This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dj0uk1Be4TqY7GJgRMXn5Hs8r_A.roa
File:                     dj0uk1Be4TqY7GJgRMXn5Hs8r_A.roa (raw, json)
Hash identifier:          VsLBVqjTYnmP8Zne/GBFMZi3Mqt2b8vbsidNjaBxvEY=
Subject key identifier:   76:3D:2E:93:50:5E:E1:3A:98:EC:62:60:44:C5:E7:E4:7B:3C:AF:F0
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       0187617CD059CCCE9CAAF58D2ED3DF63F25D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dj0uk1Be4TqY7GJgRMXn5Hs8r_A.roa
Signing time:             Sat 08 Apr 2023 15:29:42 +0000
ROA not before:           Sat 08 Apr 2023 15:29:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34529
IP address blocks:        45.86.17.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:61:7c:d0:59:cc:ce:9c:aa:f5:8d:2e:d3:df:63:f2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Apr  8 15:29:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=763d2e93505ee13a98ec626044c5e7e47b3caff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:f9:c5:44:d2:43:9f:ed:de:b8:56:0c:70:
                    71:03:9e:98:6b:9c:e2:f5:d4:62:04:f8:ce:2e:3d:
                    65:c9:e7:e5:f0:ca:80:aa:e3:c3:b5:43:de:44:1a:
                    0e:67:7b:a2:ac:36:4f:b0:95:30:db:50:72:59:8c:
                    5a:c3:a1:b9:0f:24:63:5f:66:96:e8:37:3a:e6:6f:
                    c5:fc:89:63:70:74:ef:b2:7d:38:bb:c9:25:d0:72:
                    b6:0e:17:30:b4:e8:6c:56:dd:bf:ea:7c:de:d0:e0:
                    3a:3c:b9:cc:d5:67:bf:10:7d:3b:13:2f:ce:06:c9:
                    e9:2e:c4:84:77:39:2e:25:37:50:4b:03:c8:00:9f:
                    46:fd:3b:cc:b2:92:35:ba:3c:cd:83:b0:f8:fa:70:
                    57:2a:9d:c3:8a:56:a4:aa:e2:84:f4:ae:20:5b:a2:
                    1a:18:40:57:67:7e:02:bd:37:4b:67:fb:be:be:6d:
                    6e:73:d0:14:61:7e:07:84:66:e8:3c:6c:93:72:dd:
                    ea:b6:66:e2:73:2d:ac:ae:c9:7d:e0:c8:0a:11:9a:
                    4a:5b:08:53:ee:57:41:7b:9e:65:13:a2:63:e5:17:
                    16:fb:bd:e5:0c:dc:27:40:ba:91:2a:cb:83:fa:10:
                    93:fe:25:c2:61:88:48:1a:ca:f1:9a:4b:5b:55:1b:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:2E:93:50:5E:E1:3A:98:EC:62:60:44:C5:E7:E4:7B:3C:AF:F0
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dj0uk1Be4TqY7GJgRMXn5Hs8r_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f8:a9:0e:68:09:81:db:68:88:e9:49:ac:3b:d5:6e:ec:76:
         85:8c:aa:54:32:5e:f1:28:72:fd:89:4d:96:ea:22:87:2f:4f:
         33:97:81:eb:05:1b:8a:4d:20:53:88:42:51:23:0d:1a:d9:f1:
         19:46:37:77:79:0d:c2:01:25:58:11:6a:cb:57:17:e5:ba:5a:
         ae:36:f6:1a:78:20:b3:55:c0:71:af:50:84:48:13:b5:64:13:
         ab:5a:1c:70:f9:09:93:c8:d9:5b:88:94:c2:07:98:68:b7:87:
         3c:eb:f6:33:fa:db:ac:6d:5b:fe:4c:98:f4:b7:27:d9:e2:05:
         29:92:a2:f3:12:47:d2:07:fa:d6:f2:a8:41:8c:fe:a7:b2:4a:
         da:36:10:33:3b:4d:c0:a0:7b:b1:f8:a5:23:a0:b3:a1:27:1b:
         85:1c:5c:aa:ed:74:0b:14:be:1b:7e:55:e7:e2:ee:40:22:8c:
         4b:5d:6d:21:10:0b:d3:05:ed:e4:05:08:07:ed:45:22:74:a5:
         e9:be:10:a3:32:0c:a5:88:49:df:4a:e6:c4:be:4f:71:b4:84:
         e5:70:b4:ad:11:d5:01:92:d6:2d:77:cc:4c:f1:fe:4e:5c:50:
         bd:f1:a1:ed:b8:60:b5:78:d0:32:e8:e4:1e:8c:b2:e8:ae:2e:
         f4:d4:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:29:13 2025 by rpki-client