This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCaq0_PDiz8vPBWcVzLGIpIf9ck.roa
File:                     rCaq0_PDiz8vPBWcVzLGIpIf9ck.roa (raw, json)
Hash identifier:          FBcrGjKjlaFXAlqtKC5vNC4QVLr848VDc9gvUi4Kda8=
Subject key identifier:   AC:26:AA:D3:F3:C3:8B:3F:2F:3C:15:9C:57:32:C6:22:92:1F:F5:C9
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188C6E25D9D51AA62A7FFB367128F2B2603
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCaq0_PDiz8vPBWcVzLGIpIf9ck.roa
Signing time:             Sat 17 Jun 2023 01:05:03 +0000
ROA not before:           Sat 17 Jun 2023 01:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:c6e1:c642/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c6:e2:5d:9d:51:aa:62:a7:ff:b3:67:12:8f:2b:26:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 17 01:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac26aad3f3c38b3f2f3c159c5732c622921ff5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:b8:c3:14:50:a4:8c:50:f4:78:f0:3a:b0:
                    69:ec:8f:17:d5:8d:0f:5f:4f:aa:71:b7:51:a5:4c:
                    65:2e:a1:b7:91:0f:19:ef:25:31:47:0f:4f:82:d6:
                    a5:24:7f:34:8e:8d:67:13:94:e3:0a:cd:43:de:ba:
                    dd:2f:db:d9:82:75:26:c9:f0:83:15:76:4e:cd:4d:
                    af:8c:fd:ef:de:02:cc:93:e2:48:a3:b0:7a:8a:fa:
                    c5:05:e1:4e:36:b5:87:2b:69:e5:26:31:d4:11:2f:
                    2a:85:2f:aa:82:5d:a8:50:b6:a9:6f:b6:7d:0c:b8:
                    22:00:f0:ce:d2:69:aa:a1:91:ab:03:19:c7:e8:e7:
                    76:94:9b:62:07:92:2c:19:14:2c:3b:d8:08:e0:91:
                    2f:0a:66:9f:fc:3e:bc:9c:c1:53:59:a8:cb:e6:12:
                    5c:7d:dc:94:67:f0:1a:44:f5:4a:d7:ca:27:57:2d:
                    e7:03:4e:d8:4e:18:5d:d4:3f:f4:b5:56:7b:57:69:
                    0b:30:61:22:1a:ef:dc:00:2b:f2:1b:75:00:5c:2b:
                    ca:57:17:e4:c4:39:21:c3:1d:1f:2f:06:c2:f3:81:
                    f2:63:84:61:a0:ee:2c:84:cf:16:1e:c0:e6:ce:fb:
                    e1:96:6e:bc:88:e9:c6:d2:10:84:c1:25:15:eb:3b:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:AA:D3:F3:C3:8B:3F:2F:3C:15:9C:57:32:C6:22:92:1F:F5:C9
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCaq0_PDiz8vPBWcVzLGIpIf9ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:21:ea:dc:51:6c:b4:21:0d:6f:ab:f0:6b:60:2d:0d:e8:bf:
         06:3b:49:da:e2:0a:74:27:74:e3:93:2a:f4:b3:7b:3e:0c:a9:
         b7:8d:88:f1:a3:cc:34:9a:aa:c3:ea:f3:e6:eb:8f:de:a7:1e:
         03:98:04:8c:c5:cc:ae:e3:30:66:5c:5e:1f:17:3c:61:62:a8:
         e5:63:35:99:9a:cf:7c:67:09:fd:84:15:41:32:60:08:1f:2c:
         bb:ad:d3:37:80:1e:1e:0a:fc:10:c5:17:98:f5:1b:1c:ea:7f:
         be:04:ea:da:bb:53:85:f6:1d:08:9e:ac:6b:25:de:80:6c:02:
         10:76:c5:d0:00:7d:42:39:84:ee:e6:58:2b:8b:4f:ab:df:32:
         8f:08:01:0d:aa:86:37:cf:96:e9:62:94:7d:f1:59:a3:ea:14:
         2e:28:da:86:89:21:e3:a8:b7:17:6b:20:d8:62:87:1d:fe:85:
         62:00:eb:03:fd:ea:d1:dd:e7:4e:1b:1f:81:30:77:6d:81:db:
         de:5f:28:b5:7b:38:16:4f:c8:59:79:e9:1e:94:93:5b:a0:0f:
         03:35:ea:c0:9a:b9:ea:49:07:6c:e7:d5:2c:9a:7e:81:a2:37:
         78:95:bd:6f:dc:cc:33:0f:be:18:a7:fe:34:67:da:16:13:98:
         86:44:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:47:55 2025 by rpki-client