This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/sqAXRN7MVNarP1nd0jyv4MPufSI.roa
File:                     sqAXRN7MVNarP1nd0jyv4MPufSI.roa (raw, json)
Hash identifier:          Adkq13/x78CSwRTdh0hj/IvpS9XaDKVan44SR7QHL04=
Subject key identifier:   B2:A0:17:44:DE:CC:54:D6:AB:3F:59:DD:D2:3C:AF:E0:C3:EE:7D:22
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       0189C50490C6FD51078A59B214A33A9ABCDF
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/sqAXRN7MVNarP1nd0jyv4MPufSI.roa
Signing time:             Sat 05 Aug 2023 09:25:57 +0000
ROA not before:           Sat 05 Aug 2023 09:25:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43754
IP address blocks:        212.23.216.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c5:04:90:c6:fd:51:07:8a:59:b2:14:a3:3a:9a:bc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Aug  5 09:25:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2a01744decc54d6ab3f59ddd23cafe0c3ee7d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:48:7b:db:d7:c1:4a:72:dc:92:f2:4c:24:
                    dc:20:10:ab:de:e4:5e:fe:46:fe:11:85:d8:4f:ca:
                    3f:60:73:16:07:30:d4:b6:63:0f:dd:91:2c:9b:92:
                    c2:bd:21:71:49:8b:0b:dc:8b:e1:35:e6:39:74:c8:
                    d6:fa:5f:52:81:ec:86:26:8f:5c:2a:6a:52:56:48:
                    4f:8d:a0:7f:36:8e:8e:2f:e5:9a:ee:35:73:5d:36:
                    a2:f3:b5:66:06:a7:60:e4:fe:6f:c2:e1:0b:95:01:
                    f6:05:08:5a:59:34:1b:7a:04:9b:9e:45:34:a1:bf:
                    55:1c:0c:d9:22:67:3c:8c:ca:db:36:54:58:cf:db:
                    81:50:da:f4:85:a8:47:50:eb:c3:a8:6a:de:c3:92:
                    81:97:47:d3:de:eb:13:f0:a8:3b:2e:8c:5c:25:22:
                    92:f2:b2:18:c3:c8:ec:b2:c3:88:68:f1:dc:89:13:
                    30:79:1c:44:e9:05:b1:b1:23:e4:aa:a6:39:7f:69:
                    88:29:5d:2f:f2:97:df:05:4d:3b:39:e0:fe:a7:03:
                    86:e4:54:93:99:f3:15:33:a9:20:b1:66:9b:f8:0d:
                    5b:2b:7d:76:12:65:d0:a6:5c:e1:82:b4:b1:77:8c:
                    bb:61:f2:d3:5d:58:15:31:59:45:d1:ea:f8:83:82:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:17:44:DE:CC:54:D6:AB:3F:59:DD:D2:3C:AF:E0:C3:EE:7D:22
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/sqAXRN7MVNarP1nd0jyv4MPufSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c5:8e:c0:c9:c4:c8:aa:c7:51:7d:94:ff:82:1e:5a:38:35:
         18:1a:5a:d8:eb:76:03:6d:72:c1:6a:5c:84:cc:f5:e1:71:d5:
         81:46:5c:b4:5a:8f:27:ac:8a:e1:5f:af:c3:2e:b9:22:49:7a:
         b0:1c:f8:97:31:6b:42:bc:4e:cc:db:51:82:09:e6:e9:cd:f3:
         30:00:62:88:48:20:9e:e1:65:42:9c:e1:b9:09:7e:bb:89:bf:
         35:d4:cd:1d:c2:78:5d:50:df:52:32:cc:e6:49:db:b5:c5:55:
         02:1c:8c:ca:48:1c:f4:40:8d:62:5f:d7:77:29:21:fb:05:9e:
         d8:64:d3:15:b3:4c:0e:68:15:51:75:3c:43:cd:a9:8c:51:f9:
         61:43:2e:0b:62:c8:27:d3:bd:d3:66:a2:f8:4a:a7:09:43:40:
         e0:29:5e:3f:4d:fe:95:15:30:dc:c9:23:cf:8c:52:62:e5:1a:
         19:ed:e9:5b:35:66:1a:23:0d:db:95:d3:e8:8b:09:ff:46:f6:
         0e:18:31:97:7e:e9:af:c9:64:c1:a4:5d:1e:e7:3f:0b:6b:39:
         48:ea:98:98:a3:07:6d:a1:ab:48:cb:67:51:88:89:fb:3b:2e:
         40:50:d2:cd:57:01:ba:4e:ee:56:61:54:d7:a1:48:d9:6c:6f:
         ba:b3:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:18:04 2025 by rpki-client