This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_lL35RzAthzHSqmA9uKkXs3IfM.roa
File:                     r_lL35RzAthzHSqmA9uKkXs3IfM.roa (raw, json)
Hash identifier:          l5z5tYhBkwVZwLgo7ptZQSEEHNWd5vESyMJrIslumi4=
Subject key identifier:   AF:F9:4B:DF:94:73:02:D8:73:1D:2A:A6:03:DB:8A:91:7B:37:21:F3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01893940B9328AD160729D0B5BE584C26AA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_lL35RzAthzHSqmA9uKkXs3IfM.roa
Signing time:             Sun 09 Jul 2023 06:04:50 +0000
ROA not before:           Sun 09 Jul 2023 06:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:3940:6907/128 maxlen: 128
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:39:40:b9:32:8a:d1:60:72:9d:0b:5b:e5:84:c2:6a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  9 06:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aff94bdf947302d8731d2aa603db8a917b3721f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:4f:b0:30:82:3d:10:0c:1b:3e:ee:35:b8:
                    a0:00:1d:0a:39:24:d8:c6:d0:1d:42:c2:1a:5f:aa:
                    2d:85:b1:27:a2:b4:2d:39:55:8f:8b:07:8a:01:f5:
                    ef:12:1f:8f:0c:83:a9:5a:a4:c2:34:ee:db:52:ad:
                    eb:6c:20:43:e6:68:95:b6:b2:45:f9:92:47:87:86:
                    22:3d:b8:9d:00:a0:b6:38:ad:5b:12:9b:76:61:cb:
                    6b:94:57:5e:93:b3:91:5f:4a:b0:7a:e5:3a:44:4f:
                    2e:23:26:6a:04:c6:81:03:43:87:ac:22:dc:87:d9:
                    f6:84:50:e5:76:95:aa:36:25:98:39:bf:e2:f7:dd:
                    0d:1f:c4:82:7b:fb:57:40:4f:e0:e4:09:15:de:f3:
                    ad:a0:04:0b:21:da:07:cb:80:fd:78:5a:4b:7b:f3:
                    c9:2f:2b:85:99:64:c8:32:69:bb:aa:3a:85:d5:2e:
                    3f:5e:00:3d:be:d5:8b:75:c2:e7:ee:06:da:ad:e9:
                    c5:37:5d:b2:7a:f1:5f:eb:c3:f7:48:42:a8:4c:b5:
                    09:55:d3:5b:40:aa:da:f0:a6:5c:50:17:f8:ee:81:
                    fc:f4:da:ea:7d:e7:12:77:8c:76:92:39:7b:ac:cf:
                    56:12:e2:60:e3:90:02:0a:0a:55:63:91:b4:df:d0:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:4B:DF:94:73:02:D8:73:1D:2A:A6:03:DB:8A:91:7B:37:21:F3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_lL35RzAthzHSqmA9uKkXs3IfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:3c:6a:8d:36:f1:75:cc:c1:6e:a8:2d:48:1f:5a:2d:e1:
         0e:1c:b9:41:af:70:67:e7:41:73:77:3e:15:66:84:33:fc:7b:
         b6:68:cd:f5:9f:e1:df:dc:cb:99:de:4e:a8:72:78:7c:33:bf:
         80:51:cb:15:9e:d9:99:5b:f4:a3:d3:e9:01:6a:8c:bd:17:b6:
         57:e2:cb:19:01:19:d3:27:94:39:b6:54:3e:14:61:7b:94:79:
         83:a2:89:e3:e3:1c:c5:37:5a:41:a3:a3:9b:e0:fa:fe:83:a0:
         bd:e1:66:6f:04:09:b6:83:a7:62:df:05:61:78:bd:92:76:10:
         2c:c8:23:0c:7d:53:81:97:f4:3f:07:2c:b3:4a:66:d2:5c:08:
         d8:86:7c:1f:11:dc:e4:10:73:1d:75:5b:2d:1a:36:fa:ac:d1:
         02:70:5f:ad:4c:dc:80:a5:7f:63:f0:5f:9b:a5:97:0b:0d:15:
         c2:59:41:1c:f2:39:d5:a9:31:70:6b:5c:40:0e:bf:c3:5b:8c:
         b9:90:58:bb:0d:cf:d6:80:b5:d6:a8:40:7e:8d:9a:30:28:99:
         3b:2f:3d:0d:0d:4b:78:6b:10:1e:bc:e9:23:ef:65:09:af:4b:
         3d:08:ad:b1:07:a4:f8:d5:61:e5:c7:33:9e:e5:e1:87:f3:55:
         d6:d8:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:15:52 2025 by rpki-client