This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa
File:                     g2l5_tUqPULYFCiIPHSbOHIatto.roa (raw, json)
Hash identifier:          P9zp7Y1l9V7x902o20HKM29dxpdfYGfCoNPJ52rzj24=
Subject key identifier:   83:69:79:FE:D5:2A:3D:42:D8:14:28:88:3C:74:9B:38:72:1A:B6:DA
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       01870D86204AE9BC422EDA5C0A8B9E997DA0
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa
Signing time:             Thu 23 Mar 2023 08:11:46 +0000
ROA not before:           Thu 23 Mar 2023 08:11:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202423
IP address blocks:        194.116.162.0/24 maxlen: 24
                          194.116.163.0/24 maxlen: 24
                          185.247.185.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:86:20:4a:e9:bc:42:2e:da:5c:0a:8b:9e:99:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Mar 23 08:11:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=836979fed52a3d42d81428883c749b38721ab6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:d9:65:b3:3a:4c:a7:af:a2:18:54:54:37:
                    27:7e:ac:d6:f6:1f:4c:02:f4:1c:03:fc:42:fd:30:
                    f5:a8:08:2b:19:ec:39:19:59:10:ca:cf:b3:02:a4:
                    e9:29:92:e6:e7:ed:74:cb:67:71:99:43:4f:89:cb:
                    b7:a2:b0:9f:2c:87:e6:ba:fe:d4:4f:8c:b8:c0:a5:
                    0a:cc:42:ca:34:10:50:a1:53:af:2b:30:30:00:d6:
                    6f:84:da:9e:be:84:82:9f:01:6b:fa:8d:f3:7c:02:
                    99:b8:4d:f3:fe:0b:00:ce:b4:d6:a0:c2:ed:6a:e1:
                    13:b7:28:4e:9c:9f:cc:2d:36:2b:48:62:fa:eb:80:
                    1e:90:c0:6c:d7:7f:77:6b:f3:fc:f9:69:36:18:37:
                    79:a7:4d:90:63:6d:d8:47:1c:4f:1d:77:ae:04:14:
                    3f:f7:5d:d1:22:b5:c2:8e:ea:50:2b:10:ff:9c:75:
                    38:b4:e4:ea:24:85:c2:6e:4c:34:b9:f7:a3:87:ca:
                    43:93:29:88:72:6a:ce:14:a8:a0:d0:ef:bc:62:76:
                    05:3a:65:64:a9:16:3a:84:30:92:56:88:5d:ab:bf:
                    90:9a:56:ac:14:9f:f3:e5:24:05:e6:0f:3f:62:ea:
                    84:e0:46:80:b9:e9:87:18:da:53:e5:7c:7c:14:56:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:79:FE:D5:2A:3D:42:D8:14:28:88:3C:74:9B:38:72:1A:B6:DA
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.185.0/24
                  194.116.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:80:77:2c:31:9c:fa:90:c4:ce:d2:e7:67:78:42:c9:e2:41:
         b8:aa:ff:61:56:07:10:e8:d8:50:ac:1e:0f:57:1f:c6:bb:7c:
         9f:93:8b:99:71:60:63:cd:3c:94:7c:64:37:ab:41:6a:39:8d:
         16:34:fc:3b:4e:78:4e:d0:f4:ef:75:27:46:e2:3c:db:a4:26:
         f8:00:1a:51:65:9c:f0:d3:f0:18:78:f8:36:e2:9f:ea:84:8f:
         e7:c5:74:e9:d9:3b:1b:ae:03:80:30:d7:db:0f:ca:2c:fc:59:
         f1:ec:7f:c1:74:c8:ef:25:f7:c7:6d:04:d9:f5:a4:c0:80:ed:
         17:d1:84:1e:fe:ed:c6:33:9b:c3:d7:40:be:01:54:ee:10:a5:
         12:a9:3c:34:41:b1:c1:71:f4:30:03:6e:2b:e3:a2:b6:95:51:
         54:cc:8e:5c:38:9c:7b:b5:46:57:ab:0f:91:42:93:03:52:1b:
         1a:04:57:55:26:56:b7:1d:c1:91:0e:e2:09:18:bf:d2:47:cf:
         6f:88:1b:83:4e:ac:ec:51:4a:8f:70:c7:10:d8:66:d0:7e:51:
         44:1a:0b:26:6d:8e:ba:e7:aa:85:e0:b5:c3:ca:95:5e:d8:9e:
         8f:3d:e5:8f:66:7a:86:a5:b6:fb:d0:a8:b7:f9:4c:a1:d2:02:
         e0:0e:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:53:05 2025 by rpki-client