This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/qDT715j_dB9rs4yHWNdnqYY5Ciw.roa
File:                     qDT715j_dB9rs4yHWNdnqYY5Ciw.roa (raw, json)
Hash identifier:          QLsdeK0ws6h6P9Q/4xxYVHrxKX258+Ege2oX/pa7vD4=
Subject key identifier:   A8:34:FB:D7:98:FF:74:1F:6B:B3:8C:87:58:D7:67:A9:86:39:0A:2C
Certificate issuer:       /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial:       0187C771912F09EEC1757264BC2A79014887
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/qDT715j_dB9rs4yHWNdnqYY5Ciw.roa
Signing time:             Fri 28 Apr 2023 10:38:41 +0000
ROA not before:           Fri 28 Apr 2023 10:38:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29037
IP address blocks:        185.39.108.0/22 maxlen: 24
                          212.7.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c7:71:91:2f:09:ee:c1:75:72:64:bc:2a:79:01:48:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
        Validity
            Not Before: Apr 28 10:38:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a834fbd798ff741f6bb38c8758d767a986390a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:5c:c9:0b:c8:5e:65:84:da:10:f9:f2:43:
                    2c:58:21:ff:cc:28:6a:79:ea:ca:5c:95:f4:0c:b3:
                    89:02:7d:df:04:99:15:7c:ee:70:3e:6b:c1:17:db:
                    16:a6:b1:3c:7f:e3:de:bb:4a:73:8a:11:a3:61:e1:
                    43:75:8d:8e:a0:3f:b9:93:69:17:35:b7:ad:a3:18:
                    cc:bb:ff:9d:cd:06:02:44:68:33:4d:fe:d7:81:79:
                    c9:4b:40:21:fe:6f:4f:6c:fd:dc:37:3f:4e:48:49:
                    04:bc:5c:8e:71:f0:e8:bf:bb:38:9d:ff:c6:93:90:
                    59:a4:96:76:0c:46:9f:43:83:c6:9c:50:f9:e0:f3:
                    e8:c6:c2:6f:f4:a6:23:73:a2:b9:ee:d9:bc:1c:3d:
                    67:d0:6e:e6:e2:2a:45:c0:14:c7:c5:59:d0:c2:80:
                    2e:63:54:dc:ae:41:53:a1:dc:96:69:c5:8e:f3:54:
                    29:01:ea:79:56:02:48:83:c2:6e:3d:fb:4c:13:84:
                    45:4f:69:7e:e4:54:72:e7:53:03:77:46:63:77:00:
                    81:d6:f6:d7:c7:96:ff:12:9a:7e:24:aa:2b:79:f9:
                    e9:50:31:35:35:c8:1d:60:e7:3c:e7:db:d1:72:fb:
                    a3:66:95:78:45:bc:6a:0c:09:21:e6:1a:e9:81:e3:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:FB:D7:98:FF:74:1F:6B:B3:8C:87:58:D7:67:A9:86:39:0A:2C
            X509v3 Authority Key Identifier:
                keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/qDT715j_dB9rs4yHWNdnqYY5Ciw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.108.0/22
                  212.7.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:c7:64:35:19:77:fd:f9:50:d2:a5:50:0d:ed:b3:a9:c4:
         b8:d7:8c:d8:d4:02:26:eb:dd:81:b5:b5:b2:b8:2b:24:26:7a:
         6f:79:c8:c5:b4:4b:d1:18:29:35:44:96:3b:51:f8:de:80:9d:
         56:78:41:f3:d0:0b:13:ab:af:07:56:25:06:e8:37:3d:cb:1e:
         b7:80:db:0d:14:b0:0b:6d:bb:8f:75:fb:19:68:9b:6d:03:86:
         75:d9:6a:e2:81:d6:68:da:ae:3b:ff:e5:02:0a:19:15:2e:c3:
         4a:03:d1:10:4f:0f:0d:3e:6f:e0:2d:fa:9f:90:fd:1b:c2:22:
         61:60:67:fe:55:e3:6b:74:e0:8b:3e:0c:89:a8:cb:7d:18:08:
         58:67:52:09:36:0b:0c:3c:71:26:ba:aa:9e:d1:0a:58:1e:91:
         8d:61:2b:a7:82:59:e0:c6:d5:cd:ca:c4:39:31:3d:a6:bd:32:
         8c:ef:8b:06:af:3b:4d:9c:4a:ba:07:06:f6:2a:6f:e4:c3:38:
         ea:f0:01:f2:50:0c:a1:fc:d8:06:cd:2d:0e:d1:8c:b8:6f:a5:
         37:4e:d8:9a:82:56:e4:de:93:eb:9f:df:82:dd:cb:3b:50:14:
         cf:76:2d:e6:07:6b:75:6a:b3:4b:65:8a:04:05:c9:63:1d:e2:
         ae:41:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:37:30 2025 by rpki-client