This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_fikP81lwEeNDO4Avv6uXPmJrk.roa
File:                     k_fikP81lwEeNDO4Avv6uXPmJrk.roa (raw, json)
Hash identifier:          tsb5SoCgbB4eBVP4uEVmgJMEpP/e8RR0HyXjRbhdMSc=
Subject key identifier:   93:F7:E2:90:FF:35:97:01:1E:34:33:B8:02:FB:FA:B9:73:E6:26:B9
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       89F58749
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_fikP81lwEeNDO4Avv6uXPmJrk.roa
Signing time:             Sat 04 Jun 2022 22:11:20 +0000
ROA not before:           Sat 04 Jun 2022 22:11:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314569545 (0x89f58749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  4 22:11:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93f7e290ff3597011e3433b802fbfab973e626b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:d4:17:32:5e:03:2d:80:af:0a:dc:72:58:
                    77:60:cf:10:8b:87:ce:7c:20:47:2d:8a:6e:74:91:
                    a7:69:63:01:77:95:2a:9c:bf:b2:ae:e2:89:0f:c5:
                    0b:d5:f9:97:40:53:d0:69:e1:6a:e4:e5:9d:7c:c6:
                    6c:4a:6a:22:f1:a6:a5:be:5d:d8:13:62:68:23:b9:
                    bc:4a:fa:ee:25:77:90:a0:45:2b:5b:a2:0f:15:13:
                    ef:f8:74:4f:58:92:d5:d0:9a:77:14:d9:f4:6d:ff:
                    f8:3c:27:ff:5b:a4:da:b7:f5:73:3a:c1:22:01:0a:
                    9a:33:0a:6f:a8:2a:7d:16:bb:ac:6e:13:bc:79:ec:
                    e9:0a:f3:39:5d:49:a8:dc:5e:82:1b:55:72:4c:1e:
                    fb:5d:17:26:d9:1e:50:ba:01:96:ac:34:a0:13:3a:
                    8e:58:4f:ee:83:47:6e:a5:b4:f4:1a:d8:bb:73:6a:
                    4b:56:01:01:e2:25:bc:f2:92:3e:8d:69:02:73:a1:
                    d6:06:d8:de:47:42:9b:4f:83:57:1c:38:22:24:10:
                    59:40:c2:28:ac:5d:ab:da:22:c1:a4:01:e3:0c:cd:
                    67:95:dc:1f:86:29:ab:f2:ae:88:08:a0:9b:02:49:
                    8f:a6:22:9d:b0:46:c6:3d:22:ba:44:cb:5c:c5:83:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F7:E2:90:FF:35:97:01:1E:34:33:B8:02:FB:FA:B9:73:E6:26:B9
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_fikP81lwEeNDO4Avv6uXPmJrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:f3:35:af:19:cb:8b:55:ac:57:be:9b:18:06:be:6f:a1:
         d9:ab:02:e2:57:8d:9e:cf:53:d9:4b:5d:a0:c6:56:38:bb:fb:
         25:d7:70:5d:b6:bd:3f:a3:45:88:98:99:19:22:e3:a7:95:ff:
         fb:2b:d8:19:64:92:04:5a:1d:ca:37:af:0e:fc:e2:a5:52:23:
         90:0c:c5:d4:98:b3:d1:d8:4a:72:9f:4f:1e:1c:38:03:e3:41:
         57:f6:78:5c:17:de:68:a1:1c:b7:03:41:e0:64:d9:f7:f7:b9:
         2c:47:e0:6b:9e:e6:71:5b:00:b2:23:ca:90:5c:5d:4e:57:30:
         70:84:fb:32:d1:c8:b6:70:d5:48:b8:80:8f:89:4d:d3:c2:84:
         70:5f:8b:9f:13:0f:4e:37:70:40:96:20:3e:e3:a4:51:6f:2b:
         66:f6:32:ea:6b:61:63:70:32:5d:9d:2a:c7:bf:01:4f:65:e9:
         ae:8c:e2:0a:9c:53:8f:24:7a:41:7b:66:6f:47:b8:d9:3b:f6:
         f3:1a:b0:d8:f4:d5:53:f8:6d:0a:7a:19:00:77:07:e3:28:7c:
         72:43:27:f6:99:b5:58:fa:12:71:c9:bb:9e:5d:e0:db:21:c8:
         ba:73:6c:22:2c:c2:43:48:08:de:3c:69:00:70:ce:c5:66:8f:
         0b:3f:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:46:22 2025 by rpki-client