This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B74wYhsMhdOJEjEdeHxxVVxGzO8.roa
File:                     B74wYhsMhdOJEjEdeHxxVVxGzO8.roa (raw, json)
Hash identifier:          tFHiEaOF+4600+TEM60mW3I4cW4+V5w7RzJM+/8ROv4=
Subject key identifier:   07:BE:30:62:1B:0C:85:D3:89:12:31:1D:78:7C:71:55:5C:46:CC:EF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187960E24A9D37B485CD3823F565C7822A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B74wYhsMhdOJEjEdeHxxVVxGzO8.roa
Signing time:             Tue 18 Apr 2023 20:28:41 +0000
ROA not before:           Tue 18 Apr 2023 20:28:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:96:0e:24:a9:d3:7b:48:5c:d3:82:3f:56:5c:78:22:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 18 20:28:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07be30621b0c85d38912311d787c71555c46ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:1d:cb:d2:d4:01:53:a1:56:7b:25:3e:e9:
                    1a:35:20:5d:f7:5b:f8:21:f5:ec:05:c2:0d:0a:7e:
                    65:5c:1d:6b:05:6b:fe:94:77:5b:61:8d:f7:60:4f:
                    97:80:41:2e:10:b6:32:cf:ba:1a:c7:5c:75:e9:7e:
                    2f:ce:72:22:92:de:b4:e6:78:be:e5:e0:99:ae:50:
                    13:63:c9:84:10:4f:ee:b9:aa:db:f6:73:a9:1a:23:
                    ae:d2:3b:93:61:30:a5:bc:6e:0d:18:b3:92:c0:0a:
                    2e:76:c0:ce:cf:b8:0e:db:e5:4c:8b:16:92:9c:fe:
                    62:d8:bb:ed:57:fe:93:ab:e9:98:86:99:f4:53:53:
                    1c:34:49:af:f5:f6:c9:49:88:88:bf:05:d5:31:22:
                    77:85:3c:7c:45:7a:67:61:c1:60:4c:a6:c5:32:88:
                    43:27:b2:bc:7b:59:0c:9c:02:56:46:d9:4d:4b:f4:
                    55:af:88:7c:2f:5c:81:b3:1f:ca:9c:c6:5e:a8:94:
                    e6:51:12:aa:46:db:ce:df:23:a1:28:3d:75:89:93:
                    c6:7f:b0:d4:3f:4e:17:e9:5d:22:12:78:8d:5b:1a:
                    33:2e:f5:63:25:19:c7:4e:d8:8f:36:5f:48:30:76:
                    8f:25:39:e4:a2:db:ab:62:a5:e3:31:70:06:cd:08:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:30:62:1B:0C:85:D3:89:12:31:1D:78:7C:71:55:5C:46:CC:EF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B74wYhsMhdOJEjEdeHxxVVxGzO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:791::/48
                  2a0e:b107:5d0::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:ee:bc:64:a4:68:ca:e3:75:de:a7:3d:f3:d4:71:99:cb:
         65:ca:5a:54:4b:9a:cc:e1:72:e1:8b:b9:55:01:34:09:26:de:
         a1:87:89:42:1a:23:de:65:46:af:42:13:09:ae:fb:9e:56:eb:
         52:6d:d9:6a:e8:23:e5:ff:88:bc:6d:8b:07:cb:25:6d:be:0b:
         8c:5f:eb:85:5e:34:54:3a:a2:88:4a:55:18:8f:32:69:c7:67:
         a4:86:c4:cd:80:9e:aa:f5:de:f9:82:28:52:3d:80:92:d2:ed:
         06:76:ee:9d:e0:e8:fd:85:85:17:16:fd:61:8b:1c:f3:20:9c:
         a7:fa:46:11:cf:f2:01:d2:38:a0:91:83:8e:7c:1c:1f:cb:87:
         bf:29:cb:2c:96:c9:cd:e1:bd:d5:86:84:4e:70:26:fe:44:52:
         05:74:e7:72:f3:5d:fb:83:99:83:77:9d:22:0c:9d:ec:e8:23:
         74:05:29:15:cf:af:72:db:3c:37:e8:9c:66:30:a6:3d:b8:49:
         9a:2b:d3:b1:ad:6d:42:77:9e:7c:5e:09:e6:de:35:dd:b6:90:
         44:f9:93:06:66:1d:24:67:37:d9:1c:b2:9b:80:7d:13:3b:69:
         2b:61:00:bc:9b:a5:43:0a:46:1f:4e:62:51:e1:ff:18:c4:98:
         09:cb:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----