This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tdKNTleXU_ZoD22bdX7AxaTiJCs.roa
File:                     tdKNTleXU_ZoD22bdX7AxaTiJCs.roa (raw, json)
Hash identifier:          assyJNM9TIskUevtrXkpfA0G7Jro5ovnGs8fZrc8670=
Subject key identifier:   B5:D2:8D:4E:57:97:53:F6:68:0F:6D:9B:75:7E:C0:C5:A4:E2:24:2B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018785048FC940F40CAF47B1576CEDACAE9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tdKNTleXU_ZoD22bdX7AxaTiJCs.roa
Signing time:             Sat 15 Apr 2023 13:04:41 +0000
ROA not before:           Sat 15 Apr 2023 13:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:187:8504:3bec/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:85:04:8f:c9:40:f4:0c:af:47:b1:57:6c:ed:ac:ae:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 15 13:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5d28d4e579753f6680f6d9b757ec0c5a4e2242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:64:df:26:45:84:cd:59:91:5b:57:f1:a3:
                    f2:c1:68:f5:dd:68:c1:66:0b:ce:5d:64:58:8e:6b:
                    a0:8c:d6:d2:d8:23:47:e1:5b:d1:70:eb:0d:08:bb:
                    53:2f:4b:59:9e:b9:f7:2d:33:04:22:06:03:ca:7a:
                    55:fe:f2:82:26:e7:9f:eb:f3:11:9b:e4:fb:f1:bf:
                    61:31:4c:8e:7f:3d:68:86:00:2f:2f:a7:e5:4e:00:
                    14:e9:75:5b:5f:9b:19:68:24:56:d0:73:3b:b6:19:
                    c0:40:1d:1a:c2:c3:6b:86:7f:ce:52:9e:61:58:cf:
                    76:8c:57:8c:76:b4:13:e5:eb:27:db:69:e5:90:c7:
                    c4:94:a7:4d:52:dd:a9:96:d9:a4:b8:70:41:e9:24:
                    79:9c:7d:f7:dc:0c:cc:df:81:a5:af:07:35:6d:84:
                    5d:b7:bb:aa:6f:72:a7:e8:89:86:c0:de:b5:ee:89:
                    a8:d4:02:88:02:8c:08:7c:c4:71:0b:3c:ee:ab:90:
                    9f:30:86:2c:4a:2a:40:ea:c4:4d:db:aa:4d:da:0c:
                    1a:50:8b:95:44:49:80:ba:39:f4:cd:aa:5d:8d:21:
                    10:99:ae:34:20:4c:4c:8b:2e:08:d2:48:33:f9:88:
                    99:f6:39:2b:0b:02:2e:99:12:76:9f:7f:76:5d:a5:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:8D:4E:57:97:53:F6:68:0F:6D:9B:75:7E:C0:C5:A4:E2:24:2B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tdKNTleXU_ZoD22bdX7AxaTiJCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:92:03:c9:93:ff:34:b1:41:90:7b:5d:3e:7b:71:1b:5d:
         af:07:55:15:01:b9:06:48:71:12:9c:bc:c0:29:c5:45:23:65:
         2d:6b:94:85:ec:f3:cd:55:d4:13:1f:a7:eb:c9:a5:b5:a0:fa:
         04:8d:a3:54:aa:5a:81:de:0f:1b:f8:ec:13:ba:f1:d1:5b:c7:
         0e:a1:fc:bd:b4:a4:08:22:a9:3e:e1:ad:90:c1:a0:b4:9c:95:
         1f:69:d4:35:8f:42:23:fc:6c:e8:9e:26:bc:a1:df:76:44:c7:
         16:cc:c7:ae:99:00:09:5c:38:65:4d:98:c7:81:e6:00:60:3b:
         82:78:be:56:bc:6c:6b:17:a7:1f:fe:a5:7f:8b:88:c8:d8:2a:
         cb:cc:ac:b8:51:f9:20:85:4a:a3:f3:a5:ae:ec:a8:6f:7c:94:
         2e:68:21:1a:a5:3e:23:c0:72:8f:a0:9a:0e:98:90:97:ca:75:
         ed:b1:45:d3:e6:ed:1e:39:d8:85:77:8e:d9:77:8a:b6:0e:ff:
         f3:1a:fe:2f:59:80:ec:75:dc:de:3f:ce:53:41:33:b7:9f:8a:
         5a:2d:9f:5d:1a:89:e1:64:2c:d1:c8:3e:35:70:e0:df:07:57:
         29:2d:2c:c1:af:90:53:ee:1e:a0:50:12:f6:67:9d:d7:bb:1a:
         eb:3d:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:32:33 2025 by rpki-client