This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/dJx42sGJGuQY27c8x6ybBXMgbR0.roa
File:                     dJx42sGJGuQY27c8x6ybBXMgbR0.roa (raw, json)
Hash identifier:          4KQxsfZ64Ii84Y+OcD/X7o9LK/N/eRsZvJyjTPBaBP8=
Subject key identifier:   74:9C:78:DA:C1:89:1A:E4:18:DB:B7:3C:C7:AC:9B:05:73:20:6D:1D
Certificate issuer:       /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial:       0191224925D3CB01DA51647B5FA977084159
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/dJx42sGJGuQY27c8x6ybBXMgbR0.roa
Signing time:             Mon 05 Aug 2024 11:25:04 +0000
ROA not before:           Mon 05 Aug 2024 11:25:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9031
IP address blocks:        77.109.64.0/19 maxlen: 24
                          77.109.96.0/21 maxlen: 24
                          77.109.104.0/22 maxlen: 24
                          77.109.108.0/23 maxlen: 24
                          77.109.112.0/20 maxlen: 24
                          79.132.224.0/20 maxlen: 24
                          79.132.240.0/21 maxlen: 24
                          79.132.248.0/22 maxlen: 24
                          79.132.252.0/23 maxlen: 24
                          79.132.254.0/24 maxlen: 24
                          85.234.192.0/19 maxlen: 24
                          109.236.128.0/20 maxlen: 24
                          185.95.72.0/22 maxlen: 24
                          212.71.0.0/19 maxlen: 24
                          212.233.32.0/19 maxlen: 24
                          213.211.128.0/19 maxlen: 24
                          213.211.160.0/20 maxlen: 24
                          213.211.176.0/21 maxlen: 24
                          213.211.184.0/22 maxlen: 24
                          213.211.188.0/23 maxlen: 24
                          213.211.188.0/24 maxlen: 24
                          213.211.189.0/24 maxlen: 24
                          213.219.128.0/18 maxlen: 24
                          2a02:578::/38 maxlen: 38
                          2a02:578:400::/38 maxlen: 38
                          2a02:578:800::/38 maxlen: 38
                          2a02:578:1000::/38 maxlen: 38
                          2a02:578:1400::/38 maxlen: 38
                          2a02:578:1c00::/38 maxlen: 38
                          2a02:578:2000::/38 maxlen: 38
                          2a02:578:2400::/38 maxlen: 38
                          2a02:578:2c00::/38 maxlen: 38
                          2a02:578:3400::/38 maxlen: 38
                          2a02:578:3c00::/38 maxlen: 38
                          2a02:578:4000::/36 maxlen: 36
                          2a02:578:5c00::/38 maxlen: 38
                          2a02:578:6400::/38 maxlen: 38
                          2a02:578:6c00::/38 maxlen: 38
                          2a02:578:7400::/38 maxlen: 38
                          2a02:578:7c00::/38 maxlen: 38
                          2a02:578:8000::/38 maxlen: 38
                          2a02:578:8400::/38 maxlen: 38
                          2a02:578:8800::/38 maxlen: 38
                          2a02:578:8c00::/38 maxlen: 38
                          2a02:578:a000::/38 maxlen: 38
                          2a02:578:e000::/36 maxlen: 36
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:22:49:25:d3:cb:01:da:51:64:7b:5f:a9:77:08:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
        Validity
            Not Before: Aug  5 11:25:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=749c78dac1891ae418dbb73cc7ac9b0573206d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:fd:e0:73:ac:ef:7d:4e:34:e7:ad:80:5b:
                    61:2a:27:55:63:d1:8f:ab:9b:b5:76:6e:66:c0:25:
                    47:0f:a7:56:0d:7a:62:d1:c8:8d:ca:ae:8e:c9:04:
                    b5:9d:9e:0b:42:e2:dd:fe:77:3b:31:82:43:f1:55:
                    54:0e:71:5b:6c:5b:15:51:63:1f:52:ea:16:2d:10:
                    80:a2:a4:6b:5d:62:24:35:13:a1:1f:3a:82:d7:45:
                    fd:38:62:89:9d:95:12:ee:5a:6d:17:2f:79:63:0d:
                    46:a7:02:29:50:24:57:4a:42:e0:63:74:61:2a:64:
                    cc:01:4a:85:65:0f:d5:8d:fa:8b:ec:66:95:68:55:
                    09:00:b9:5e:4d:b9:d0:6f:ef:04:4f:72:94:bc:2c:
                    44:f6:62:88:84:34:50:9d:22:a6:fa:98:77:b3:4d:
                    e6:07:b2:15:08:5c:d3:dc:aa:13:40:4a:76:2f:09:
                    c9:f0:3c:57:56:fd:00:e0:c1:91:a9:68:75:24:ae:
                    0b:58:4e:0d:61:24:5a:9a:ac:98:53:b6:d9:4b:2e:
                    7f:8d:6b:a7:3f:b0:5a:e3:87:95:39:7d:fd:96:22:
                    3d:94:14:a6:3a:d4:48:a8:47:19:0d:ff:60:7a:ec:
                    8f:a9:d5:ee:d8:15:4d:6b:9c:0b:3e:46:84:62:ad:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:78:DA:C1:89:1A:E4:18:DB:B7:3C:C7:AC:9B:05:73:20:6D:1D
            X509v3 Authority Key Identifier:
                keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/dJx42sGJGuQY27c8x6ybBXMgbR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.109.64.0-77.109.109.255
                  77.109.112.0/20
                  79.132.224.0-79.132.254.255
                  85.234.192.0/19
                  109.236.128.0/20
                  185.95.72.0/22
                  212.71.0.0/19
                  212.233.32.0/19
                  213.211.128.0-213.211.189.255
                  213.219.128.0/18
                IPv6:
                  2a02:578::-2a02:578:bff:ffff:ffff:ffff:ffff:ffff
                  2a02:578:1000::/37
                  2a02:578:1c00::-2a02:578:27ff:ffff:ffff:ffff:ffff:ffff
                  2a02:578:2c00::/38
                  2a02:578:3400::/38
                  2a02:578:3c00::-2a02:578:4fff:ffff:ffff:ffff:ffff:ffff
                  2a02:578:5c00::/38
                  2a02:578:6400::/38
                  2a02:578:6c00::/38
                  2a02:578:7400::/38
                  2a02:578:7c00::-2a02:578:8fff:ffff:ffff:ffff:ffff:ffff
                  2a02:578:a000::/38
                  2a02:578:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:ff:67:1e:69:ae:f0:c1:ee:8c:a3:7c:de:54:d7:af:e9:
         21:3a:ba:dd:18:e8:d3:93:8b:68:b1:2e:7d:ea:a2:56:02:05:
         1b:97:8f:42:c0:95:ac:42:b4:3b:ff:1a:14:58:56:d5:c8:77:
         16:f7:0b:30:de:a4:16:e0:a1:e6:60:9b:3a:49:87:bb:cb:80:
         52:df:31:0f:c0:a2:18:28:a9:4b:a4:66:e5:70:11:46:06:ac:
         ee:26:2b:d7:6b:6b:4b:43:c2:cf:21:1e:66:d3:c8:70:b2:4e:
         41:0f:9b:9a:d8:3e:89:fc:24:71:2d:a5:c8:77:9f:b4:20:9d:
         cc:d8:04:12:7d:f3:fd:42:ee:99:17:cd:dc:6e:31:6a:70:ec:
         ec:e5:d3:7a:3f:26:53:3a:2e:10:57:e3:76:9e:54:40:69:7d:
         63:90:5f:60:ec:70:c2:fa:16:9f:9d:cb:8d:10:58:39:85:33:
         b0:7d:14:00:7d:5c:7f:ac:9c:9b:91:cc:89:9a:94:6c:fb:68:
         2d:7b:f2:44:86:6f:43:b1:69:e3:13:1b:b9:b7:ec:bc:ef:27:
         7f:8d:90:24:cd:3f:9b:b2:c4:01:d7:9f:f3:cc:85:22:1d:f9:
         f7:37:90:26:2e:30:e6:52:3b:c4:60:23:8a:74:b7:49:61:89:
         62:b0:ee:19
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZEiSSXTywHaUWR7X6l3CEFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2
ODI1M2UwHhcNMjQwODA1MTEyNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDljNzhkYWMxODkxYWU0MThkYmI3M2NjN2FjOWIwNTczMjA2ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa394HOs731ONOetgFthKidVY9GP
q5u1dm5mwCVHD6dWDXpi0ciNyq6OyQS1nZ4LQuLd/nc7MYJD8VVUDnFbbFsVUWMf
UuoWLRCAoqRrXWIkNROhHzqC10X9OGKJnZUS7lptFy95Yw1GpwIpUCRXSkLgY3Rh
KmTMAUqFZQ/VjfqL7GaVaFUJALleTbnQb+8ET3KUvCxE9mKIhDRQnSKm+ph3s03m
B7IVCFzT3KoTQEp2LwnJ8DxXVv0A4MGRqWh1JK4LWE4NYSRamqyYU7bZSy5/jWun
P7Ba44eVOX39liI9lBSmOtRIqEcZDf9geuyPqdXu2BVNa5wLPkaEYq0gNQIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFHSceNrBiRrkGNu3PMesmwVzIG0dMB8GA1UdIwQY
MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt
NWY3MzI2NzEwMmE2LzEvZEp4NDJzR0pHdVFZMjdjOHg2eWJCWE1nYlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2
LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwWgQCAAEwVDAMAwQG
TW1AAwQBTW1sAwQETW1wMAwDBAVPhOADBABPhP4DBAVV6sADBARt7IADBAK5X0gD
BAXURwADBAXU6SAwDAMEB9XTgAMEAdXTvAMEBtXbgDCBlgQCAAIwgY8wDwMFAyoC
BXgDBgIqAgV4CAMGAyoCBXgQMBADBgIqAgV4HAMGAyoCBXggAwYCKgIFeCwDBgIq
AgV4NDAQAwYCKgIFeDwDBgQqAgV4QAMGAioCBXhcAwYCKgIFeGQDBgIqAgV4bAMG
AioCBXh0MBADBgIqAgV4fAMGBCoCBXiAAwYCKgIFeKADBgQqAgV44DANBgkqhkiG
9w0BAQsFAAOCAQEAbn7/Zx5prvDB7oyjfN5U16/pITq63Rjo05OLaLEufeqiVgIF
G5ePQsCVrEK0O/8aFFhW1ch3FvcLMN6kFuCh5mCbOkmHu8uAUt8xD8CiGCipS6Rm
5XARRgas7iYr12trS0PCzyEeZtPIcLJOQQ+bmtg+ifwkcS2lyHeftCCdzNgEEn3z
/ULumRfN3G4xanDs7OXTej8mUzouEFfjdp5UQGl9Y5BfYOxwwvoWn53LjRBYOYUz
sH0UAH1cf6ycm5HMiZqUbPtoLXvyRIZvQ7Fp4xMbubfsvO8nf42QJM0/m7LEAdef
88yFIh359zeQJi4w5lI7xGAjinS3SWGJYrDuGQ==
-----END CERTIFICATE-----
Generated at Sat Dec 27 15:41:23 2025 by rpki-client