This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IXl310-5JyCQ9PEB2QmSXgKeiqg.roa
File:                     IXl310-5JyCQ9PEB2QmSXgKeiqg.roa (raw, json)
Hash identifier:          EAEqsydy3edmVz4kTQ2w3oIUuzCgdejEnEVPU97Imgg=
Subject key identifier:   21:79:77:D7:4F:B9:27:20:90:F4:F1:01:D9:09:92:5E:02:9E:8A:A8
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       0189C6368FE9DA7761799A5AEACF95B35590
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IXl310-5JyCQ9PEB2QmSXgKeiqg.roa
Signing time:             Sat 05 Aug 2023 15:00:11 +0000
ROA not before:           Sat 05 Aug 2023 15:00:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200740
IP address blocks:        185.81.216.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c6:36:8f:e9:da:77:61:79:9a:5a:ea:cf:95:b3:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Aug  5 15:00:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=217977d74fb9272090f4f101d909925e029e8aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:86:e2:72:f5:36:06:0c:08:3d:32:8c:4d:
                    49:26:8f:8d:1c:d2:4c:b6:a8:33:f8:1f:f1:41:c8:
                    21:25:85:89:1c:5a:c5:3e:a7:93:3b:8c:ee:aa:b4:
                    31:28:1e:aa:13:ec:c4:9e:03:91:5c:39:86:7a:4f:
                    54:b4:db:97:d3:31:93:a9:57:89:12:a8:44:c5:05:
                    85:25:50:de:54:17:cc:08:1a:27:fe:39:35:74:a5:
                    59:ef:86:7b:a5:c1:ed:10:fc:45:d4:67:75:28:c7:
                    c6:7f:49:18:26:54:76:23:e7:70:20:10:76:d2:b8:
                    72:39:b3:35:4a:b2:3b:96:6d:48:ae:08:77:c1:ca:
                    b4:e1:90:cc:59:80:73:92:38:db:0b:2d:31:6f:8e:
                    2c:9c:9d:b5:0c:ea:4d:c7:81:51:e2:fd:f2:17:44:
                    5b:34:09:2a:d3:db:5f:ca:d8:71:24:d4:bd:5a:73:
                    b7:ff:08:d2:8d:91:7d:fc:a6:36:ff:58:dd:2b:66:
                    96:78:c2:38:69:d6:3d:df:df:63:dc:9e:fe:78:cf:
                    b3:72:c0:f5:4e:ef:77:11:e8:5f:4c:49:a8:16:df:
                    ac:6c:23:17:35:da:23:25:ef:8c:79:5b:15:29:21:
                    ca:7c:0a:19:b3:7c:31:0a:db:e6:33:89:74:f4:40:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:77:D7:4F:B9:27:20:90:F4:F1:01:D9:09:92:5E:02:9E:8A:A8
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IXl310-5JyCQ9PEB2QmSXgKeiqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:fd:ff:88:cd:f4:df:00:47:9b:46:d7:cf:10:54:6c:e2:dc:
         8f:ca:e0:98:74:62:de:bd:80:f6:9f:8e:48:80:65:bf:69:56:
         34:3b:4e:62:ef:dc:97:45:0e:d1:19:1c:c2:3a:40:ca:96:4c:
         7a:5f:0a:59:96:eb:bf:0a:f1:d6:57:fd:2b:b5:62:2a:a5:ec:
         27:92:cc:a7:9a:8f:95:33:9b:ca:fb:5f:cd:95:01:6d:fa:41:
         4e:4f:36:b7:02:a7:13:bd:af:2d:8c:89:bf:48:b5:4a:46:9b:
         c8:e2:e4:e3:b1:a3:b3:36:24:36:ce:4c:57:57:7e:04:b4:eb:
         23:7a:40:aa:c6:60:06:96:e6:59:60:52:00:37:9e:30:d1:b4:
         6f:ae:72:f1:ba:5a:45:a5:fa:1f:6e:a4:ed:ff:54:26:b1:d3:
         80:31:f1:e8:11:ed:08:25:ae:1e:a4:b4:d0:30:93:6d:aa:f8:
         70:b8:e8:15:78:3f:90:14:00:cf:27:04:d3:43:1c:f0:71:51:
         33:85:3f:76:db:02:77:d8:57:ac:40:01:3a:89:66:fb:4c:d1:
         ce:ba:97:ce:d1:a1:c4:41:97:b7:a7:5f:b3:9d:d5:a5:ae:16:
         6a:88:e0:69:d6:18:16:87:65:10:7f:a6:99:2a:2f:8b:16:13:
         7c:b4:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:52:46 2025 by rpki-client