This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/q2wWXX4hdq_1LP6wYlt-q4igV9w.roa
File:                     q2wWXX4hdq_1LP6wYlt-q4igV9w.roa (raw, json)
Hash identifier:          IEE7NYaf8gXV8Ye4UnZ1GOk9z3w0rUSZGmd+I1Xc1ew=
Subject key identifier:   AB:6C:16:5D:7E:21:76:AF:F5:2C:FE:B0:62:5B:7E:AB:88:A0:57:DC
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       018DA700C4C37A1719B20699413972245594
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/q2wWXX4hdq_1LP6wYlt-q4igV9w.roa
Signing time:             Wed 14 Feb 2024 09:44:21 +0000
ROA not before:           Wed 14 Feb 2024 09:44:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        5.253.184.0/23 maxlen: 23
                          5.253.187.0/24 maxlen: 24
                          45.81.161.0/24 maxlen: 24
                          45.81.162.0/24 maxlen: 24
                          45.81.163.0/24 maxlen: 24
                          45.94.136.0/24 maxlen: 24
                          45.94.138.0/23 maxlen: 23
                          45.130.33.0/24 maxlen: 24
                          45.130.34.0/23 maxlen: 23
                          88.214.0.0/24 maxlen: 24
                          88.214.1.0/24 maxlen: 24
                          88.214.2.0/24 maxlen: 24
                          88.214.3.0/24 maxlen: 24
                          88.218.196.0/22 maxlen: 22
                          185.114.204.0/24 maxlen: 24
                          185.219.160.0/24 maxlen: 24
                          185.219.161.0/24 maxlen: 24
                          185.219.163.0/24 maxlen: 24
                          193.111.184.0/22 maxlen: 22
                          193.135.220.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a7:00:c4:c3:7a:17:19:b2:06:99:41:39:72:24:55:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Feb 14 09:44:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ab6c165d7e2176aff52cfeb0625b7eab88a057dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:bc:55:62:1d:6c:8d:1e:7f:c8:d0:2c:c6:
                    65:8a:0a:49:90:b7:0a:9a:f7:64:5d:2b:b1:c3:ca:
                    f3:c1:44:ae:ad:e3:b6:fc:f7:d3:79:d8:59:a1:f9:
                    73:36:58:45:d3:33:cf:00:8a:67:5f:37:45:72:63:
                    a3:c8:7f:36:3d:f6:61:ef:99:37:aa:48:e1:6f:6d:
                    8b:b2:18:4e:f8:29:67:96:42:96:15:b2:9e:8b:9f:
                    bf:15:39:13:86:fb:e7:6e:0a:46:75:68:b9:c4:15:
                    45:6b:13:a4:32:d3:d0:a5:7a:7f:c4:81:3a:cc:ff:
                    e0:c3:67:26:f5:d3:71:fe:11:69:e2:a4:69:08:8e:
                    f2:67:7a:5e:13:a1:05:a8:70:33:55:eb:d2:09:05:
                    84:02:2e:5d:87:87:d7:76:63:7c:12:f4:cc:fc:1f:
                    f2:a7:39:f8:23:ad:8b:44:93:27:a7:7b:68:4d:5c:
                    1a:f2:3d:b5:a9:0a:b9:d0:a8:7c:e6:4d:ea:84:4d:
                    d1:3b:97:d9:70:46:14:df:44:8e:ea:89:81:db:e5:
                    e6:d3:f9:6b:f2:66:07:07:a3:81:68:3d:23:44:e2:
                    32:d3:5c:76:03:40:6d:7a:c5:a4:a7:ab:7c:5d:90:
                    3f:4e:e3:a1:3d:af:0f:cc:e0:1a:74:bf:0c:b6:7a:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:16:5D:7E:21:76:AF:F5:2C:FE:B0:62:5B:7E:AB:88:A0:57:DC
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/q2wWXX4hdq_1LP6wYlt-q4igV9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.184.0/23
                  5.253.187.0/24
                  45.81.161.0-45.81.163.255
                  45.94.136.0/24
                  45.94.138.0/23
                  45.130.33.0-45.130.35.255
                  88.214.0.0/22
                  88.218.196.0/22
                  185.114.204.0/24
                  185.219.160.0/23
                  185.219.163.0/24
                  193.111.184.0/22
                  193.135.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:45:04:c0:72:f0:ff:76:99:0d:89:d6:26:1e:c1:e1:20:36:
         87:50:b4:1d:ef:cd:1e:24:84:23:3e:f6:fe:f5:53:c4:cc:13:
         d2:d2:0a:16:bd:dd:06:b1:0a:f9:e8:91:9f:6d:ab:cc:ab:b7:
         50:89:8e:90:ea:e6:11:7d:ec:0f:13:0b:a0:d4:8f:d9:6a:32:
         e7:40:f8:49:2e:6f:7c:c1:e1:5b:32:b4:94:30:cd:17:87:4f:
         5a:28:b1:38:a2:f3:ea:13:9b:7e:f2:9a:fa:20:fd:df:7c:60:
         53:63:d8:c6:4f:13:17:6e:21:70:cd:e3:a5:89:0b:1d:f5:f8:
         80:c1:24:37:75:4f:5d:7a:30:6b:b2:2c:96:49:79:4c:5e:30:
         9d:1e:c3:e1:6b:46:ef:f9:36:8f:f5:92:23:0f:15:93:42:46:
         b9:a9:a1:45:95:96:f2:45:37:94:ab:9f:27:32:90:9e:fa:a3:
         31:c6:3f:24:05:50:f4:65:71:d7:ef:53:a7:04:e2:59:18:41:
         25:b6:a2:67:f5:36:07:3e:b7:19:61:24:c2:65:ac:5e:fd:c8:
         e7:50:8d:a4:1c:bd:5f:ea:2d:cf:9f:de:1a:ac:a3:d4:ca:1b:
         81:9a:83:b4:44:77:c0:33:01:d1:4c:a6:60:fe:2f:bc:d9:9a:
         be:67:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:44:08 2025 by rpki-client