This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa
File:                     3Oz8P6b4aweONPUHcfhDjY82LW4.roa (raw, json)
Hash identifier:          +z9X/U1j5b5IClUjkT36cYWKQB0S/0D/Wcfi+nCLSAE=
Subject key identifier:   DC:EC:FC:3F:A6:F8:6B:07:8E:34:F5:07:71:F8:43:8D:8F:36:2D:6E
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0183EB9632E38E2977D6B6487C170485B26F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa
Signing time:             Tue 18 Oct 2022 14:53:52 +0000
ROA not before:           Tue 18 Oct 2022 14:53:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        194.33.62.0/24 maxlen: 24
                          2a0f:e840::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:eb:96:32:e3:8e:29:77:d6:b6:48:7c:17:04:85:b2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Oct 18 14:53:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcecfc3fa6f86b078e34f50771f8438d8f362d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:65:8c:0c:aa:33:f0:1e:3e:d0:d3:5c:cf:
                    fd:84:8d:b8:fb:c6:d4:24:a4:6e:bf:1e:26:22:fd:
                    52:c6:18:b4:c6:2e:3b:98:f9:7a:4a:a5:33:ec:67:
                    9d:5c:42:56:f0:1e:19:a9:ba:04:92:7f:ad:f3:d4:
                    df:84:d8:fb:4b:34:24:37:0a:ab:aa:2e:fd:4a:aa:
                    c3:5a:df:04:0e:95:26:49:23:d6:8b:29:48:af:30:
                    e9:63:2f:95:95:ce:7a:ea:04:71:02:41:1f:23:d9:
                    9a:0b:b7:86:b3:ac:7a:c4:a9:59:d4:d4:50:a2:78:
                    ee:3d:0a:90:9a:a7:1d:37:9d:cb:8c:08:b2:ec:b9:
                    7f:bd:d7:9e:6a:29:80:70:02:a0:6c:9c:2f:20:b2:
                    8e:6d:25:23:46:d5:a2:a2:b0:6d:b3:d0:c6:7b:7b:
                    37:cc:cc:4d:fd:27:a4:b9:95:16:57:43:37:82:1f:
                    16:61:86:4d:1f:03:83:45:a6:e9:c6:14:34:20:05:
                    4b:14:f7:9d:fd:41:ad:10:71:31:41:d8:20:0e:d6:
                    de:57:14:d2:a4:76:b4:37:e8:50:36:08:25:c1:ba:
                    20:4c:17:c2:5a:1e:a6:59:62:e9:70:40:73:e2:cb:
                    85:24:20:b8:9f:08:5d:51:5e:89:c8:37:f3:99:81:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:FC:3F:A6:F8:6B:07:8E:34:F5:07:71:F8:43:8D:8F:36:2D:6E
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.62.0/24
                IPv6:
                  2a0f:e840::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:bf:b6:12:8c:8b:0d:cc:00:69:88:54:7b:98:fa:4d:09:
         ee:d6:f0:0d:01:5f:37:21:4e:63:b6:80:f3:f3:90:60:1f:d1:
         0f:25:c7:b9:95:28:48:8d:00:b3:3e:56:6c:de:be:58:70:16:
         f0:ea:08:56:ef:71:17:2b:5f:45:16:32:71:ca:df:82:ca:28:
         79:3d:6c:a7:a7:19:d6:7a:18:b6:93:67:65:15:26:ad:9c:a7:
         23:56:c1:c8:e7:d2:f3:d6:d3:34:3e:a9:09:b3:82:19:0f:67:
         c4:98:fd:ee:7f:70:b5:83:d3:6e:48:80:7e:64:40:36:65:90:
         c4:f4:26:16:b6:41:d8:7f:91:b7:37:50:08:2d:4c:ea:a9:81:
         10:7f:46:24:f8:0a:78:01:cc:b9:dc:d2:40:23:ab:03:02:e8:
         10:5d:bd:36:c1:ad:4f:d0:fe:de:5f:c3:34:cc:0c:fb:a3:08:
         72:dc:f0:8c:23:b8:7b:6d:a1:2e:07:3c:48:70:b6:03:a3:9d:
         43:eb:7b:5c:6a:a7:81:f1:8f:85:7f:2c:44:f6:5a:ee:b8:28:
         ce:d3:97:cb:ff:a0:69:d4:9d:38:bf:43:3a:05:cb:82:cd:3c:
         07:6a:3a:60:d1:0d:d7:94:1d:48:f5:0f:ac:1f:0b:fe:9a:e3:
         7e:01:58:6c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYPrljLjjil31rZIfBcEhbJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDE4MTQ1MzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2VjZmMzZmE2Zjg2YjA3OGUzNGY1MDc3MWY4NDM4ZDhmMzYyZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CVljAyqM/AePtDTXM/9hI24+8bU
JKRuvx4mIv1Sxhi0xi47mPl6SqUz7GedXEJW8B4ZqboEkn+t89TfhNj7SzQkNwqr
qi79SqrDWt8EDpUmSSPWiylIrzDpYy+Vlc566gRxAkEfI9maC7eGs6x6xKlZ1NRQ
onjuPQqQmqcdN53LjAiy7Ll/vdeeaimAcAKgbJwvILKObSUjRtWiorBts9DGe3s3
zMxN/SekuZUWV0M3gh8WYYZNHwODRabpxhQ0IAVLFPed/UGtEHExQdggDtbeVxTS
pHa0N+hQNgglwbogTBfCWh6mWWLpcEBz4suFJCC4nwhdUV6JyDfzmYEmPwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNzs/D+m+GsHjjT1B3H4Q42PNi1uMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvM096OFA2YjRhd2VPTlBVSGNmaERqWTgyTFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwiE+MA0E
AgACMAcDBQAqD+hAMA0GCSqGSIb3DQEBCwUAA4IBAQB8SL+2EoyLDcwAaYhUe5j6
TQnu1vANAV83IU5jtoDz85BgH9EPJce5lShIjQCzPlZs3r5YcBbw6ghW73EXK19F
FjJxyt+Cyih5PWynpxnWehi2k2dlFSatnKcjVsHI59Lz1tM0PqkJs4IZD2fEmP3u
f3C1g9NuSIB+ZEA2ZZDE9CYWtkHYf5G3N1AILUzqqYEQf0Yk+Ap4Acy53NJAI6sD
AugQXb02wa1P0P7eX8M0zAz7owhy3PCMI7h7baEuBzxIcLYDo51D63tcaqeB8Y+F
fyxE9lruuCjO05fL/6Bp1J04v0M6BcuCzTwHajpg0Q3XlB1I9Q+sHwv+muN+AVhs
-----END CERTIFICATE-----
Generated at Mon Dec 15 13:21:01 2025 by rpki-client