This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pBWqTIeA4kJmBZ6dsB5ppFWqE58.roa
File:                     pBWqTIeA4kJmBZ6dsB5ppFWqE58.roa (raw, json)
Hash identifier:          B/63gQES1B/r9ch6gn9Oi8Y6F78T/vkzl7mgZdXDpMw=
Subject key identifier:   A4:15:AA:4C:87:80:E2:42:66:05:9E:9D:B0:1E:69:A4:55:AA:13:9F
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       01894F210627F186FAA4DF064C986DE35063
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pBWqTIeA4kJmBZ6dsB5ppFWqE58.roa
Signing time:             Thu 13 Jul 2023 12:01:51 +0000
ROA not before:           Thu 13 Jul 2023 12:01:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        89.42.82.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4f:21:06:27:f1:86:fa:a4:df:06:4c:98:6d:e3:50:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul 13 12:01:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a415aa4c8780e24266059e9db01e69a455aa139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:8b:b1:4a:35:c4:19:5f:fb:e1:b7:f2:6c:
                    60:ab:f3:e3:15:82:09:7d:92:a9:89:91:90:d8:81:
                    cb:1a:61:f4:5d:d9:c6:f4:e2:41:e3:b3:cc:10:10:
                    c7:52:d9:62:f3:86:4e:5d:2a:a5:cb:9d:9f:34:58:
                    3f:3d:a8:ef:a6:df:a5:98:8c:c3:00:e4:e0:3c:db:
                    30:28:66:42:7c:71:f5:8e:68:cd:b3:0b:45:a6:bf:
                    e7:7b:8b:91:07:df:81:69:2f:1c:f5:69:a3:47:1c:
                    4c:fb:c4:44:f5:0b:2d:94:14:f6:f5:62:72:c0:d9:
                    7f:77:8d:eb:d1:8a:52:c6:c0:98:e2:a0:bd:11:52:
                    b9:f7:1d:1d:4c:3a:e7:77:b7:3c:9c:9c:4d:72:94:
                    60:1e:b8:61:64:40:21:f8:da:2a:8c:09:00:bf:e8:
                    7a:19:8a:8a:51:04:f9:e8:13:e9:ad:f3:2e:66:b8:
                    53:3d:48:ca:af:7b:6b:79:f9:13:40:55:41:c5:8b:
                    f3:f7:89:d1:2b:64:23:06:92:d7:4e:d6:0d:0c:5f:
                    9d:18:10:08:b4:37:a0:60:66:af:75:3f:75:90:1a:
                    0b:53:29:6d:3c:32:0f:6d:4b:57:68:a8:f9:f1:e5:
                    cb:38:2c:03:75:dc:d8:aa:7b:92:cb:e6:dd:08:6c:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:AA:4C:87:80:E2:42:66:05:9E:9D:B0:1E:69:A4:55:AA:13:9F
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pBWqTIeA4kJmBZ6dsB5ppFWqE58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.42.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:38:1b:ce:94:df:d6:44:63:ec:7c:44:90:1a:23:83:7f:8c:
         37:58:35:ba:89:7f:6a:0b:15:61:3a:66:4b:e0:a4:42:23:25:
         58:85:60:36:bb:b5:2b:7e:82:a0:2a:ce:f4:e6:0e:93:89:65:
         ba:31:1b:a4:f2:3c:7b:57:dc:56:32:42:e1:53:11:32:8a:f6:
         47:d4:10:11:9a:04:f7:da:40:98:78:1d:89:0e:10:b1:cf:58:
         0d:7d:60:f9:cf:60:b0:3c:47:e2:93:c4:5a:dd:91:f6:e3:c8:
         4a:de:a0:56:18:61:84:cd:c6:ae:ec:66:3f:e0:17:be:9f:b5:
         30:06:91:2f:46:ef:a7:10:71:91:25:48:d4:5d:63:12:3b:53:
         d1:a9:00:b7:09:05:90:f7:bc:34:cb:47:65:93:9d:11:b3:63:
         ff:c4:b1:cd:ea:e7:cd:0c:b3:31:b7:4e:21:61:e3:de:63:62:
         4b:98:5a:de:6d:89:37:29:f9:e0:be:ed:14:0a:d1:ff:8d:6c:
         4f:19:79:ac:c4:ac:a0:bd:d7:b0:d6:bd:02:59:46:44:47:77:
         02:f2:95:9c:69:93:a3:0b:f8:fd:0d:c6:1b:f1:2e:1b:9a:21:
         1a:08:22:d5:c1:56:6c:a9:bd:9d:01:98:99:c1:67:8f:6c:e6:
         ee:9f:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:38:34 2025 by rpki-client