This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-M7Nyvk-4nq4G8_p9cHAScPNO10.roa
File:                     1-M7Nyvk-4nq4G8_p9cHAScPNO10.roa (raw, json)
Hash identifier:          d54dP/Rf6Fn8CgHZ5CTLQ9gA1VS93pYcl1FMpTZRuUs=
Subject key identifier:   F8:CE:CD:CA:F9:3E:E2:7A:B8:1B:CF:E9:F5:C1:C0:49:C3:CD:3B:5D
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018F71907E295C10502AE19850E3E981C45A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-M7Nyvk-4nq4G8_p9cHAScPNO10.roa
Signing time:             Mon 13 May 2024 10:47:25 +0000
ROA not before:           Mon 13 May 2024 10:47:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206077
IP address blocks:        45.80.81.0/24 maxlen: 24
                          185.226.192.0/23 maxlen: 24
                          217.26.188.0/22 maxlen: 22
                          217.26.188.0/23 maxlen: 23
                          217.26.188.0/24 maxlen: 24
                          217.26.189.0/24 maxlen: 24
                          217.76.252.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:71:90:7e:29:5c:10:50:2a:e1:98:50:e3:e9:81:c4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: May 13 10:47:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f8cecdcaf93ee27ab81bcfe9f5c1c049c3cd3b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:03:78:39:d2:41:1e:f4:29:9f:c0:ce:b2:
                    7a:97:e9:67:3d:a4:52:58:dd:b1:f6:47:16:c4:6e:
                    a0:75:d7:c3:3c:e8:b1:2c:85:02:7b:af:4e:18:00:
                    98:54:f2:6e:b3:9b:89:13:8d:82:49:62:26:48:bf:
                    b2:55:04:cf:86:30:aa:d8:af:f7:e7:b8:c3:6b:9b:
                    7e:b5:e9:75:14:92:94:3f:91:77:d9:96:05:5a:35:
                    4f:9e:39:8b:df:c2:a7:d6:60:9e:7b:74:26:e9:5c:
                    68:d1:dc:04:88:98:9a:b9:3d:48:5d:76:9d:5d:dc:
                    d4:07:ed:6b:af:b0:87:42:a5:ad:da:a8:e3:1e:5e:
                    47:a6:e3:60:61:be:f4:0a:77:31:7a:6b:08:b5:7b:
                    42:3f:28:bb:a2:7e:d0:80:f3:c2:d1:98:e5:e4:bd:
                    55:06:fd:02:e7:a1:4a:ca:28:c3:0f:30:c9:8f:40:
                    ae:23:57:be:d3:69:5c:9f:3c:38:e3:6a:e6:8a:d7:
                    7a:de:5f:56:9d:33:9c:d3:82:a1:59:c4:02:9e:0c:
                    44:df:b1:af:d8:b5:8f:df:56:f8:65:d8:6d:22:69:
                    17:97:d9:6a:12:24:2a:d6:c9:d9:e9:6d:cc:15:bc:
                    31:02:2f:89:4a:d5:78:cb:b2:7b:c8:a3:15:cd:de:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:CD:CA:F9:3E:E2:7A:B8:1B:CF:E9:F5:C1:C0:49:C3:CD:3B:5D
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-M7Nyvk-4nq4G8_p9cHAScPNO10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.81.0/24
                  185.226.192.0/23
                  217.26.188.0/22
                  217.76.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:df:37:0f:cd:47:bc:a3:33:05:7f:ec:b5:1d:47:db:58:e8:
         ac:56:b5:69:58:f5:4e:b4:08:67:f3:85:a9:c9:15:ff:ef:4b:
         9e:f4:b8:16:57:31:e3:cb:8b:71:34:61:28:7d:93:7d:d7:38:
         90:2e:20:47:b8:96:5d:f3:ef:6a:db:37:f9:4b:8b:7f:49:e4:
         1f:d6:0d:a3:aa:2f:32:6e:03:4d:87:fd:59:de:14:23:ad:6b:
         00:07:ba:7e:ab:3d:2b:6b:ee:2a:3f:1b:ca:e1:eb:6a:f5:a3:
         65:a2:66:4f:6f:a0:ed:5c:4d:ad:15:31:ba:78:eb:13:cb:29:
         91:b1:e2:fd:cd:68:32:55:36:f5:36:10:98:c4:c7:5a:07:7b:
         8e:59:a7:3f:b6:8d:c1:2d:dd:1f:29:4c:a3:aa:e8:96:7d:0b:
         07:19:ff:75:c6:ec:33:18:f6:85:5a:14:f5:75:a6:ac:c1:21:
         cf:26:2d:96:6c:c8:0f:e8:f8:63:63:cf:69:49:b9:8a:1b:9f:
         08:a2:bd:55:fb:93:55:70:9e:5a:a5:5c:32:e6:73:b4:0e:f2:
         24:20:e3:88:b8:2c:aa:eb:7d:b9:ad:d1:d7:db:d2:41:ed:0d:
         6c:fd:dd:e1:0a:a1:19:1c:23:82:62:0d:89:3c:87:e8:df:33:
         c4:36:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:16:28 2025 by rpki-client