This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/RxspegyfWFiWztHFGQlt8cwJpu8.roa
File:                     RxspegyfWFiWztHFGQlt8cwJpu8.roa (raw, json)
Hash identifier:          dVNlji1vvnSqo7DVgMbPOZkZ5K4gV2F3k+9re3wLFpI=
Subject key identifier:   47:1B:29:7A:0C:9F:58:58:96:CE:D1:C5:19:09:6D:F1:CC:09:A6:EF
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       0186DECD2D87FFFFA58C578983FB1CE4A1A9
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/RxspegyfWFiWztHFGQlt8cwJpu8.roa
Signing time:             Tue 14 Mar 2023 06:27:13 +0000
ROA not before:           Tue 14 Mar 2023 06:27:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9145
IP address blocks:        92.252.0.0/17 maxlen: 24
                          212.95.96.0/19 maxlen: 19
                          212.6.64.0/18 maxlen: 24
                          85.16.0.0/16 maxlen: 24
                          95.33.0.0/16 maxlen: 24
                          85.8.64.0/18 maxlen: 24
                          213.252.128.0/18 maxlen: 24
                          37.138.0.0/16 maxlen: 16
                          82.149.160.0/19 maxlen: 24
                          90.153.0.0/17 maxlen: 24
                          89.166.128.0/17 maxlen: 24
                          213.168.192.0/19 maxlen: 19
                          80.66.0.0/19 maxlen: 24
                          62.89.160.0/19 maxlen: 24
                          91.96.0.0/15 maxlen: 24
                          213.183.160.0/19 maxlen: 19
                          31.150.0.0/16 maxlen: 16
                          80.228.0.0/16 maxlen: 24
                          87.245.0.0/18 maxlen: 24
                          89.233.64.0/19 maxlen: 24
                          31.184.0.0/18 maxlen: 18
                          213.182.96.0/19 maxlen: 19
                          91.248.0.0/15 maxlen: 24
                          31.187.112.0/20 maxlen: 20
                          213.170.160.0/19 maxlen: 19
                          178.142.0.0/16 maxlen: 24
                          188.118.128.0/18 maxlen: 24
                          2a02:8200::/27 maxlen: 27
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:de:cd:2d:87:ff:ff:a5:8c:57:89:83:fb:1c:e4:a1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Mar 14 06:27:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=471b297a0c9f585896ced1c519096df1cc09a6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:9e:22:84:bb:98:9e:1c:42:ea:50:dd:c4:
                    46:c7:a1:6d:b3:db:02:8f:8a:ee:28:cd:1d:70:32:
                    9f:41:4e:49:b9:45:38:cd:56:07:c7:d0:6c:36:9b:
                    83:93:03:3c:64:ba:56:e9:79:fb:a8:8c:95:b6:73:
                    66:8f:dd:5b:37:9a:4e:aa:33:2c:df:9d:6a:0a:77:
                    a1:33:63:1e:37:25:ab:39:ac:f5:27:0a:a0:f1:2f:
                    3a:35:9f:7f:28:13:f5:61:04:12:76:d5:15:b1:f4:
                    07:00:0c:50:3a:b5:a7:1f:ab:fa:51:3f:09:92:07:
                    ff:9f:63:88:4e:a4:9d:9a:b3:f9:5c:ca:20:1c:e1:
                    22:be:44:da:35:67:df:13:01:df:39:1e:98:2e:dd:
                    a4:e8:da:35:e8:c6:8a:0b:a6:da:05:59:13:4e:4e:
                    13:46:3f:28:91:95:fd:5c:19:9a:4c:67:4e:e2:e7:
                    05:ec:0c:39:66:47:a6:d8:a0:02:b8:33:d0:a2:f2:
                    14:88:0d:14:5d:d1:06:d8:8a:07:d3:2f:05:3a:61:
                    20:97:6f:f7:62:cf:3f:f7:c4:41:45:22:da:90:c8:
                    99:a4:c6:65:54:13:98:d7:af:1b:ae:70:86:a0:fb:
                    d7:a0:e1:ea:6e:6d:f7:4a:74:85:24:28:b6:3a:e8:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:29:7A:0C:9F:58:58:96:CE:D1:C5:19:09:6D:F1:CC:09:A6:EF
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/RxspegyfWFiWztHFGQlt8cwJpu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.150.0.0/16
                  31.184.0.0/18
                  31.187.112.0/20
                  37.138.0.0/16
                  62.89.160.0/19
                  80.66.0.0/19
                  80.228.0.0/16
                  82.149.160.0/19
                  85.8.64.0/18
                  85.16.0.0/16
                  87.245.0.0/18
                  89.166.128.0/17
                  89.233.64.0/19
                  90.153.0.0/17
                  91.96.0.0/15
                  91.248.0.0/15
                  92.252.0.0/17
                  95.33.0.0/16
                  178.142.0.0/16
                  188.118.128.0/18
                  212.6.64.0/18
                  212.95.96.0/19
                  213.168.192.0/19
                  213.170.160.0/19
                  213.182.96.0/19
                  213.183.160.0/19
                  213.252.128.0/18
                IPv6:
                  2a02:8200::/27

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:92:52:a2:7b:7d:fb:77:2b:84:f5:1f:ac:11:84:5b:8c:
         d8:4c:85:97:81:67:23:5e:66:11:72:4d:0e:1a:0b:7c:17:6e:
         b9:42:21:3b:95:21:41:dd:57:31:dd:31:3d:33:25:f8:d8:5a:
         de:80:57:a0:c4:b4:9a:2d:ac:8a:8a:ab:77:e4:8f:86:0e:49:
         90:00:c6:cb:b3:11:1c:eb:66:cd:a8:4e:a0:95:e0:88:c8:cc:
         d6:5c:60:06:12:ea:09:81:31:30:37:84:b9:94:15:88:da:97:
         ce:4c:71:ab:8c:29:c5:db:13:30:59:6a:d8:7b:34:35:f6:5a:
         b5:d2:b0:5d:69:0b:d9:92:8e:63:4b:89:fd:c9:fd:79:38:18:
         d6:0c:0b:a2:39:42:8e:9a:23:0a:8e:8b:0d:4c:2c:84:30:90:
         ba:76:9b:89:5f:ca:57:c5:3a:1e:6e:a3:19:6b:19:f1:07:4a:
         d7:5c:46:cc:58:9b:5e:dc:b8:ba:bb:c0:17:bb:d8:10:a1:19:
         13:b5:a3:1a:2c:fc:f0:87:99:39:d8:dc:37:f5:7c:ca:c7:8c:
         71:21:e5:b6:a3:c1:19:24:43:cf:a7:9f:14:21:a0:93:38:e1:
         66:15:8c:0c:7c:52:2b:62:ba:5b:9f:c8:1a:26:dc:0a:9a:e6:
         1b:bb:87:61
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYbezS2H//+ljFeJg/sc5KGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjMwMzE0MDYyNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFiMjk3YTBjOWY1ODU4OTZjZWQxYzUxOTA5NmRmMWNjMDlhNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDmeIoS7mJ4cQupQ3cRGx6Fts9sC
j4ruKM0dcDKfQU5JuUU4zVYHx9BsNpuDkwM8ZLpW6Xn7qIyVtnNmj91bN5pOqjMs
351qCnehM2MeNyWrOaz1Jwqg8S86NZ9/KBP1YQQSdtUVsfQHAAxQOrWnH6v6UT8J
kgf/n2OITqSdmrP5XMogHOEivkTaNWffEwHfOR6YLt2k6No16MaKC6baBVkTTk4T
Rj8okZX9XBmaTGdO4ucF7Aw5Zkem2KACuDPQovIUiA0UXdEG2IoH0y8FOmEgl2/3
Ys8/98RBRSLakMiZpMZlVBOY168brnCGoPvXoOHqbm33SnSFJCi2OuhrTQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEcbKXoMn1hYls7RxRkJbfHMCabvMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvUnhzcGVneWZXRmlXenRIRkdRbHQ4Y3dKcHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBoQQCAAEwgZoDAwAf
lgMEBh+4AAMEBB+7cAMDACWKAwQFPlmgAwQFUEIAAwMAUOQDBAVSlaADBAZVCEAD
AwBVEAMEBlf1AAMEB1mmgAMEBVnpQAMEB1qZAAMDAVtgAwMBW/gDBAdc/AADAwBf
IQMDALKOAwQGvHaAAwQG1AZAAwQF1F9gAwQF1ajAAwQF1aqgAwQF1bZgAwQF1beg
AwQG1fyAMA0EAgACMAcDBQUqAoIAMA0GCSqGSIb3DQEBCwUAA4IBAQARf5JSont9
+3crhPUfrBGEW4zYTIWXgWcjXmYRck0OGgt8F265QiE7lSFB3Vcx3TE9MyX42Fre
gFegxLSaLayKiqt35I+GDkmQAMbLsxEc62bNqE6gleCIyMzWXGAGEuoJgTEwN4S5
lBWI2pfOTHGrjCnF2xMwWWrYezQ19lq10rBdaQvZko5jS4n9yf15OBjWDAuiOUKO
miMKjosNTCyEMJC6dpuJX8pXxToebqMZaxnxB0rXXEbMWJte3Li6u8AXu9gQoRkT
taMaLPzwh5k52Nw39XzKx4xxIeW2o8EZJEPPp58UIaCTOOFmFYwMfFIrYrpbn8ga
JtwKmuYbu4dh
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:45:28 2025 by rpki-client