This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZNoMzYowPVGfTqJN2Ltm2H8tRDg.roa
File:                     ZNoMzYowPVGfTqJN2Ltm2H8tRDg.roa (raw, json)
Hash identifier:          z8x8izKbS1jEVFHLQvUV5aFVhSSBIbkZ1MKF6HWJoxQ=
Subject key identifier:   64:DA:0C:CD:8A:30:3D:51:9F:4E:A2:4D:D8:BB:66:D8:7F:2D:44:38
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       018BF297E01C5BC939E2CEC9E416A0E99977
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZNoMzYowPVGfTqJN2Ltm2H8tRDg.roa
Signing time:             Tue 21 Nov 2023 15:55:21 +0000
ROA not before:           Tue 21 Nov 2023 15:55:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6461
IP address blocks:        185.83.150.0/23 maxlen: 24
                          185.83.148.0/23 maxlen: 24
                          94.26.97.0/24 maxlen: 24
                          94.26.103.0/24 maxlen: 24
                          94.26.109.0/24 maxlen: 24
                          104.255.128.0/21 maxlen: 24
                          185.75.80.0/22 maxlen: 24
                          185.49.216.0/22 maxlen: 24
                          153.94.56.0/21 maxlen: 24
                          185.94.78.0/23 maxlen: 24
                          185.94.76.0/23 maxlen: 24
                          94.190.199.0/24 maxlen: 24
                          94.190.198.0/24 maxlen: 24
                          94.190.197.0/24 maxlen: 24
                          94.190.196.0/24 maxlen: 24
                          94.190.196.0/22 maxlen: 24
                          185.9.212.0/22 maxlen: 24
                          45.94.10.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f2:97:e0:1c:5b:c9:39:e2:ce:c9:e4:16:a0:e9:99:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: Nov 21 15:55:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64da0ccd8a303d519f4ea24dd8bb66d87f2d4438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:34:7a:52:18:53:5d:e7:96:6f:72:0f:44:0e:
                    6c:3a:bd:a4:72:d6:34:1e:e6:21:02:4d:c1:9d:92:
                    e2:8b:13:47:26:4b:e9:eb:b0:47:21:20:d1:fb:3a:
                    69:32:38:7e:c9:d3:68:c8:e0:c9:b9:8f:38:28:de:
                    84:ed:b8:16:f3:ae:5c:2f:b0:6d:67:22:25:9a:1b:
                    59:95:2f:ae:5c:03:39:90:30:3c:a9:86:a3:18:91:
                    e8:c6:23:b0:2d:f9:13:5d:fa:5a:1e:1e:44:e0:94:
                    ef:d3:5c:55:24:8c:96:8e:41:36:3c:59:db:cc:3c:
                    04:1b:bc:d4:5d:18:47:44:82:c3:c9:af:f8:5a:bc:
                    1c:0f:68:9c:21:0a:06:50:0d:b8:ee:93:6f:c0:8c:
                    6c:fd:c8:51:23:3a:5b:69:fd:b1:52:1f:b5:9d:ac:
                    c4:1c:30:cb:23:90:40:9e:27:00:34:c1:d9:e0:20:
                    f0:82:e9:0a:6d:99:69:92:ec:62:8f:91:f1:91:9f:
                    7d:a2:6a:f4:5a:60:7a:0d:c8:eb:99:b2:c4:92:8c:
                    b7:f6:ba:91:50:18:54:5e:d7:05:a5:85:93:d0:5c:
                    38:cb:8b:3e:aa:71:96:35:5d:2c:7d:47:12:2b:e5:
                    23:86:6a:af:92:1c:97:ed:88:11:67:82:08:4c:c7:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DA:0C:CD:8A:30:3D:51:9F:4E:A2:4D:D8:BB:66:D8:7F:2D:44:38
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZNoMzYowPVGfTqJN2Ltm2H8tRDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.10.0/24
                  94.26.97.0/24
                  94.26.103.0/24
                  94.26.109.0/24
                  94.190.196.0/22
                  104.255.128.0/21
                  153.94.56.0/21
                  185.9.212.0/22
                  185.49.216.0/22
                  185.75.80.0/22
                  185.83.148.0/22
                  185.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:a7:8d:a9:39:24:3c:24:1c:69:45:8f:67:e8:9c:6b:c5:
         85:86:3c:74:f6:68:6d:7f:ad:b0:d5:30:72:ed:83:3c:cd:08:
         36:4f:19:e9:64:1b:39:61:a5:47:eb:01:fa:8d:6a:85:cb:f3:
         e7:da:b2:e0:6f:5b:c5:2d:98:ec:67:ea:81:55:c3:90:2a:b0:
         56:89:65:98:c6:bf:d8:47:a4:90:52:86:e2:e7:9f:ed:32:4a:
         b8:f0:27:9a:33:c0:a1:1f:3d:ee:bb:8b:09:07:af:f8:80:bf:
         98:c3:35:3f:11:52:7f:f5:46:a9:81:14:3d:d0:7e:06:f0:bd:
         b0:a2:9b:1c:0b:5a:1a:e0:49:5f:ce:ba:01:66:60:25:1f:1d:
         aa:44:07:71:ff:b2:d3:54:c0:12:61:9c:df:de:67:bd:97:3f:
         0e:62:8a:d1:4d:fd:4a:6e:0f:2f:df:7b:0d:2e:b8:c8:58:95:
         8f:61:3d:be:bd:4b:74:c9:2b:26:63:9a:38:bb:89:3b:ee:1d:
         b7:ba:6d:29:ec:c4:9f:40:da:34:4f:4a:d3:60:89:4d:4f:f0:
         f7:aa:e3:95:76:be:39:55:a8:d7:24:76:3e:21:c8:2d:11:c7:
         a5:34:8c:47:d1:41:7f:b5:11:94:8b:a1:fd:96:6e:a2:b8:bb:
         fe:e9:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:09:26 2025 by rpki-client