This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rqPS4U9M_UxJiVEiMBOxaqMa12w.roa
File:                     rqPS4U9M_UxJiVEiMBOxaqMa12w.roa (raw, json)
Hash identifier:          AmqYIIkOgmWzFD04IRn9QqeC4S5kRHsPnJyv0hRXDus=
Subject key identifier:   AE:A3:D2:E1:4F:4C:FD:4C:49:89:51:22:30:13:B1:6A:A3:1A:D7:6C
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       018ED2411F6F69B69562D8B9BDB808207757
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rqPS4U9M_UxJiVEiMBOxaqMa12w.roa
Signing time:             Fri 12 Apr 2024 12:21:07 +0000
ROA not before:           Fri 12 Apr 2024 12:21:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3267
IP address blocks:        80.250.160.0/19 maxlen: 24
                          82.137.128.0/18 maxlen: 24
                          82.137.176.0/20 maxlen: 22
                          82.179.32.0/19 maxlen: 24
                          82.179.64.0/18 maxlen: 24
                          82.179.128.0/17 maxlen: 17
                          82.179.140.0/23 maxlen: 23
                          83.149.192.0/18 maxlen: 24
                          85.142.8.0/21 maxlen: 21
                          85.142.32.0/21 maxlen: 24
                          85.142.52.0/22 maxlen: 24
                          85.142.56.0/22 maxlen: 24
                          85.142.102.0/23 maxlen: 24
                          85.142.104.0/21 maxlen: 24
                          85.142.116.0/22 maxlen: 24
                          85.142.120.0/21 maxlen: 24
                          85.142.148.0/23 maxlen: 24
                          85.142.153.0/24 maxlen: 24
                          85.142.162.0/23 maxlen: 24
                          85.143.0.0/20 maxlen: 24
                          85.143.18.0/23 maxlen: 24
                          85.143.26.0/24 maxlen: 24
                          85.143.96.0/22 maxlen: 24
                          85.143.112.0/22 maxlen: 24
                          85.143.124.0/22 maxlen: 24
                          85.143.224.0/21 maxlen: 21
                          85.143.239.0/24 maxlen: 24
                          86.110.96.0/19 maxlen: 19
                          86.110.96.0/22 maxlen: 22
                          86.110.101.0/24 maxlen: 24
                          86.110.102.0/24 maxlen: 24
                          86.110.103.0/24 maxlen: 24
                          86.110.112.0/20 maxlen: 20
                          185.71.96.0/22 maxlen: 22
                          188.93.107.0/24 maxlen: 24
                          193.27.214.0/23 maxlen: 24
                          194.85.32.0/20 maxlen: 20
                          194.85.160.0/21 maxlen: 21
                          194.85.168.0/22 maxlen: 22
                          194.85.174.0/23 maxlen: 23
                          194.149.64.0/24 maxlen: 24
                          194.190.224.0/19 maxlen: 24
                          194.190.232.0/21 maxlen: 24
                          194.190.240.0/24 maxlen: 24
                          194.190.241.0/24 maxlen: 24
                          194.190.242.0/23 maxlen: 23
                          194.190.244.0/22 maxlen: 22
                          194.190.248.0/21 maxlen: 21
                          194.226.192.0/20 maxlen: 20
                          2001:b08:22::/48 maxlen: 48
                          2001:b08:26::/48 maxlen: 48
                          2a00:db8::/32 maxlen: 48
                          2a07:a6c0::/29 maxlen: 29
                          2a07:a6c4::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:d2:41:1f:6f:69:b6:95:62:d8:b9:bd:b8:08:20:77:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Apr 12 12:21:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aea3d2e14f4cfd4c498951223013b16aa31ad76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:0a:6f:ca:4b:39:8b:0f:18:9e:78:3e:45:
                    d4:d0:56:e0:13:18:5f:35:f1:56:bf:08:b5:c9:c9:
                    ed:03:4a:6a:3b:74:ee:76:97:a3:35:2e:f0:c4:38:
                    43:c2:29:ea:f4:bc:01:3a:cd:ad:66:4c:2a:01:d7:
                    ab:ee:96:61:bb:c4:3b:51:dc:bb:6a:a8:43:b9:8f:
                    d8:50:c7:6e:4c:15:e4:34:c5:ed:57:04:9c:4f:8f:
                    03:94:cc:53:94:b4:23:cf:b7:cc:ce:c5:cc:d0:33:
                    e0:57:e2:49:0d:9c:da:1b:3d:54:be:7b:98:d8:16:
                    54:2c:b2:2b:8d:17:6e:b0:f7:42:9f:05:37:f1:55:
                    f5:d3:a4:68:4b:49:cc:b3:10:3e:96:b1:2c:53:81:
                    24:94:d5:b9:93:97:4a:22:3d:07:3c:08:78:2f:f6:
                    09:f5:b9:73:d0:4a:f8:25:99:d4:18:4a:84:e2:ef:
                    da:ef:2b:ef:a6:49:1d:b8:66:5c:8f:b6:9e:8f:e9:
                    34:db:bf:66:5b:fd:30:fc:4a:36:e5:f3:29:44:ee:
                    5e:f7:6d:91:96:74:1f:4e:60:a9:99:e8:d9:4e:06:
                    bb:b2:37:e8:f5:81:77:08:eb:13:37:c0:a5:4a:a8:
                    fd:0e:b5:15:c4:a3:9b:48:c7:1a:7f:1b:2d:e7:78:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:D2:E1:4F:4C:FD:4C:49:89:51:22:30:13:B1:6A:A3:1A:D7:6C
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rqPS4U9M_UxJiVEiMBOxaqMa12w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.160.0/19
                  82.137.128.0/18
                  82.179.32.0-82.179.255.255
                  83.149.192.0/18
                  85.142.8.0/21
                  85.142.32.0/21
                  85.142.52.0-85.142.59.255
                  85.142.102.0-85.142.111.255
                  85.142.116.0-85.142.127.255
                  85.142.148.0/23
                  85.142.153.0/24
                  85.142.162.0/23
                  85.143.0.0/20
                  85.143.18.0/23
                  85.143.26.0/24
                  85.143.96.0/22
                  85.143.112.0/22
                  85.143.124.0/22
                  85.143.224.0/21
                  85.143.239.0/24
                  86.110.96.0/19
                  185.71.96.0/22
                  188.93.107.0/24
                  193.27.214.0/23
                  194.85.32.0/20
                  194.85.160.0-194.85.171.255
                  194.85.174.0/23
                  194.149.64.0/24
                  194.190.224.0/19
                  194.226.192.0/20
                IPv6:
                  2001:b08:22::/48
                  2001:b08:26::/48
                  2a00:db8::/32
                  2a07:a6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:44:d5:87:33:97:0d:fe:06:d8:b8:3c:2c:f3:68:3b:32:
         6a:94:f5:6a:0b:94:e8:b0:1e:81:d3:9b:b7:80:42:de:51:70:
         0b:52:3e:93:ae:fd:f1:42:6e:ef:2c:10:74:89:54:62:b3:a0:
         08:0b:ac:35:c4:b5:c0:7b:9e:26:5a:b1:aa:93:b1:8c:55:21:
         c0:2f:d3:1a:9a:40:df:cd:c0:7b:3a:df:df:82:b9:0e:86:61:
         d7:79:09:56:8a:a1:ed:a4:ab:44:32:e7:5f:da:2f:1a:26:3e:
         aa:23:d7:86:3c:44:4b:c4:30:13:96:de:76:e3:b0:a0:85:ee:
         0a:a3:60:9b:e7:37:db:0c:9f:1a:b4:57:89:a8:95:05:d3:3d:
         f0:4e:72:aa:19:62:30:d5:f2:fc:9f:75:e8:4b:a9:50:b6:6e:
         7e:df:aa:6d:ab:96:d0:de:46:c4:f3:0b:56:c9:2a:6b:f5:2b:
         bc:98:13:6f:0f:89:ca:da:e4:fa:48:83:36:47:00:e3:d0:40:
         63:92:7b:ab:92:15:1e:20:5d:53:de:10:24:f8:58:33:bc:51:
         b2:ac:ad:e1:e6:89:e4:93:8c:f7:05:ea:15:a7:78:e2:3e:48:
         3d:75:5e:38:fa:e2:b8:ff:17:a9:9f:4e:21:f9:9f:e7:e4:a1:
         c1:f8:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:10:38 2025 by rpki-client