This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYsnGWdGljU1ovYqr6XHIhRchmo.roa
File:                     qYsnGWdGljU1ovYqr6XHIhRchmo.roa (raw, json)
Hash identifier:          C0pqTpLp6VXXD0la8OOQB9JT59IfbzFz0S8fmUn8g1o=
Subject key identifier:   A9:8B:27:19:67:46:96:35:35:A2:F6:2A:AF:A5:C7:22:14:5C:86:6A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01893A1C7369EE58C8B23C4AB32A699F58B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYsnGWdGljU1ovYqr6XHIhRchmo.roa
Signing time:             Sun 09 Jul 2023 10:04:50 +0000
ROA not before:           Sun 09 Jul 2023 10:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:189:3a1b:f737/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3a:1c:73:69:ee:58:c8:b2:3c:4a:b3:2a:69:9f:58:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  9 10:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a98b27196746963535a2f62aafa5c722145c866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:b2:62:c8:43:31:fd:bb:a8:28:0e:0e:a1:
                    df:f0:d6:87:46:87:96:03:9b:fb:f4:d4:aa:b6:07:
                    d9:2a:1e:22:a8:72:72:ca:c5:25:83:eb:90:09:2e:
                    35:9c:a4:aa:75:68:18:a3:af:81:b4:93:3a:65:d9:
                    95:fe:e0:b7:62:bc:7e:79:1e:9f:18:f6:0b:d5:d8:
                    af:64:95:bd:f2:d4:04:5f:07:ea:a7:e9:b9:04:36:
                    21:86:d2:4b:0a:47:d7:fe:d6:00:9b:13:1c:5a:7a:
                    5e:db:2e:ac:c3:ab:f5:a9:01:ab:06:a0:77:71:b7:
                    cb:1e:32:d5:46:32:43:7f:85:fd:29:60:d1:cd:35:
                    c0:ba:6f:59:23:94:f0:17:1f:97:f8:f6:c8:fc:78:
                    62:12:ed:32:1b:50:23:b2:43:5b:90:1d:36:85:8f:
                    8c:cd:22:42:94:6d:8c:cd:26:05:86:17:f3:7a:b6:
                    e8:42:15:ad:75:e6:ff:e0:70:0b:45:c9:84:1e:71:
                    fb:e0:59:f6:1b:85:5e:31:b7:87:7d:71:80:79:dc:
                    d4:09:df:29:83:46:3c:e5:2e:1c:2f:bc:56:2a:bb:
                    ae:c7:bd:13:b7:da:b3:ff:e0:4b:5c:ee:4b:53:10:
                    b3:dd:2d:e2:db:df:9c:a6:18:c7:73:3d:2d:89:1e:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:27:19:67:46:96:35:35:A2:F6:2A:AF:A5:C7:22:14:5C:86:6A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qYsnGWdGljU1ovYqr6XHIhRchmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:39:42:67:ad:da:84:f5:ad:8e:9e:91:ed:d1:0b:0c:18:
         3a:75:ec:2f:3e:b2:88:a7:75:7b:8f:77:b8:b0:82:71:fd:c6:
         03:05:28:03:dc:8e:02:7d:83:03:c6:a7:c2:36:16:8a:ca:10:
         a4:8a:a3:d8:9c:22:00:e7:ec:4e:cb:4c:db:98:b1:32:c8:2c:
         6a:38:c5:99:93:9a:a6:3b:87:16:ca:93:5a:d3:fc:81:15:29:
         5c:ef:8a:9f:ae:57:3d:1f:cb:d8:0c:6b:ca:8c:fe:f1:7a:e0:
         b3:c9:6a:95:3a:cb:d7:90:34:01:8f:fe:1c:14:80:df:ea:20:
         4c:ee:a4:f8:3f:65:b6:d2:cb:3f:76:d4:ee:6c:a1:ff:b8:80:
         dd:70:26:fa:e1:72:76:79:78:56:ab:4b:2e:ef:7b:f6:17:69:
         bd:63:d7:f7:c6:6a:3a:88:9b:41:2c:08:4b:23:5f:3c:0b:7e:
         ee:19:38:8f:0f:77:99:21:ea:0a:39:dc:85:fd:de:43:39:16:
         72:ae:3b:a6:db:72:cf:ae:9b:55:dc:f3:27:55:14:b1:19:46:
         36:1e:6a:91:3f:0f:1f:ce:6d:66:3c:4d:c4:ad:29:55:d1:39:
         da:d8:a6:ac:18:29:7a:8b:ab:4d:f1:82:62:4f:ce:0a:15:83:
         3c:bd:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:22:44 2026 by rpki-client