This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uS_2y-9vnYK6HJiEuCmcahkT0Ic.roa
File:                     uS_2y-9vnYK6HJiEuCmcahkT0Ic.roa (raw, json)
Hash identifier:          K2YyqCXU/JEPiPhSKG8GX4A7vq6/Xv4Kit/WG4ephdc=
Subject key identifier:   B9:2F:F6:CB:EF:6F:9D:82:BA:1C:98:84:B8:29:9C:6A:19:13:D0:87
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0185D5F36ADFBDD7F75D42AAD2CABD4F4121
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uS_2y-9vnYK6HJiEuCmcahkT0Ic.roa
Signing time:             Sat 21 Jan 2023 20:09:37 +0000
ROA not before:           Sat 21 Jan 2023 20:09:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d5:f3:6a:df:bd:d7:f7:5d:42:aa:d2:ca:bd:4f:41:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan 21 20:09:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b92ff6cbef6f9d82ba1c9884b8299c6a1913d087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:a0:88:d9:62:3a:27:29:52:a0:f9:2d:b3:
                    58:51:a6:e5:69:e0:5e:6a:a5:21:36:c1:2d:87:a0:
                    9c:5b:3e:e5:e9:a3:b7:2d:de:84:3f:e0:76:25:e5:
                    33:0c:d2:56:c6:41:0c:ff:b5:cc:e6:ed:97:51:41:
                    d9:a2:9d:69:60:31:8c:a2:59:cd:3f:57:03:49:68:
                    c2:9c:e3:58:c4:c7:c0:5b:f1:e6:7c:b8:b7:03:9a:
                    33:fe:60:d0:9b:a8:c5:f9:3e:b3:e1:31:44:19:87:
                    ff:92:21:fa:90:ca:bd:86:aa:10:71:fd:78:ab:86:
                    3e:42:5a:9c:de:15:01:f0:83:59:d3:d3:02:e9:29:
                    a5:8d:18:fc:7b:a2:f9:9c:d8:9b:50:34:d4:4d:70:
                    c4:1e:22:af:0e:65:95:da:88:37:ee:6e:bb:82:4a:
                    33:99:b2:72:96:de:10:24:82:d0:d2:f3:b4:94:ac:
                    99:d6:f9:ce:94:cd:4d:17:ad:67:14:b6:a0:4f:68:
                    e8:e2:0a:2e:e0:9f:3c:72:3d:a6:2b:ba:ee:7f:4f:
                    a7:c5:ee:d4:9d:74:9a:c6:b0:2d:ce:7c:f2:26:fe:
                    81:32:56:5c:f8:38:60:1e:e6:33:56:f5:83:c0:2c:
                    52:ec:f7:5a:25:22:22:1e:30:44:de:b1:0c:e5:ad:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2F:F6:CB:EF:6F:9D:82:BA:1C:98:84:B8:29:9C:6A:19:13:D0:87
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uS_2y-9vnYK6HJiEuCmcahkT0Ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:25:7f:90:f3:f7:74:59:80:fb:5d:f5:a5:85:ff:e7:96:3d:
         6f:46:fb:5b:a1:a3:38:5e:91:2f:f2:a6:51:c1:ff:03:4d:ac:
         c8:14:f3:c3:a8:fc:a9:95:43:59:ac:d5:e1:17:14:df:81:bb:
         d2:15:b5:d3:a9:60:5a:03:f2:e1:cc:61:94:7f:be:e1:c5:b8:
         d9:be:6d:51:38:e5:48:f7:0a:56:9e:c2:a8:96:33:f7:2e:5b:
         66:57:ad:16:31:d2:a1:35:ce:13:9c:de:00:ec:b6:88:04:ff:
         05:c4:56:82:a1:ee:02:3d:1f:52:f2:ef:1b:28:4b:b8:27:b5:
         06:c4:28:06:2f:99:b5:13:92:b0:9c:d9:2b:bd:07:a1:44:42:
         6e:25:ba:47:ee:79:7b:c6:5f:d5:10:48:54:d2:14:7b:06:3c:
         4a:6c:51:e7:0f:80:8a:e5:ba:ce:bd:bd:7b:d7:d2:fc:50:9a:
         73:84:c9:c5:a1:35:a4:0e:13:51:ff:4f:78:15:4c:ab:fe:fd:
         c9:78:ec:96:23:f2:1f:37:2f:13:e9:22:d2:41:6b:de:c1:a0:
         8f:e8:40:d8:0d:cc:08:c1:41:0f:18:1c:1b:28:de:31:a8:cb:
         ff:14:75:89:59:d2:b5:9f:b8:f7:07:bd:e9:6c:00:aa:81:ff:
         62:90:19:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXV82rfvdf3XUKq0sq9T0EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTIxMjAwOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTJmZjZjYmVmNmY5ZDgyYmExYzk4ODRiODI5OWM2YTE5MTNkMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmISgiNliOicpUqD5LbNYUablaeBe
aqUhNsEth6CcWz7l6aO3Ld6EP+B2JeUzDNJWxkEM/7XM5u2XUUHZop1pYDGMolnN
P1cDSWjCnONYxMfAW/HmfLi3A5oz/mDQm6jF+T6z4TFEGYf/kiH6kMq9hqoQcf14
q4Y+Qlqc3hUB8INZ09MC6SmljRj8e6L5nNibUDTUTXDEHiKvDmWV2og37m67gkoz
mbJylt4QJILQ0vO0lKyZ1vnOlM1NF61nFLagT2jo4gou4J88cj2mK7ruf0+nxe7U
nXSaxrAtznzyJv6BMlZc+DhgHuYzVvWDwCxS7PdaJSIiHjBE3rEM5a1ftQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLkv9svvb52CuhyYhLgpnGoZE9CHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdVNfMnktOXZuWUs2SEppRXVDbWNhaGtUMEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACclf5Dz93RZgPtd9aWF
/+eWPW9G+1uhozhekS/yplHB/wNNrMgU88Oo/KmVQ1ms1eEXFN+Bu9IVtdOpYFoD
8uHMYZR/vuHFuNm+bVE45Uj3ClaewqiWM/cuW2ZXrRYx0qE1zhOc3gDstogE/wXE
VoKh7gI9H1Ly7xsoS7gntQbEKAYvmbUTkrCc2Su9B6FEQm4lukfueXvGX9UQSFTS
FHsGPEpsUecPgIrlus69vXvX0vxQmnOEycWhNaQOE1H/T3gVTKv+/cl47JYj8h83
LxPpItJBa97BoI/oQNgNzAjBQQ8YHBso3jGoy/8UdYlZ0rWfuPcHvelsAKqB/2KQ
GYk=
-----END CERTIFICATE-----
Generated at Wed Dec 31 03:44:09 2025 by rpki-client