This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nqwXCUh8Csu2jxjyhsovxL2EEe4.roa
File:                     nqwXCUh8Csu2jxjyhsovxL2EEe4.roa (raw, json)
Hash identifier:          4Eol+TY66yLf36l9zhLJTnbwg97u6PvFJ/Jy3T159/c=
Subject key identifier:   9E:AC:17:09:48:7C:0A:CB:B6:8F:18:F2:86:CA:2F:C4:BD:84:11:EE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01868EAF8DE93D46F94B69D05DAE44368D7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nqwXCUh8Csu2jxjyhsovxL2EEe4.roa
Signing time:             Sun 26 Feb 2023 17:05:15 +0000
ROA not before:           Sun 26 Feb 2023 17:05:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:8eae:a278/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8e:af:8d:e9:3d:46:f9:4b:69:d0:5d:ae:44:36:8d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 26 17:05:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9eac1709487c0acbb68f18f286ca2fc4bd8411ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:2a:c8:c2:ec:ad:81:4c:7f:ef:94:d5:a3:
                    f4:ce:eb:67:64:a4:a2:e2:61:92:1d:81:f8:6d:be:
                    a5:d9:b3:b9:a4:88:87:39:5d:00:dd:2c:dd:59:c4:
                    f2:8c:ef:95:8b:98:ba:ec:39:4e:24:b5:de:b9:78:
                    30:66:09:32:1b:df:80:bd:5e:59:5a:8e:9e:4d:79:
                    1b:7c:1d:b3:a9:23:5b:a5:f1:5c:40:05:5b:de:c7:
                    5c:41:cd:73:f7:47:a6:b2:3f:39:6e:be:a1:6e:34:
                    36:b6:f6:06:59:05:12:29:f6:a5:e3:55:07:c9:44:
                    d7:94:6c:8b:61:b4:1e:cf:f6:60:6f:b7:12:0d:bd:
                    fd:c2:48:e4:a2:5b:4c:82:bf:35:c9:c2:43:d1:e7:
                    0e:3a:43:ae:ea:f3:24:82:f2:d1:9d:c9:27:b7:b6:
                    1b:4f:37:c5:08:2b:b6:8e:4d:be:83:7b:45:62:ff:
                    e8:61:94:39:c5:ac:a3:ad:40:ec:2f:b4:1a:98:11:
                    09:55:46:37:20:00:88:35:1d:45:d4:65:ac:0a:f8:
                    ac:bf:fc:e8:3f:b3:5a:5d:4b:6a:bd:2f:b3:df:7a:
                    a1:8a:3b:7b:73:d3:b6:dd:ca:66:99:5b:cd:43:01:
                    89:95:99:a4:5b:8e:e4:55:a0:16:d2:66:41:57:05:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:17:09:48:7C:0A:CB:B6:8F:18:F2:86:CA:2F:C4:BD:84:11:EE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nqwXCUh8Csu2jxjyhsovxL2EEe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:c2:0e:c7:5f:12:9c:7b:52:1a:e4:68:5f:7a:e3:fb:4b:
         ba:32:4b:c5:1d:db:34:6f:6f:b6:a5:84:c5:08:74:26:e3:1f:
         47:d4:31:25:af:65:16:9d:dd:30:4d:93:4e:9b:9a:76:8a:52:
         17:7f:ef:5c:9f:92:3e:fb:b6:1b:0a:1c:47:38:cb:73:7c:c5:
         89:35:47:78:b6:f1:69:96:00:91:82:1f:8d:19:20:f7:02:15:
         31:33:60:68:73:eb:7a:9a:99:41:c1:f9:fc:c9:f6:13:43:1b:
         0d:24:c8:9b:df:cf:c5:2c:e1:69:f5:46:e7:d8:f5:13:ba:37:
         f7:8f:32:7a:ac:b8:1b:de:2f:46:a5:71:fc:24:eb:96:a6:a2:
         83:a8:e0:91:f3:a0:74:05:e6:ff:7a:dc:02:58:0e:41:fe:94:
         aa:92:dc:60:94:17:c1:bd:9e:4e:30:61:76:77:a3:8a:66:f3:
         08:70:5b:48:0c:9f:c7:7c:f1:e3:60:97:9c:5e:59:15:19:b4:
         aa:3f:bb:0a:42:9c:3e:3d:88:63:ca:80:ff:5f:ff:e0:71:00:
         43:c5:46:10:49:5a:fd:9e:13:5e:d0:4a:a1:97:d2:08:f6:e9:
         9a:65:b2:06:d3:9a:ea:b0:a9:b5:87:8a:0f:ae:ea:34:d7:64:
         cf:a2:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:21:32 2025 by rpki-client