This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iurYTHl-UIjdMmov-6uxgaa_YrU.roa
File:                     iurYTHl-UIjdMmov-6uxgaa_YrU.roa (raw, json)
Hash identifier:          BT/DYdX+gFOi6aTowIOGRgpNTyELanFBWBcqtdsCt5U=
Subject key identifier:   8A:EA:D8:4C:79:7E:50:88:DD:32:6A:2F:FB:AB:B1:81:A6:BF:62:B5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01888F8AB47874F18D16058E65C9D78C9AE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iurYTHl-UIjdMmov-6uxgaa_YrU.roa
Signing time:             Tue 06 Jun 2023 07:10:12 +0000
ROA not before:           Tue 06 Jun 2023 07:10:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8f:8a:b4:78:74:f1:8d:16:05:8e:65:c9:d7:8c:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  6 07:10:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8aead84c797e5088dd326a2ffbabb181a6bf62b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:83:61:31:b8:5d:c6:bf:10:9e:60:38:97:
                    36:ca:07:f2:6d:6a:51:bc:08:3b:4e:4a:8c:b3:6e:
                    2b:23:e9:98:ad:93:35:20:98:ed:51:f7:92:5c:98:
                    d2:1e:dd:22:6c:d0:39:30:0f:f6:02:21:c6:bc:94:
                    37:30:d5:62:5c:3c:ae:3c:be:73:a9:9a:62:6d:ea:
                    71:8e:39:8d:ce:15:71:b8:73:b4:fa:aa:c9:fa:b7:
                    00:cf:5d:74:4d:f8:d2:0f:c4:75:6d:f7:e5:a4:10:
                    b0:5c:9f:54:04:10:27:b8:98:b0:3b:d7:89:9f:68:
                    3c:87:71:9a:85:b7:fa:0b:23:b4:2b:17:fa:4c:a2:
                    45:03:3a:68:a6:d9:16:35:50:0a:ab:31:9c:14:fd:
                    cc:cc:63:d1:e7:75:fc:49:3d:c9:40:c7:59:d0:78:
                    f2:73:b9:16:41:c9:89:fb:5f:ca:32:36:72:2e:57:
                    0a:c1:c6:4c:f7:d2:89:77:7b:4c:21:8d:eb:c7:27:
                    14:f0:92:09:60:67:96:a3:87:72:da:7f:ae:24:3e:
                    9a:11:07:54:54:dd:27:04:6a:d2:fb:a2:a0:d7:c2:
                    c9:ef:2e:da:6b:72:41:3b:31:25:32:38:5a:f2:06:
                    ea:a1:74:48:7f:aa:82:60:53:04:50:bb:48:7b:ef:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EA:D8:4C:79:7E:50:88:DD:32:6A:2F:FB:AB:B1:81:A6:BF:62:B5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iurYTHl-UIjdMmov-6uxgaa_YrU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:51:d2:9c:40:cb:28:b9:7e:98:a2:5a:31:bd:28:47:c7:
         52:b4:60:e3:f3:a0:aa:ea:b7:ba:f3:09:35:9d:ea:a8:be:24:
         00:96:0b:bd:59:50:c2:4a:4e:1a:c2:18:60:81:88:13:de:03:
         f2:7b:d4:c3:0b:de:1c:8d:cb:fb:8a:8f:a6:c2:3f:05:a5:11:
         8e:b7:6b:aa:a7:21:c8:64:e0:59:74:36:79:a6:c4:ad:65:ac:
         00:c3:3f:21:b9:c9:27:54:4a:2a:49:a4:4c:dc:43:bb:f4:ac:
         53:a8:92:8d:03:bd:c1:84:7a:31:a5:55:ca:40:a8:d9:1f:ec:
         02:7c:c9:47:ac:3a:5f:9a:87:a3:4a:df:b3:ff:e9:b0:59:6f:
         87:a1:d9:45:86:ef:0c:b5:e1:0f:99:8f:af:b9:bd:73:7a:4d:
         4b:74:b6:4c:cf:15:0e:99:b6:ec:d3:10:3a:29:55:27:ab:56:
         bd:a8:54:a5:dc:65:d7:aa:8a:b6:62:dc:ab:57:c5:41:a3:dd:
         43:eb:31:e7:1f:bc:9f:7b:a5:5d:67:0b:a8:e5:38:f0:4f:de:
         98:24:03:5d:01:8c:69:0e:1b:f4:3a:f6:5a:33:37:c5:d0:77:
         85:33:f1:56:ef:e8:a5:2e:d1:55:28:33:5a:da:52:5a:46:f6:
         66:ef:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:48:01 2025 by rpki-client