This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukxnwsvPzQYuTK16l3gfwfBN_AE.roa
File:                     ukxnwsvPzQYuTK16l3gfwfBN_AE.roa (raw, json)
Hash identifier:          L/Uv6q6uctVML3Vx8jziUA0sauJ26HWTRCDw07Tuvuc=
Subject key identifier:   BA:4C:67:C2:CB:CF:CD:06:2E:4C:AD:7A:97:78:1F:C1:F0:4D:FC:01
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       666FB7C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukxnwsvPzQYuTK16l3gfwfBN_AE.roa
Signing time:             Sun 30 Jan 2022 19:04:16 +0000
ROA not before:           Sun 30 Jan 2022 19:04:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:ac5f:a50f/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718597572 (0x666fb7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan 30 19:04:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba4c67c2cbcfcd062e4cad7a97781fc1f04dfc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:ec:e5:34:c2:ee:5f:c9:eb:db:45:b1:1d:
                    e6:ab:1b:06:99:7d:1e:94:b0:41:c9:49:80:29:6d:
                    1d:bc:05:da:14:c6:50:9c:fa:c0:83:02:92:aa:6e:
                    47:6a:e5:0e:e8:ad:d2:8a:5e:69:d2:81:75:d7:15:
                    11:ba:3b:9c:7f:04:50:1d:8f:d3:a2:b3:1d:30:35:
                    92:fb:84:57:ce:eb:f6:22:07:b6:b3:db:e0:1a:9e:
                    4a:87:34:88:df:af:d8:47:76:06:52:bd:82:e0:ac:
                    04:1d:d5:e4:4a:98:a5:3b:ce:de:f9:76:93:9e:31:
                    c4:87:58:2b:33:7c:66:5f:15:f4:99:6d:ff:29:de:
                    90:93:5c:89:9e:1c:06:a9:4f:2f:c1:49:38:f1:e7:
                    58:5c:1f:75:0d:21:12:f7:f6:3a:ee:4d:f1:11:b3:
                    51:26:ce:49:36:30:14:71:96:54:63:3a:0f:64:29:
                    a6:dd:37:ce:84:b1:93:8b:a9:d6:e9:1f:ba:4d:9a:
                    86:4b:37:9d:64:af:e6:7c:01:9f:15:56:a4:58:5c:
                    7b:50:67:63:39:be:57:4f:fc:59:11:54:e8:3d:58:
                    c0:79:49:cd:34:e7:5a:db:d1:68:61:32:59:4c:36:
                    a2:5e:b9:2a:a2:d1:2b:27:93:de:18:1d:c0:fb:0d:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:67:C2:CB:CF:CD:06:2E:4C:AD:7A:97:78:1F:C1:F0:4D:FC:01
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukxnwsvPzQYuTK16l3gfwfBN_AE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:95:cb:a2:bb:2a:95:de:52:11:8d:27:0e:9d:1e:00:96:
         9a:a4:b8:84:46:cf:29:10:12:bb:e4:9a:7f:72:be:cc:62:21:
         b2:c8:6e:fe:34:7f:e6:9b:de:5c:0c:3c:11:5f:d1:12:65:2d:
         5f:f7:a5:2f:07:a5:12:58:95:eb:28:17:67:c3:bb:e3:3d:2a:
         5c:61:ba:05:6d:29:28:d8:db:fe:30:8a:ab:df:ed:26:50:e0:
         4a:82:0f:17:17:08:72:de:81:dc:bb:1c:19:2f:09:b1:24:b1:
         68:08:c5:47:e5:e6:e7:46:39:0a:6c:56:c1:bd:fd:4f:1a:93:
         20:25:fb:25:79:10:45:1b:b7:e9:3f:00:78:cc:c7:58:65:43:
         1b:70:f2:3a:fc:7a:48:35:49:dc:09:a1:65:28:d7:1c:e1:14:
         69:7b:28:16:eb:2b:1b:f3:3f:38:00:8c:a9:98:de:f5:53:77:
         08:15:68:1d:15:0d:6c:22:81:10:31:6e:30:80:a1:2d:91:12:
         cd:e3:b9:7a:5a:b2:ad:ae:bb:40:aa:80:e4:ea:de:e4:f5:e7:
         d4:d1:0b:4a:c4:75:76:24:08:0e:d8:99:73:b8:99:08:b1:56:
         7a:34:f2:65:74:83:4c:52:95:e8:40:c9:e7:70:f0:eb:c4:81:
         2c:d8:48:fd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZm+3xDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDEz
MDE5MDQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE0YzY3YzJjYmNm
Y2QwNjJlNGNhZDdhOTc3ODFmYzFmMDRkZmMwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK117OU0wu5fyevbRbEd5qsbBpl9HpSwQclJgCltHbwF2hTG
UJz6wIMCkqpuR2rlDuit0opeadKBddcVEbo7nH8EUB2P06KzHTA1kvuEV87r9iIH
trPb4BqeSoc0iN+v2Ed2BlK9guCsBB3V5EqYpTvO3vl2k54xxIdYKzN8Zl8V9Jlt
/ynekJNciZ4cBqlPL8FJOPHnWFwfdQ0hEvf2Ou5N8RGzUSbOSTYwFHGWVGM6D2Qp
pt03zoSxk4up1ukfuk2ahks3nWSv5nwBnxVWpFhce1BnYzm+V0/8WRFU6D1YwHlJ
zTTnWtvRaGEyWUw2ol65KqLRKyeT3hgdwPsNA1kCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS6TGfCy8/NBi5MrXqXeB/B8E38ATAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3VreG53c3ZQelFZdVRLMTZsM2dmd2ZCTl9BRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCDXZXLorsqld5SEY0nDp0eAJaapLiERs8pEBK7
5Jp/cr7MYiGyyG7+NH/mm95cDDwRX9ESZS1f96UvB6USWJXrKBdnw7vjPSpcYboF
bSko2Nv+MIqr3+0mUOBKgg8XFwhy3oHcuxwZLwmxJLFoCMVH5ebnRjkKbFbBvf1P
GpMgJfsleRBFG7fpPwB4zMdYZUMbcPI6/HpINUncCaFlKNcc4RRpeygW6ysb8z84
AIypmN71U3cIFWgdFQ1sIoEQMW4wgKEtkRLN47l6WrKtrrtAqoDk6t7k9efU0QtK
xHV2JAgO2JlzuJkIsVZ6NPJldINMUpXoQMnncPDrxIEs2Ej9
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:48:32 2026 by rpki-client