This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa
File:                     AWNB5zBgI-e98F5-_HmYlmMwY7k.roa (raw, json)
Hash identifier:          oQXFEVab4Ic9VOB0h0mzPvZYdqB5ZU6kfunBHGZ+AWA=
Subject key identifier:   01:63:41:E7:30:60:23:E7:BD:F0:5E:7E:FC:79:98:96:63:30:63:B9
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       018A7F2603B5A13D91C2A7610030D912B397
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa
Signing time:             Sun 10 Sep 2023 12:51:52 +0000
ROA not before:           Sun 10 Sep 2023 12:51:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39370
IP address blocks:        89.147.3.0/24 maxlen: 24
                          89.147.4.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7f:26:03:b5:a1:3d:91:c2:a7:61:00:30:d9:12:b3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Sep 10 12:51:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=016341e7306023e7bdf05e7efc799896633063b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:13:db:d7:1b:da:c4:2d:fc:16:c0:f6:73:
                    bd:e6:65:9e:03:b3:ea:cc:dd:6d:45:b8:75:1f:de:
                    9b:5c:87:99:3d:9f:90:ea:b0:79:05:e9:55:fe:f1:
                    0c:7e:cd:1f:0d:b7:5e:f2:46:8b:40:36:10:df:c1:
                    0b:87:47:6c:1d:50:09:88:22:38:f6:a0:ad:13:bc:
                    62:60:f7:b9:4e:8b:47:cb:71:73:65:8b:5c:a5:9a:
                    cf:37:04:25:e8:5a:e8:2f:60:86:6b:25:42:e6:1a:
                    f4:dc:5f:42:c6:e2:3b:93:62:7e:66:aa:85:8c:f1:
                    d9:3e:b6:09:41:a1:7f:7d:e6:d2:82:6f:57:61:12:
                    ff:af:53:a3:3f:68:f0:b7:90:94:90:f5:c2:2f:3b:
                    94:80:a5:48:73:fe:97:fb:ff:75:3f:6a:92:84:b5:
                    f2:5c:fc:d6:06:e5:37:4d:67:ce:7e:83:cc:b3:b5:
                    7e:63:fd:49:5a:88:fb:01:ff:25:37:59:4c:9b:ab:
                    b8:0c:60:07:cb:a1:28:d7:1a:65:7f:51:18:6f:65:
                    f6:33:da:8e:3e:89:90:77:8b:a9:25:35:07:73:22:
                    55:c5:88:c3:a9:10:1e:0f:06:03:95:30:db:7a:9c:
                    8b:6e:8b:6f:24:9e:c2:68:8d:6e:70:c6:63:f9:ab:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:41:E7:30:60:23:E7:BD:F0:5E:7E:FC:79:98:96:63:30:63:B9
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.147.3.0-89.147.4.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:5f:05:3c:dd:6a:5e:f0:96:90:f7:c2:c6:15:aa:35:01:
         17:e2:67:80:51:43:91:25:19:ce:ec:a1:11:3d:9f:07:1f:5e:
         f9:14:0d:1a:59:12:3a:5a:c8:21:53:f7:b7:dc:8f:51:1e:f1:
         eb:31:e1:20:ce:32:f4:11:22:69:37:59:6a:72:28:93:e3:db:
         f5:5a:08:43:43:93:6d:71:2d:73:f6:7d:f0:f2:e2:80:5e:1b:
         26:ec:92:29:a5:4b:79:4d:9f:4a:9e:5b:70:e2:ce:0e:03:5d:
         e8:c8:ca:1c:67:e8:7c:16:5c:bd:0e:15:0a:43:e5:36:ea:d9:
         4d:60:82:bf:c2:e6:ab:57:84:f3:fe:9c:26:c5:bb:c6:53:9d:
         46:21:f9:55:e4:39:dd:08:a6:d9:8e:19:07:48:69:8d:71:e2:
         bd:bc:17:ca:c2:93:ac:37:a0:a5:33:f2:b6:0a:ac:ed:87:cc:
         a6:93:04:b1:11:d4:4a:84:02:28:6d:3a:68:6d:a5:0b:7b:58:
         bf:95:a1:92:0a:8f:e4:39:af:b7:ac:5b:e5:33:ed:36:55:d2:
         16:6d:7c:87:6c:27:74:b2:6d:e5:88:6b:d1:29:7e:7d:35:af:
         78:4e:97:b3:58:5c:9e:9b:bd:80:d9:ba:96:73:1c:dc:a8:aa:
         8d:1d:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:45:35 2025 by rpki-client