This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1GwobDjNbynTM4BqmCBifbtDR0.roa
File:                     x1GwobDjNbynTM4BqmCBifbtDR0.roa (raw, json)
Hash identifier:          m3ew2+42H2GRS/kV6YjAwU2RC0tnuOZJ0FIWZFgyjwc=
Subject key identifier:   C7:51:B0:A1:B0:E3:35:BC:A7:4C:CE:01:AA:60:81:89:F6:ED:0D:1D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187432FBBB113CC10198229245DB52CE3C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1GwobDjNbynTM4BqmCBifbtDR0.roa
Signing time:             Sun 02 Apr 2023 18:16:54 +0000
ROA not before:           Sun 02 Apr 2023 18:16:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:43:2f:bb:b1:13:cc:10:19:82:29:24:5d:b5:2c:e3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  2 18:16:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c751b0a1b0e335bca74cce01aa608189f6ed0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:eb:27:f8:96:15:d0:52:05:be:3f:f3:23:
                    2c:e6:78:80:e1:e6:88:de:34:b6:ef:3c:7f:9e:22:
                    0a:2a:dd:e2:d2:e5:a7:e6:5d:47:51:91:d4:11:36:
                    f8:7f:46:70:4c:dc:09:ed:57:9f:f9:ff:58:f1:d7:
                    2e:ee:4a:cd:c2:a8:f7:bf:fd:b6:2e:32:55:6f:be:
                    a8:fd:16:ea:de:ef:a8:ca:36:ca:61:58:59:9b:d5:
                    8b:f5:13:fb:29:dc:b9:fc:60:89:46:74:90:d4:7a:
                    99:f1:77:c6:f0:dc:4c:e7:19:3d:7f:16:b2:02:b2:
                    7a:66:fe:a4:b2:c5:2f:58:7d:3d:16:dd:c7:af:44:
                    f6:a1:fc:06:dc:1b:4d:a5:70:e6:e4:61:7c:b3:d4:
                    b0:01:c0:f6:55:7f:28:1e:1f:ea:2a:e5:d0:da:ef:
                    fe:32:66:a1:a5:6b:c3:d8:f2:73:99:f8:9b:1c:ed:
                    72:01:b1:f6:81:4d:a4:cd:80:a9:40:de:e7:61:88:
                    de:b8:3f:ab:a6:2a:0d:2b:ee:c2:1a:4a:38:cf:10:
                    27:a9:48:5c:84:0a:dd:1f:02:47:05:d1:5d:08:aa:
                    90:3f:76:1b:a2:d2:8a:0c:9d:6b:c9:22:c9:31:14:
                    ee:96:a1:ba:bf:b7:3a:c2:74:60:86:89:39:f6:62:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:B0:A1:B0:E3:35:BC:A7:4C:CE:01:AA:60:81:89:F6:ED:0D:1D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1GwobDjNbynTM4BqmCBifbtDR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:39:7a:bd:85:a2:5a:c6:65:99:19:31:da:93:c8:47:cc:
         cf:e3:f4:39:b8:3f:fe:85:ca:c9:3c:bf:0c:ae:53:db:01:cb:
         2e:b5:36:8a:6d:29:62:08:a6:03:40:3a:62:cf:68:71:4e:05:
         9c:eb:f1:c1:f6:52:7e:ec:b5:a7:5f:6d:4f:17:a9:ec:af:2b:
         21:2f:fd:36:88:d4:16:bf:1d:8e:d6:0c:36:86:8b:8b:74:e9:
         f3:cd:fc:ca:2a:4e:59:ca:87:4f:24:26:1e:49:c8:40:4f:2a:
         81:98:bb:df:00:07:71:6f:4c:5b:03:e7:04:d4:56:92:c0:45:
         a4:69:0b:ec:f4:be:49:88:f5:7c:08:c3:1f:db:29:f8:7f:75:
         dd:5d:ea:1b:7d:73:1d:9a:6c:86:6d:5f:18:33:29:66:be:4e:
         c5:2c:35:10:8a:c0:65:f9:81:4c:d2:e2:a4:ed:80:8f:87:87:
         0a:fc:6d:16:7f:d7:cb:2a:8a:aa:18:08:34:0e:84:4f:80:d6:
         f8:27:1d:3a:8d:0c:db:81:7b:32:7d:9d:d6:8f:d7:8c:a4:55:
         93:9e:0f:70:79:84:79:66:b6:c0:0c:05:95:36:77:a8:a4:07:
         4d:8f:3d:6c:dc:cf:38:70:b1:9c:ec:f5:97:36:43:9a:c6:f2:
         19:d5:1e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:03:36 2026 by rpki-client