This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/IhsZSQ_UgJnIOTpDf0ZiDJHHP-o.roa
File:                     IhsZSQ_UgJnIOTpDf0ZiDJHHP-o.roa (raw, json)
Hash identifier:          v7pskeTHIqRENSmy5JaYiV4pO8vVt5eaJgY9a5T88jY=
Subject key identifier:   22:1B:19:49:0F:D4:80:99:C8:39:3A:43:7F:46:62:0C:91:C7:3F:EA
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       0193671C06E01587EFE6D90AEFCE78DFA7A2
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/IhsZSQ_UgJnIOTpDf0ZiDJHHP-o.roa
Signing time:             Tue 26 Nov 2024 06:15:10 +0000
ROA not before:           Tue 26 Nov 2024 06:15:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48309
IP address blocks:        31.25.104.0/22 maxlen: 22
                          31.25.108.0/24 maxlen: 24
                          31.25.109.0/24 maxlen: 24
                          31.25.110.0/23 maxlen: 23
                          37.191.64.0/22 maxlen: 22
                          37.191.68.0/22 maxlen: 22
                          37.191.72.0/22 maxlen: 22
                          37.191.74.0/24 maxlen: 24
                          37.191.76.0/22 maxlen: 22
                          37.191.80.0/21 maxlen: 24
                          37.191.88.0/22 maxlen: 24
                          37.191.92.0/22 maxlen: 24
                          188.136.128.0/24 maxlen: 24
                          188.136.129.0/24 maxlen: 24
                          188.136.130.0/24 maxlen: 24
                          188.136.131.0/24 maxlen: 24
                          188.136.132.0/24 maxlen: 24
                          188.136.133.0/24 maxlen: 24
                          188.136.134.0/24 maxlen: 24
                          188.136.135.0/24 maxlen: 24
                          188.136.140.0/22 maxlen: 24
                          188.136.141.0/24 maxlen: 24
                          188.136.142.0/24 maxlen: 24
                          188.136.143.0/24 maxlen: 24
                          188.136.144.0/22 maxlen: 22
                          188.136.144.0/24 maxlen: 24
                          188.136.145.0/24 maxlen: 24
                          188.136.146.0/24 maxlen: 24
                          188.136.147.0/24 maxlen: 24
                          188.136.149.0/24 maxlen: 24
                          188.136.150.0/24 maxlen: 24
                          188.136.151.0/24 maxlen: 24
                          188.136.152.0/24 maxlen: 24
                          188.136.153.0/24 maxlen: 24
                          188.136.154.0/24 maxlen: 24
                          188.136.155.0/24 maxlen: 24
                          188.136.156.0/24 maxlen: 24
                          188.136.157.0/24 maxlen: 24
                          188.136.158.0/24 maxlen: 24
                          188.136.159.0/24 maxlen: 24
                          188.136.160.0/24 maxlen: 24
                          188.136.161.0/24 maxlen: 24
                          188.136.162.0/24 maxlen: 24
                          188.136.163.0/24 maxlen: 24
                          188.136.164.0/24 maxlen: 24
                          188.136.165.0/24 maxlen: 24
                          188.136.166.0/24 maxlen: 24
                          188.136.167.0/24 maxlen: 24
                          188.136.168.0/24 maxlen: 24
                          188.136.169.0/24 maxlen: 24
                          188.136.170.0/24 maxlen: 24
                          188.136.171.0/24 maxlen: 24
                          188.136.172.0/24 maxlen: 24
                          188.136.173.0/24 maxlen: 24
                          188.136.175.0/24 maxlen: 24
                          188.136.185.0/24 maxlen: 24
                          188.136.187.0/24 maxlen: 24
                          188.136.189.0/24 maxlen: 24
                          188.136.190.0/24 maxlen: 24
                          188.136.191.0/24 maxlen: 24
                          188.136.192.0/23 maxlen: 23
                          188.136.194.0/24 maxlen: 24
                          188.136.196.0/24 maxlen: 24
                          188.136.200.0/24 maxlen: 24
                          188.136.209.0/24 maxlen: 24
                          188.136.210.0/24 maxlen: 24
                          188.136.211.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:1c:06:e0:15:87:ef:e6:d9:0a:ef:ce:78:df:a7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Nov 26 06:15:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=221b19490fd48099c8393a437f46620c91c73fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:ab:a8:df:c8:e0:53:63:9c:e4:71:b0:f8:
                    55:34:35:7c:f1:56:e7:19:99:a7:a5:2c:d5:7f:4a:
                    ab:0d:36:0b:60:b1:12:f7:cc:c3:d5:8d:97:d0:54:
                    3e:35:07:2e:b0:51:1c:28:12:04:d1:e6:8e:b3:ed:
                    7b:f7:24:e4:62:19:f8:ba:da:ae:fc:92:a4:d4:40:
                    2e:be:2a:03:d2:12:3a:78:80:58:12:fa:a1:b8:49:
                    58:9f:6a:31:f5:c9:99:1e:ee:82:cc:e5:4a:f3:b7:
                    31:80:e7:29:a8:d0:02:20:55:ee:d6:58:ac:b9:13:
                    81:b0:76:4d:a8:86:d5:38:a2:ba:87:fe:20:e1:5f:
                    bd:aa:82:7c:05:ac:97:39:c5:f6:f0:4f:4e:b7:8c:
                    ad:46:32:cc:b0:a1:39:9e:8c:3f:12:0b:c9:83:cb:
                    86:d6:7d:06:43:9c:6e:8c:8d:4f:21:ef:68:fb:ad:
                    32:07:4e:d0:ba:da:41:3e:23:38:fe:61:9e:d6:15:
                    22:07:3c:11:18:81:07:5f:4a:b9:4b:4d:17:a4:60:
                    4c:d9:2d:c3:70:48:82:90:fd:33:de:2c:6f:31:bd:
                    0a:0c:f0:0a:a2:0f:a3:4d:42:d2:c5:a7:d3:9a:78:
                    42:0a:ad:ef:9a:b9:97:fe:64:14:0a:5e:57:9c:77:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1B:19:49:0F:D4:80:99:C8:39:3A:43:7F:46:62:0C:91:C7:3F:EA
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/IhsZSQ_UgJnIOTpDf0ZiDJHHP-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.25.104.0/21
                  37.191.64.0/19
                  188.136.128.0/21
                  188.136.140.0-188.136.147.255
                  188.136.149.0-188.136.173.255
                  188.136.175.0/24
                  188.136.185.0/24
                  188.136.187.0/24
                  188.136.189.0-188.136.194.255
                  188.136.196.0/24
                  188.136.200.0/24
                  188.136.209.0-188.136.211.255

    Signature Algorithm: sha256WithRSAEncryption
         23:90:ab:69:e3:b3:40:fc:47:1b:f0:20:a7:f5:dd:c9:83:02:
         d2:72:8a:b7:0e:16:4e:66:86:24:70:b9:f9:63:57:ec:71:5c:
         dc:c3:5b:f2:ee:ea:06:11:51:f7:ac:89:c2:d3:2e:7d:dc:31:
         51:a2:1a:f5:8a:79:29:36:43:28:1f:ce:27:e1:56:75:37:7e:
         1a:cd:dc:7f:31:d2:ac:73:18:9d:3e:96:69:11:46:4b:41:eb:
         f4:36:66:c1:72:29:ed:71:69:4a:6c:ec:29:fb:32:c3:3e:2b:
         35:05:0e:be:b7:33:02:76:e5:9f:d4:b0:64:99:19:75:36:79:
         7e:8b:ff:d6:23:63:36:5f:b5:39:42:2a:9b:57:8f:be:dc:91:
         b5:e4:5e:df:b0:58:c8:ca:b0:a9:fc:b5:de:e2:2d:c6:7c:e2:
         0a:45:23:21:cc:40:6d:f0:a7:67:f5:c6:29:f4:33:d7:27:c2:
         6a:97:f9:79:6a:fa:43:81:97:fa:fa:d0:f2:8b:47:b3:fe:35:
         15:b8:d5:2d:a6:9c:4d:07:9d:84:9f:78:01:c7:d5:53:4c:14:
         f8:d6:a7:8f:0e:01:89:30:66:75:34:af:2f:59:f6:11:b7:67:
         2c:69:a6:33:fc:08:58:a2:64:81:91:8b:c2:1d:d4:e2:dd:fa:
         bf:fd:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:22:11 2025 by rpki-client