This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK0PFKA3Xga9UQJTBLzOvPdpUjc.roa
File:                     tK0PFKA3Xga9UQJTBLzOvPdpUjc.roa (raw, json)
Hash identifier:          tf6TKer6GwQRwBTdvhhk9xUTOz6DdeiHak4YTSq5eDU=
Subject key identifier:   B4:AD:0F:14:A0:37:5E:06:BD:51:02:53:04:BC:CE:BC:F7:69:52:37
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01885672815BE6A79892AEA648FC2A80ECD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK0PFKA3Xga9UQJTBLzOvPdpUjc.roa
Signing time:             Fri 26 May 2023 05:05:24 +0000
ROA not before:           Fri 26 May 2023 05:05:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5672:7a2/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:56:72:81:5b:e6:a7:98:92:ae:a6:48:fc:2a:80:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 26 05:05:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4ad0f14a0375e06bd51025304bccebcf7695237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:21:b9:e1:23:15:6e:c5:8d:b3:16:3a:80:
                    b2:9b:0b:40:db:57:a6:75:41:d5:11:47:93:68:b7:
                    89:32:32:c1:f2:6c:01:6a:90:f7:49:e1:00:c0:43:
                    8b:a3:52:26:05:88:97:58:2d:07:54:95:e9:75:46:
                    3a:56:a5:c9:ae:33:c8:de:31:a1:20:af:26:68:8d:
                    ba:e4:7a:af:43:ff:c4:81:9b:5a:cb:47:fe:0c:f2:
                    69:a3:9d:3e:ee:a5:fb:d3:41:68:30:10:49:77:17:
                    3a:5e:61:4b:c8:75:43:c4:8e:a4:ea:46:23:70:82:
                    c9:f8:78:c7:4c:00:2c:48:76:ff:98:4c:5b:22:b8:
                    9f:94:db:d1:52:2d:2c:59:44:17:61:51:d5:29:f0:
                    67:18:2c:c1:c2:9b:4a:52:f5:78:73:59:26:b0:d3:
                    da:be:86:d4:c0:86:a4:b6:d8:ff:7b:02:d5:92:e3:
                    00:0a:40:93:18:46:60:e9:ac:2d:d7:58:d1:21:e8:
                    24:d8:6a:a6:77:56:e0:4f:4d:f9:a2:69:d5:d8:a2:
                    3e:5c:14:29:73:98:9f:ac:b2:62:72:86:92:a8:9a:
                    a9:15:41:8e:c0:f6:f7:b9:b1:4e:6a:a3:f8:36:a1:
                    30:69:6a:a6:c5:80:1e:91:81:48:ea:d5:b6:dc:d9:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:0F:14:A0:37:5E:06:BD:51:02:53:04:BC:CE:BC:F7:69:52:37
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK0PFKA3Xga9UQJTBLzOvPdpUjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:5c:80:fc:61:c9:13:a0:21:64:b2:31:39:56:ad:62:66:
         8d:9f:a6:b6:da:ad:3a:64:80:25:74:7f:91:e3:dd:31:fb:49:
         b7:1a:5a:39:f9:ed:c5:49:b4:4d:b2:75:44:79:b8:20:6d:17:
         06:d6:21:fd:15:5a:ff:16:08:ee:af:aa:66:97:1a:41:3e:f9:
         35:dc:c8:d3:74:8a:e7:4d:ab:a9:c4:20:cc:a8:f8:83:c5:46:
         ae:e8:38:19:f5:21:a8:79:98:50:2a:bd:73:a3:69:a4:aa:1b:
         10:0e:11:28:6c:cf:6b:e4:c4:f4:58:be:2a:6d:98:f4:31:2b:
         3f:6d:93:a8:0b:f3:8c:cf:5f:6b:28:ad:e3:d4:ba:a5:8b:56:
         b9:00:66:6e:a1:ef:e0:17:a2:d3:f5:7d:ea:6d:4d:38:b7:81:
         6c:1c:d6:d4:39:f7:3d:1a:9f:52:42:89:5c:7a:82:6e:55:96:
         1f:8c:9b:95:fa:8d:f3:25:85:58:e2:92:1e:3d:b8:27:b0:46:
         38:93:d5:42:ec:a7:2a:f3:e6:de:db:dc:31:ea:bc:33:78:ba:
         e0:7e:4f:1f:df:c7:29:9c:e0:09:9b:d2:06:4e:85:6a:ec:00:
         26:3b:58:75:7c:12:dc:08:c1:b6:19:64:ce:ff:b7:74:ac:3e:
         f0:3b:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:26:34 2026 by rpki-client