This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa
File:                     jcRsPxym4h9GlCH2C7C_9VwkPLs.roa (raw, json)
Hash identifier:          YKWdcn5+meQ3EW4aQLBCcJk74J4qwLo4IYRp+CYJ0Gw=
Subject key identifier:   8D:C4:6C:3F:1C:A6:E2:1F:46:94:21:F6:0B:B0:BF:F5:5C:24:3C:BB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01863C85366B8F58F17A25236663B18FAEA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa
Signing time:             Fri 10 Feb 2023 18:10:08 +0000
ROA not before:           Fri 10 Feb 2023 18:10:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3c:85:36:6b:8f:58:f1:7a:25:23:66:63:b1:8f:ae:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 10 18:10:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dc46c3f1ca6e21f469421f60bb0bff55c243cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:a0:50:c2:74:ab:67:c8:43:23:cb:23:af:
                    2b:8a:5b:e0:62:0c:56:2f:52:48:a4:88:f9:88:02:
                    17:20:19:47:5c:f5:3e:29:d1:35:b0:1d:c9:e2:dc:
                    ad:a4:51:0a:4b:bd:a5:48:59:2d:8c:9f:b8:c7:6d:
                    de:45:a4:1a:18:d4:81:bc:1f:38:84:2a:72:63:ee:
                    78:17:d5:82:2f:43:98:8d:92:77:de:b0:47:00:f3:
                    4b:3e:b5:61:d3:cd:45:50:ed:a1:57:03:1c:bf:db:
                    06:5f:6b:8e:42:d8:f9:ee:61:ce:97:bc:6c:ca:b1:
                    b7:6e:ac:f6:e6:60:3a:c4:e2:82:db:63:05:35:d9:
                    da:b7:fb:9d:15:56:43:fc:0b:b8:2d:26:8a:07:a3:
                    bd:3e:78:bb:44:db:f9:9e:05:d8:cf:45:6f:1f:75:
                    de:8d:b3:b5:ff:0c:ff:a3:00:d1:8a:1b:1e:62:18:
                    a6:b8:d7:80:2e:8b:53:10:2f:76:de:87:b9:ca:b4:
                    b8:e8:a8:48:84:62:09:8c:e9:3a:0d:67:ed:11:5a:
                    1f:be:c1:b0:a0:27:f0:d1:09:1e:45:ff:38:6a:d9:
                    f9:77:f9:c3:e7:09:c7:84:d0:a0:39:bb:1d:63:e5:
                    c3:53:da:16:7b:34:a5:b3:7e:3b:b3:ad:0f:b4:43:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:6C:3F:1C:A6:E2:1F:46:94:21:F6:0B:B0:BF:F5:5C:24:3C:BB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:87:16:16:bf:87:e8:46:81:55:6e:ae:7b:02:eb:5b:e5:9a:
         2e:05:60:8d:2f:26:b0:e6:29:83:db:c0:2c:7d:9f:cc:8b:61:
         c1:3e:79:0e:2d:4e:57:e8:6b:4d:e4:2c:91:00:06:3b:c8:91:
         a4:e5:8c:a0:66:2a:b3:2e:a6:9c:df:ed:4b:30:03:d0:2f:65:
         d4:de:ef:99:06:b7:90:df:69:46:b6:3b:28:88:d7:31:80:52:
         2c:3a:90:9d:32:50:f9:d6:fc:fa:1c:99:8c:9c:46:db:31:4f:
         9a:93:78:4f:c4:04:68:11:45:a6:f8:45:50:c7:bd:a6:43:3d:
         9b:db:8a:d5:69:ac:28:b2:9e:d1:bd:b3:57:e0:2c:64:18:f1:
         37:0a:01:bf:2a:0f:1e:f3:c9:a1:b5:19:1a:f0:ac:83:8d:07:
         a6:68:3f:c8:eb:6e:34:a9:68:37:fe:1b:25:ad:f7:01:11:f9:
         08:32:e3:4e:f6:ae:8a:86:72:5a:2f:d6:6a:e5:27:8c:68:c6:
         24:07:80:e2:67:4e:3e:e4:36:b2:57:26:b9:0a:4c:50:c9:87:
         c5:f4:91:f2:38:24:c2:10:55:cc:2f:ae:56:de:e7:99:5a:63:
         c1:94:d0:b9:23:f3:4a:ff:e2:67:6f:95:30:3d:7d:7e:fa:8d:
         d3:0a:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:23:57 2026 by rpki-client