This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1mDY_6sNM7La9KKv7hZ8wk41U6w.roa
File:                     1mDY_6sNM7La9KKv7hZ8wk41U6w.roa (raw, json)
Hash identifier:          zk1m5W5swuBLUbpTH9xWtmA5PFDEVFTPUf4Lk4J78Ys=
Subject key identifier:   D6:60:D8:FF:AB:0D:33:B2:DA:F4:A2:AF:EE:16:7C:C2:4E:35:53:AC
Certificate issuer:       /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial:       018FEE04DF8C169086BC184B509018AD88F8
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1mDY_6sNM7La9KKv7hZ8wk41U6w.roa
Signing time:             Thu 06 Jun 2024 14:47:27 +0000
ROA not before:           Thu 06 Jun 2024 14:47:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206406
IP address blocks:        185.187.92.0/24 maxlen: 24
                          185.187.93.0/24 maxlen: 24
                          185.187.94.0/24 maxlen: 24
                          185.187.95.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ee:04:df:8c:16:90:86:bc:18:4b:50:90:18:ad:88:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
        Validity
            Not Before: Jun  6 14:47:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d660d8ffab0d33b2daf4a2afee167cc24e3553ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:aa:a3:c3:96:b0:4c:8b:3d:03:e4:3a:63:
                    15:f4:29:ce:7e:64:36:b2:51:61:a2:52:15:43:6e:
                    95:bb:60:10:3d:06:3c:e5:d7:97:28:67:6e:df:76:
                    26:06:8d:e3:e1:2e:ed:e6:07:5d:96:2d:4e:47:49:
                    ee:d9:ec:8b:af:0a:ce:5e:37:cb:4b:91:be:f4:43:
                    88:2c:a9:31:75:b9:3b:d6:01:78:a3:e8:9e:95:4d:
                    16:ac:cb:ca:07:9c:d9:98:d4:03:ea:96:41:2b:4a:
                    d9:a6:08:0d:ab:93:27:1b:e5:fe:7b:10:e2:55:9e:
                    7e:be:89:a3:6c:eb:55:eb:ff:3d:97:84:e1:66:5d:
                    e7:0f:5f:b5:38:48:2a:e7:c9:41:36:9c:c9:f5:cc:
                    81:af:38:90:dd:d7:fd:e6:48:10:82:4d:32:44:87:
                    13:54:29:8d:7e:a6:23:d5:72:52:9a:a6:3d:ad:68:
                    70:c4:8e:13:05:79:1c:95:7c:c5:88:da:32:01:10:
                    6f:c6:7e:c8:d2:57:8d:8a:b0:ed:42:24:32:a7:15:
                    04:d7:65:2f:3e:d1:53:b7:06:81:99:57:c8:13:bf:
                    6c:4a:47:2c:bc:92:8d:d6:ba:03:b5:e0:69:8c:82:
                    1e:8f:62:99:9a:96:07:0a:2d:07:fb:df:47:8f:af:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:60:D8:FF:AB:0D:33:B2:DA:F4:A2:AF:EE:16:7C:C2:4E:35:53:AC
            X509v3 Authority Key Identifier:
                keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/1mDY_6sNM7La9KKv7hZ8wk41U6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:96:3c:6c:c5:bf:6e:a3:dc:4d:b7:a2:f6:b4:02:3e:bd:81:
         8f:22:78:e9:48:a0:26:d9:f9:ff:40:f2:1d:4a:f3:ad:00:80:
         d8:79:a9:9d:2c:ed:da:d5:8b:e6:ec:eb:4a:12:c4:d1:97:05:
         b8:48:fb:1e:e1:0a:4e:7f:03:9c:b9:03:66:ae:16:2e:a8:75:
         70:12:bb:08:82:9a:0a:da:4e:5b:fa:aa:43:22:ee:1e:bc:fc:
         1d:98:e2:c1:b6:4c:ba:b7:d2:49:06:56:f0:fd:2e:e0:67:2f:
         31:1b:12:63:2a:9b:65:a0:1c:09:da:6f:df:22:96:7b:95:f9:
         ec:bd:dc:0a:b3:99:5a:02:31:37:05:53:3d:d7:e2:77:2e:e2:
         15:6f:42:3f:39:bf:0e:27:c5:ba:29:e2:38:73:0d:27:94:63:
         fc:a3:07:b5:e0:46:ac:d8:a8:12:bc:1e:7f:71:20:0a:52:a8:
         50:2d:6f:e0:4e:96:4f:d7:fa:0a:e9:9f:2a:1c:7b:31:85:80:
         b2:ef:6d:91:5d:2e:e7:b1:85:d8:a1:cc:f9:55:d8:81:f4:b6:
         f9:da:fd:c3:e7:1e:25:8a:8c:b9:2f:64:24:50:6d:08:87:b1:
         3d:16:e9:6a:c9:07:c2:53:9e:76:73:e7:f8:34:be:14:e0:40:
         14:52:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:41:20 2026 by rpki-client