This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/GSK4zrljUpPGF5cm-sXQf38hNUY.roa
File:                     GSK4zrljUpPGF5cm-sXQf38hNUY.roa (raw, json)
Hash identifier:          Tux5Y2INwBVXq3/rywP16jUl/c/XJYuZM/Q/UNSDTYU=
Subject key identifier:   19:22:B8:CE:B9:63:52:93:C6:17:97:26:FA:C5:D0:7F:7F:21:35:46
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       019297565C535C865E47B38F6672A20787A6
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/GSK4zrljUpPGF5cm-sXQf38hNUY.roa
Signing time:             Wed 16 Oct 2024 21:57:52 +0000
ROA not before:           Wed 16 Oct 2024 21:57:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58280
IP address blocks:        45.129.224.0/22 maxlen: 22
                          45.129.224.0/23 maxlen: 23
                          2a0e:5040::/29 maxlen: 29
                          2a0f:fd00::/29 maxlen: 48
                          2a0f:fd03::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:97:56:5c:53:5c:86:5e:47:b3:8f:66:72:a2:07:87:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Oct 16 21:57:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1922b8ceb9635293c6179726fac5d07f7f213546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:fb:6f:21:dc:49:0e:68:ca:a9:cc:b0:32:
                    7c:7e:a0:29:14:76:cd:c8:3d:0a:87:b6:a5:15:0d:
                    71:7e:d0:66:16:07:e9:31:8d:c0:0a:09:ef:6e:ee:
                    7f:0b:de:59:11:c0:b6:74:b7:c6:e7:af:c9:f2:17:
                    95:7d:0e:16:13:99:71:39:b3:4b:c4:ef:b1:74:05:
                    6d:03:51:13:af:da:a0:4a:31:d7:f9:8a:30:88:a5:
                    1e:be:a1:7b:1f:06:f1:a2:44:45:4a:d0:d6:ba:94:
                    70:c4:a6:ba:02:e8:e8:07:85:16:15:0e:23:38:00:
                    90:bc:4a:54:a0:29:b9:24:ca:73:ab:ff:79:39:47:
                    04:a6:d5:29:e6:13:1a:37:a6:fd:e5:50:da:0d:ad:
                    b1:6e:d8:ab:b1:cb:86:52:43:ac:97:be:1c:d9:89:
                    66:92:dd:f3:f4:9a:87:0f:b2:9b:86:ff:ff:26:ee:
                    06:d8:b8:ef:ca:13:76:1f:2d:e4:5e:3a:06:34:6a:
                    9e:7b:8d:d6:b2:09:03:04:11:1e:82:87:52:fe:64:
                    69:b1:f5:cc:85:8f:74:97:65:5e:7e:1c:8c:f8:f6:
                    ef:96:88:85:06:83:76:dd:68:12:34:c4:4f:58:82:
                    5b:60:f4:8c:b8:0b:b4:f4:56:ab:e4:ca:61:38:fc:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:B8:CE:B9:63:52:93:C6:17:97:26:FA:C5:D0:7F:7F:21:35:46
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/GSK4zrljUpPGF5cm-sXQf38hNUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.224.0/22
                IPv6:
                  2a0e:5040::/29
                  2a0f:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:30:e6:11:95:91:bb:0b:7d:41:b5:ef:fd:e1:31:a5:fb:
         1b:63:dd:51:e6:d3:8d:50:b9:ed:ee:72:3c:14:bd:71:59:d5:
         5d:6e:bf:b5:45:10:f8:1c:7e:78:d7:10:fe:d7:53:93:cd:a7:
         86:68:b6:83:53:0b:b7:eb:3e:d2:91:00:4d:e4:64:07:84:49:
         3a:5a:7f:e3:09:ad:61:6c:09:a5:54:f4:31:fb:e3:be:93:8a:
         e4:21:32:0e:3f:5e:b4:40:c5:a3:ea:12:02:ef:0f:a0:06:1b:
         6e:65:9b:2f:be:4d:8d:32:60:04:26:72:92:12:71:80:e6:80:
         0a:23:eb:54:73:44:59:c6:46:5b:a2:2b:98:54:f5:00:0f:32:
         d4:1f:4a:59:ae:91:34:25:e9:bc:1b:ae:de:fa:e5:bd:42:8f:
         8c:8b:70:f2:8a:3e:be:33:43:93:fc:16:a3:dc:81:b9:cd:4e:
         91:11:68:e2:01:56:c1:5c:92:2b:9f:c4:88:2a:29:92:47:95:
         94:73:d9:fd:70:87:c2:13:7c:e4:1e:66:6c:b0:c9:54:92:f8:
         1f:9f:cb:ab:8e:4f:e0:aa:64:d1:9d:0c:b5:94:65:a1:f6:df:
         51:9b:ea:e0:fa:99:69:8e:c1:fd:b3:1e:27:ab:07:dc:ac:6d:
         cf:5a:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:40:53 2025 by rpki-client