This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DeytQVMYBVf-Unm8oV0cFBz2vjs.roa
File:                     DeytQVMYBVf-Unm8oV0cFBz2vjs.roa (raw, json)
Hash identifier:          aTDgs+k/0e7K6n4rcop5H53F41+Ugrc3n9luE04FvUw=
Subject key identifier:   0D:EC:AD:41:53:18:05:57:FE:52:79:BC:A1:5D:1C:14:1C:F6:BE:3B
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       018925F6B09ABFF1015F70BF6C5F99F23670
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DeytQVMYBVf-Unm8oV0cFBz2vjs.roa
Signing time:             Wed 05 Jul 2023 12:11:11 +0000
ROA not before:           Wed 05 Jul 2023 12:11:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a13:85c0::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:25:f6:b0:9a:bf:f1:01:5f:70:bf:6c:5f:99:f2:36:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Jul  5 12:11:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0decad4153180557fe5279bca15d1c141cf6be3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:59:93:74:8f:22:ce:40:7b:92:c0:8f:74:
                    ac:c7:76:58:ae:ea:4d:23:03:49:4c:8f:3a:65:3c:
                    47:e6:41:df:51:38:88:59:b6:be:b4:45:1b:37:1b:
                    44:7d:9a:1d:20:32:da:5f:b8:20:57:fd:6b:26:3f:
                    c2:45:69:1d:79:a4:e5:06:5d:e3:89:83:ad:02:b4:
                    ee:aa:a4:79:70:52:ae:68:d6:04:64:7d:f5:97:1f:
                    77:53:85:f9:2a:15:6f:35:83:b8:a3:0b:95:98:b6:
                    50:8d:9b:79:33:a3:a0:c2:45:c2:29:b0:82:07:29:
                    eb:24:59:0a:8f:b5:d3:80:05:ea:5e:a2:c9:1d:15:
                    d2:1b:63:db:b6:bf:89:4b:80:23:80:57:4a:e9:a8:
                    75:15:d5:8d:05:2c:cd:65:e1:e9:cd:24:ab:bd:6a:
                    7c:61:7e:91:27:08:94:45:71:e2:8c:fd:91:be:a5:
                    0b:a9:46:a4:71:db:7b:9a:dd:83:ac:d8:13:ce:67:
                    96:c3:9a:86:c9:ae:33:f4:a6:25:20:0a:3a:ea:54:
                    b0:a2:08:bb:fa:b8:bb:e4:42:10:f2:9b:f2:cf:22:
                    bf:dd:95:35:2c:25:ca:0b:54:2e:48:fe:91:77:2d:
                    a9:75:13:37:ea:71:da:83:d9:6c:63:be:9c:ad:28:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:AD:41:53:18:05:57:FE:52:79:BC:A1:5D:1C:14:1C:F6:BE:3B
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DeytQVMYBVf-Unm8oV0cFBz2vjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:85c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:38:20:7c:80:a6:f4:35:a7:c3:7a:c8:b7:bb:e7:6b:b4:
         af:1f:4e:fd:af:2d:0a:7d:6b:2a:67:1f:06:48:3b:1a:18:64:
         0b:d4:73:0d:0f:03:1e:eb:ab:f0:79:a9:69:fc:5e:e1:9a:aa:
         66:b9:8f:dc:56:7d:d7:34:1f:0d:c8:dd:b4:ea:0e:75:8c:26:
         69:64:c3:57:56:e5:3c:fd:f3:0e:22:28:a2:99:68:b4:e1:97:
         b3:15:f0:45:43:f8:4d:ac:36:b4:6c:b1:b8:c7:52:b2:a9:f1:
         27:82:ea:ef:93:42:cd:0b:00:24:ac:e7:78:41:a6:cd:b2:c2:
         ff:05:43:6a:88:72:eb:4c:17:6a:fd:d7:4d:12:98:58:15:e4:
         b2:18:73:f1:5b:32:7a:12:f4:39:af:a7:01:95:ba:6d:65:b0:
         57:13:ab:d7:38:5e:7b:47:c9:f0:ee:65:9e:bd:f8:46:f6:4c:
         85:c4:3c:26:c3:c4:64:d5:d9:32:d9:03:42:cc:81:22:a9:ad:
         c4:1c:65:d3:0e:53:b5:35:70:a0:6a:ab:db:ac:ea:aa:9b:82:
         ce:d7:a2:80:ae:bd:65:18:78:6c:3e:cd:48:af:95:d7:58:12:
         8d:47:82:96:37:38:ad:7c:52:ac:95:e0:c2:7e:10:2e:04:0f:
         38:e3:26:99
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkl9rCav/EBX3C/bF+Z8jZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3
NGYwZmQwHhcNMjMwNzA1MTIxMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGVjYWQ0MTUzMTgwNTU3ZmU1Mjc5YmNhMTVkMWMxNDFjZjZiZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ1Zk3SPIs5Ae5LAj3Ssx3ZYrupN
IwNJTI86ZTxH5kHfUTiIWba+tEUbNxtEfZodIDLaX7ggV/1rJj/CRWkdeaTlBl3j
iYOtArTuqqR5cFKuaNYEZH31lx93U4X5KhVvNYO4owuVmLZQjZt5M6OgwkXCKbCC
BynrJFkKj7XTgAXqXqLJHRXSG2Pbtr+JS4AjgFdK6ah1FdWNBSzNZeHpzSSrvWp8
YX6RJwiURXHijP2RvqULqUakcdt7mt2DrNgTzmeWw5qGya4z9KYlIAo66lSwogi7
+ri75EIQ8pvyzyK/3ZU1LCXKC1QuSP6Rdy2pdRM36nHag9lsY76crShTKQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFA3srUFTGAVX/lJ5vKFdHBQc9r47MB8GA1UdIwQY
MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt
Nzc3OTRmYmZkMmU0LzEvRGV5dFFWTVlCVmYtVW5tOG9WMGNGQnoydmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0
LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOFwAAw
DQYJKoZIhvcNAQELBQADggEBAIcMOCB8gKb0NafDesi3u+drtK8fTv2vLQp9aypn
HwZIOxoYZAvUcw0PAx7rq/B5qWn8XuGaqma5j9xWfdc0Hw3I3bTqDnWMJmlkw1dW
5Tz98w4iKKKZaLThl7MV8EVD+E2sNrRssbjHUrKp8SeC6u+TQs0LACSs53hBps2y
wv8FQ2qIcutMF2r9100SmFgV5LIYc/FbMnoS9DmvpwGVum1lsFcTq9c4XntHyfDu
ZZ69+Eb2TIXEPCbDxGTV2TLZA0LMgSKprcQcZdMOU7U1cKBqq9us6qqbgs7XooCu
vWUYeGw+zUivlddYEo1HgpY3OK18UqyV4MJ+EC4EDzjjJpk=
-----END CERTIFICATE-----
Generated at Wed Dec 17 13:44:53 2025 by rpki-client