This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/grDr346iqmFTB2I5-t6YgwM286U.roa
File:                     grDr346iqmFTB2I5-t6YgwM286U.roa (raw, json)
Hash identifier:          /3Lr6XB8Zdok+2AGzxf7bqmOu8DgVrK0sv9P0q7faWM=
Subject key identifier:   82:B0:EB:DF:8E:A2:AA:61:53:07:62:39:FA:DE:98:83:03:36:F3:A5
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       018A6F2166893B737FD721500824957FD187
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/grDr346iqmFTB2I5-t6YgwM286U.roa
Signing time:             Thu 07 Sep 2023 10:12:54 +0000
ROA not before:           Thu 07 Sep 2023 10:12:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50266
IP address blocks:        82.172.0.0/17 maxlen: 17
                          143.178.0.0/17 maxlen: 24
                          87.210.0.0/16 maxlen: 24
                          95.98.0.0/15 maxlen: 24
                          94.157.0.0/16 maxlen: 24
                          62.250.128.0/17 maxlen: 24
                          87.208.0.0/16 maxlen: 24
                          81.59.0.0/17 maxlen: 17
                          87.209.0.0/16 maxlen: 24
                          143.177.0.0/16 maxlen: 24
                          31.20.0.0/16 maxlen: 24
                          87.212.0.0/16 maxlen: 24
                          31.184.64.0/18 maxlen: 24
                          143.178.128.0/17 maxlen: 24
                          31.21.0.0/16 maxlen: 24
                          143.179.0.0/16 maxlen: 16
                          95.99.0.0/16 maxlen: 16
                          188.88.0.0/14 maxlen: 24
                          31.187.128.0/17 maxlen: 24
                          82.174.0.0/16 maxlen: 24
                          62.166.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6f:21:66:89:3b:73:7f:d7:21:50:08:24:95:7f:d1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Sep  7 10:12:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82b0ebdf8ea2aa6153076239fade98830336f3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:63:65:8b:82:b5:6b:15:9b:dc:5b:b1:2e:
                    9f:f4:97:3e:c8:39:d5:24:7f:31:db:57:c4:8c:f2:
                    39:a1:f5:4b:bf:19:28:72:d2:2a:fb:c6:4b:2b:64:
                    ff:d2:49:7f:c6:58:b9:fc:f5:80:35:e8:c7:de:d9:
                    e3:6d:cc:88:6b:b8:d1:89:4e:ee:11:86:0b:54:28:
                    dd:86:39:83:69:04:f3:65:11:04:ca:ce:18:ee:c2:
                    0a:3f:53:58:a5:4c:85:f7:fd:5d:6a:4c:a3:f6:ff:
                    2a:87:a9:e2:9c:e9:4c:c0:8a:7b:d3:6e:2a:30:9b:
                    9f:15:55:38:3f:c9:b4:17:93:f6:0b:2a:7c:fc:68:
                    fe:7a:1c:0a:6e:31:ba:71:60:01:4c:5b:85:90:fb:
                    bf:b5:fe:b6:ef:b6:8b:bd:78:b5:3e:3d:b1:4f:34:
                    13:7d:fd:f5:50:5e:36:62:3e:54:27:2b:e9:97:52:
                    4f:e5:fc:cf:dc:ee:17:f0:e3:dd:82:05:44:2d:be:
                    b7:c6:f2:01:40:81:d9:47:fd:8f:c2:88:da:0e:85:
                    8c:70:bb:11:e3:1d:2a:66:2b:4e:b3:75:cb:60:05:
                    8a:c4:24:fb:e8:d7:63:99:98:e9:2c:80:e1:3b:7e:
                    29:ab:0a:fd:a2:8d:b6:43:82:45:8c:77:20:81:df:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:EB:DF:8E:A2:AA:61:53:07:62:39:FA:DE:98:83:03:36:F3:A5
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/grDr346iqmFTB2I5-t6YgwM286U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.20.0.0/15
                  31.184.64.0/18
                  31.187.128.0/17
                  62.166.128.0/17
                  62.250.128.0/17
                  81.59.0.0/17
                  82.172.0.0/17
                  82.174.0.0/16
                  87.208.0.0-87.210.255.255
                  87.212.0.0/16
                  94.157.0.0/16
                  95.98.0.0/15
                  143.177.0.0-143.179.255.255
                  188.88.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:6c:82:ad:30:ba:55:9e:ca:d9:78:85:8e:e2:6c:3a:10:
         7b:93:41:17:f7:de:01:ba:6c:1d:ca:90:31:31:87:5c:26:eb:
         a1:ea:06:71:10:c4:39:09:32:9c:56:ab:1f:d9:b4:d4:8e:a9:
         dd:c8:99:96:7e:50:1c:37:19:e6:e3:e7:af:b8:45:ff:c3:07:
         94:18:0c:6b:d7:66:f6:c6:93:52:31:ba:7e:9f:eb:a7:ed:d8:
         11:9b:f0:7f:6f:0b:35:37:f7:57:d0:94:84:e0:ef:4f:e3:b4:
         dc:b9:64:c9:ee:aa:03:dd:52:79:42:3b:6f:7b:2a:ee:b3:03:
         a5:2b:bc:bb:49:7a:9e:ee:a2:18:bd:b0:a5:e7:93:44:c1:96:
         df:8e:f5:9f:69:bd:7d:90:72:ce:64:03:12:34:3d:34:86:fb:
         3f:23:81:c7:b3:f2:ce:78:94:b9:6c:31:ed:f0:03:63:e4:97:
         3b:89:36:a7:37:9d:4b:0b:d0:54:83:74:03:35:36:a4:2a:ba:
         95:59:02:b1:92:a2:c8:f9:40:cd:0e:b2:24:23:ef:20:28:bf:
         69:a4:b3:65:76:3d:18:bf:d1:d1:08:c8:5c:76:7d:c0:4b:ee:
         78:da:17:4e:8b:0e:6f:0b:74:2d:c1:92:2e:c7:20:94:53:16:
         73:f1:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:12:12 2025 by rpki-client