROzvjI+KuBD+2UgbBw755Nb
L2WHwx9Y1Z3sWzGu2WXuEQA9F7Sx6tWag3UX092DzTlyJqfkw2mKTgKg5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHAG4gBDe1XNYUqCVtaf1nnCBqvwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY0FiaUFFTjdWYzFoU29KVzFwX1dlY0lHcV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFna0ZOm52wCWz1xv+TB
WcSRR8y1W5dft9EppybIeM9YIs4L82tf/GlZNxXQMmKqbaO9mY30HkeVF1avfAUL
wAp097PDSnlIWVZlDMBShi3wtZW9dLbg7SRBgvH5t9djf2RAQ6Ru1eim/o2CX0T6
50hMWGRtHC8q8bVoQrWAxu972FDJqPK+mTek+9NAfqpTDQAt0LFA70JFvuZh611i
jVPZAwwT+ED9zm4XC8Bv1Pud/ZDgq6IZsXQrUaACRmIXgx/pDBXfppQ8Sqwhotap
Yn66OHB4/NkZifJbPWVTkQ6wM4/rlZOrmxt8w4m9eMIdG7UTRU8huGi6oMmCOeoS
y8s=
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:09:32 2025 by rpki-client