This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/hRtKMlb26O_9GAU2WDYLw7nTOT4.roa
File:                     hRtKMlb26O_9GAU2WDYLw7nTOT4.roa (raw, json)
Hash identifier:          lX0JZGvVTPgQbx5CMeDP0Q4M5G1yxA4HPFwvULBBVro=
Subject key identifier:   85:1B:4A:32:56:F6:E8:EF:FD:18:05:36:58:36:0B:C3:B9:D3:39:3E
Certificate issuer:       /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial:       018CBAD210F9FAA9CCBB874A9321883430FC
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/hRtKMlb26O_9GAU2WDYLw7nTOT4.roa
Signing time:             Sat 30 Dec 2023 13:02:58 +0000
ROA not before:           Sat 30 Dec 2023 13:02:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50919
IP address blocks:        185.96.34.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ba:d2:10:f9:fa:a9:cc:bb:87:4a:93:21:88:34:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
        Validity
            Not Before: Dec 30 13:02:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=851b4a3256f6e8effd18053658360bc3b9d3393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:a0:c4:54:1a:dc:9f:0a:20:ad:ea:4f:4f:
                    46:1f:3f:ea:b0:13:1b:a0:9d:ea:9d:06:15:10:ff:
                    94:2d:e7:af:13:f8:e3:58:3b:0d:c8:99:a1:02:62:
                    b0:82:ad:3c:eb:4d:3d:b8:c5:5a:8c:df:9f:92:52:
                    94:59:1c:00:55:d5:00:92:3f:90:2d:89:16:83:87:
                    27:65:6d:b0:5b:ab:a6:ca:7f:97:05:c0:2c:98:34:
                    01:5b:a3:39:1f:40:f7:72:68:ce:a2:53:2d:5e:ca:
                    30:2a:31:7d:e5:01:20:53:da:73:a3:df:e8:0e:a2:
                    b9:0c:49:f7:fa:e6:25:eb:36:5c:ed:4e:18:ce:12:
                    e5:d4:da:6e:f0:74:61:a6:ff:4b:27:3c:fa:70:a1:
                    1e:00:76:8b:64:43:96:2f:16:77:a3:ab:50:ab:48:
                    d9:57:29:c2:c8:f4:1e:6f:28:13:1b:ec:8e:79:09:
                    69:d4:5e:09:86:83:94:bb:b5:42:8a:4b:1d:16:94:
                    c0:d3:26:e8:17:2c:63:1e:81:3d:ae:10:ad:d1:86:
                    94:4a:5b:a5:33:7b:6f:ea:ac:6e:35:f0:24:d0:1f:
                    df:34:e8:87:74:7c:32:70:e5:1d:10:7e:70:69:0c:
                    e5:a4:82:c2:31:22:2b:3e:bf:54:1b:3a:d7:3d:74:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1B:4A:32:56:F6:E8:EF:FD:18:05:36:58:36:0B:C3:B9:D3:39:3E
            X509v3 Authority Key Identifier:
                keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/hRtKMlb26O_9GAU2WDYLw7nTOT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:e9:83:c8:00:1e:22:c2:ae:4b:41:c2:f8:3f:a0:20:c9:
         61:61:45:be:73:78:da:41:b1:8e:6e:28:d5:44:84:47:34:d2:
         c0:63:b8:e1:df:c7:15:1c:74:bd:cf:34:08:83:e3:fa:55:3c:
         9d:96:7d:b2:89:bc:be:66:2d:38:b9:a3:f4:52:24:2b:09:09:
         8a:3d:65:c5:15:4c:d1:8e:1a:ce:0b:b7:f3:36:ba:3f:ef:15:
         0c:3c:b9:a9:c3:28:32:7a:d7:ed:36:5a:1a:ca:02:45:1a:42:
         cb:f0:0c:5e:54:ca:e9:62:3d:a9:55:78:53:55:cb:56:54:05:
         de:fe:0f:7a:14:72:7d:41:3b:4d:70:e5:55:1b:51:57:f6:02:
         fd:d8:f4:14:70:fd:7f:1a:6b:f1:d0:ff:5b:a2:71:5d:ba:ec:
         cd:9b:7d:25:26:b0:73:c2:bf:93:83:ea:85:b0:6c:80:7a:1f:
         eb:fd:5b:73:0b:7c:62:1e:ad:4e:6e:51:cf:aa:66:45:e9:c5:
         1b:92:72:54:99:5b:cd:28:86:91:50:c8:3d:71:e4:0a:ec:98:
         42:8a:a0:c4:b3:66:1a:7b:9c:eb:8a:5d:0b:d9:87:89:54:92:
         ab:17:d8:b4:25:cf:00:51:5a:c3:d3:c1:10:dd:c4:eb:55:62:
         f3:9f:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:39:37 2025 by rpki-client