This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa
File:                     PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa (raw, json)
Hash identifier:          hai/mYxJqT5MMFmWgD9oMF48G4Bs1UV3FIaIDGborzM=
Subject key identifier:   3D:F5:96:A4:23:0C:9B:86:45:D9:C4:E7:56:3E:AA:F8:4B:CC:8C:3D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       01899B559F02A4ED3EE98C7B9949A6AB3E23
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa
Signing time:             Fri 28 Jul 2023 07:10:26 +0000
ROA not before:           Fri 28 Jul 2023 07:10:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        212.116.226.0/23 maxlen: 24
                          212.116.252.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:9b:55:9f:02:a4:ed:3e:e9:8c:7b:99:49:a6:ab:3e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jul 28 07:10:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3df596a4230c9b8645d9c4e7563eaaf84bcc8c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:e5:51:d5:d6:de:7d:33:63:16:ca:e5:7e:
                    2c:4c:e4:a9:68:25:9d:a0:03:4d:61:10:b5:ea:73:
                    bc:a8:d5:4f:63:81:15:28:2b:57:fe:e8:45:ea:dc:
                    d0:08:85:df:ad:fa:02:dd:55:07:20:d1:bb:06:ee:
                    ca:ac:cf:4f:b5:c9:cb:a0:dc:65:06:e1:ac:22:3a:
                    ba:04:e8:d7:d6:6f:2f:b5:27:4d:7f:ea:66:b4:54:
                    e8:c4:e7:7a:39:0d:10:bb:95:a9:8b:c1:ea:dc:18:
                    86:fb:16:42:56:62:81:c9:05:dd:68:ac:fb:5e:49:
                    57:f0:7c:ca:3d:ef:1b:2e:89:18:6a:1e:e7:4d:a6:
                    bb:dc:c8:f4:f8:e4:6f:8d:23:5c:39:9f:0a:98:77:
                    c5:09:04:71:e2:bb:30:bf:c5:a3:51:90:3b:38:e1:
                    cc:32:e5:69:e7:89:e6:78:85:c5:57:4c:bc:67:04:
                    9a:41:ad:52:f6:f1:52:d4:7d:47:d1:e0:78:7e:82:
                    0c:77:c2:c9:03:5b:e2:6e:19:f2:38:50:5a:2a:89:
                    55:77:91:7f:61:c8:9f:d9:ac:87:67:9a:ab:2e:7f:
                    6e:ee:2c:4f:fb:3b:a6:c8:02:a2:fb:d6:b6:bd:91:
                    58:95:cf:1d:0a:c4:18:bc:0b:f7:65:ef:26:bb:b9:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:96:A4:23:0C:9B:86:45:D9:C4:E7:56:3E:AA:F8:4B:CC:8C:3D
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.116.226.0/23
                  212.116.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:a6:2f:9c:0c:c9:6b:f1:18:0a:e9:38:29:a1:ea:a7:99:
         29:0a:f5:f3:8d:35:47:bc:b6:02:cf:da:06:b0:eb:4b:53:7d:
         b2:84:35:eb:45:99:13:c6:99:2b:5e:06:70:bd:e1:14:43:58:
         04:5e:bc:d0:5c:60:13:16:ab:71:ea:01:7e:a6:9e:3b:de:2b:
         c9:82:8e:96:ce:ac:1c:9f:e6:70:28:6e:99:0c:8d:b8:7e:f8:
         0c:1b:a2:c3:07:08:7d:6d:6e:de:d7:83:89:bf:1e:a6:3c:92:
         4f:af:9c:86:a3:ea:af:b7:11:50:20:db:2a:fe:14:b4:75:64:
         32:01:4e:4a:4c:8f:39:b4:bc:f4:8a:e0:4b:0c:f0:2c:60:50:
         88:be:04:02:8b:51:2a:2d:3d:d5:40:98:65:2d:a2:4d:82:b6:
         4d:12:a6:ed:04:b7:35:9c:33:c5:66:4b:2c:4d:29:c4:8b:c7:
         b7:8d:ab:f9:77:57:0a:90:b3:4e:7d:fa:25:cc:00:06:76:36:
         e2:3c:e1:0f:89:ed:81:76:10:3f:6d:51:fe:79:65:e5:4a:46:
         4d:14:c1:cf:ae:e6:8d:bd:90:36:b6:82:8b:93:cb:62:29:1c:
         ce:11:12:9a:b5:bf:c8:ff:98:05:c5:0e:b8:62:a7:72:71:5f:
         69:00:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:15:08 2025 by rpki-client