This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wcjAPXkRSUKNIo04CElqhOfRJ40.roa
File:                     wcjAPXkRSUKNIo04CElqhOfRJ40.roa (raw, json)
Hash identifier:          pP+g06N4nIUe4I9mC5Q4DPAoVWjhh/zOU8rrVcuIa8Y=
Subject key identifier:   C1:C8:C0:3D:79:11:49:42:8D:22:8D:38:08:49:6A:84:E7:D1:27:8D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188691CA3C3948BC3037B73CA87AEF427CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wcjAPXkRSUKNIo04CElqhOfRJ40.roa
Signing time:             Mon 29 May 2023 20:04:24 +0000
ROA not before:           Mon 29 May 2023 20:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:188:691c:9613/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:69:1c:a3:c3:94:8b:c3:03:7b:73:ca:87:ae:f4:27:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 29 20:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1c8c03d791149428d228d3808496a84e7d1278d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7d:5d:11:34:4b:9e:c8:64:92:1d:8f:b5:4a:
                    01:3b:60:4b:a5:24:e7:f3:13:fe:79:b1:35:f1:7c:
                    7e:4b:a4:0d:a5:39:1d:67:64:a7:11:cb:c4:63:ce:
                    ff:97:34:72:18:aa:62:2f:46:e1:1f:6a:54:4d:e2:
                    ff:a1:ce:80:df:94:68:03:b3:f6:8d:9b:e5:44:14:
                    3f:b2:6f:5d:19:45:bb:9d:71:35:d1:02:5c:44:5f:
                    37:57:3e:00:b8:95:a0:4d:47:06:9c:72:3a:35:73:
                    e8:d2:6b:e1:78:17:c9:68:5d:86:b0:8b:32:fb:bc:
                    8c:55:2b:d2:75:83:a0:b4:05:cb:2c:48:71:5d:15:
                    b2:32:ca:42:45:f8:a1:0e:54:e9:26:fa:08:7f:09:
                    f0:2e:a2:a5:8d:34:ca:07:ca:56:c1:e1:92:b9:40:
                    59:ea:68:79:f9:24:07:ee:21:70:c8:fc:46:52:eb:
                    77:b3:74:3c:09:34:03:c3:b8:56:78:1d:e5:8d:55:
                    19:74:fa:a7:aa:14:64:75:6b:52:ec:a7:c8:f1:cc:
                    2f:37:e3:65:b1:e7:19:ee:4c:7f:1d:dd:1f:8f:a6:
                    5b:9f:1e:0e:1a:42:e8:ab:80:d1:72:7c:fb:d4:30:
                    89:a7:07:33:46:11:54:e0:02:c3:0a:eb:61:00:7c:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C8:C0:3D:79:11:49:42:8D:22:8D:38:08:49:6A:84:E7:D1:27:8D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wcjAPXkRSUKNIo04CElqhOfRJ40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:7a:54:52:cc:57:7a:cb:e0:a7:82:1d:b1:83:7c:0e:d4:
         e9:5c:d1:88:26:86:e3:a3:90:ff:4d:ff:96:57:b0:a7:d6:1b:
         0b:bd:af:5c:f0:c6:8d:ef:0e:a2:93:4b:ba:6c:4d:c7:5f:c6:
         d6:e8:be:34:78:b9:28:e4:7b:48:2e:c9:a1:7a:b6:55:29:e9:
         0e:1a:f8:38:ff:5a:d9:a9:cb:8a:d4:ad:26:e7:1b:0f:b1:dd:
         a4:2b:fe:df:e0:b7:08:ff:5c:6e:26:cd:73:06:89:97:a1:15:
         f9:27:a1:60:83:7e:1b:d6:69:81:15:00:70:ba:5c:29:8e:54:
         7e:78:d4:1d:81:cc:ae:43:8d:ce:65:cb:ae:f6:e9:82:53:04:
         de:57:33:bc:2e:d0:a1:52:e6:da:61:21:89:cc:af:e1:bf:2b:
         55:0d:cb:3e:d0:30:32:05:4c:c3:d3:a6:5d:ed:7d:d6:06:66:
         f7:56:ac:1f:fb:ad:1e:28:e8:e4:b3:b0:82:49:26:00:f8:21:
         bc:25:de:ca:9f:f1:5b:a9:dc:69:cd:6f:71:ba:db:1b:39:b6:
         dd:45:67:81:ba:14:82:16:4f:e1:4b:31:78:d5:7c:d9:91:7a:
         a5:4e:26:03:b3:72:6d:02:9f:01:71:e0:ce:3e:3c:4f:78:8d:
         dd:e4:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 23:30:10 2025 by rpki-client