This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa
File:                     DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa (raw, json)
Hash identifier:          dnqlBH1iavWSoDvJFD/4+jk+c8DQqR4/jL24QDv6VI8=
Subject key identifier:   0C:4B:58:20:8F:B3:21:1D:49:CC:EB:87:89:98:12:9F:CC:78:52:FB
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019B0E5F11F6BD081D2931D8A0C9405C9307
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa
Signing time:             Thu 11 Dec 2025 17:04:30 +0000
ROA not before:           Thu 11 Dec 2025 17:04:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213650
IP address blocks:        2a11:d440::/29 maxlen: 64
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 16:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:5f:11:f6:bd:08:1d:29:31:d8:a0:c9:40:5c:93:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Dec 11 17:04:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0c4b58208fb3211d49cceb878998129fcc7852fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:d3:57:8f:d3:c8:e7:90:66:0b:e5:2c:ae:
                    60:22:e7:99:b4:0a:fb:6d:22:ee:1c:a3:04:d3:9b:
                    0c:2a:b6:94:96:74:88:b4:24:fe:b9:2c:56:69:a6:
                    8e:ec:88:24:d2:87:29:93:26:70:72:c9:af:f8:9d:
                    c2:1f:f2:37:fb:f1:0b:f4:b7:6d:ec:1a:a8:43:ea:
                    d3:be:58:d6:1f:77:9a:12:ff:07:5e:87:64:06:82:
                    ad:b8:75:be:27:33:21:cc:24:cf:d3:52:54:18:3b:
                    87:b1:07:84:f2:e9:8b:61:d7:e3:1b:c7:cb:59:8f:
                    8e:a8:12:6f:0b:10:52:fd:4b:6d:a0:cb:ce:91:2a:
                    17:cf:26:73:90:53:b2:9e:eb:0f:dd:c0:72:a5:bd:
                    a8:a1:94:b2:67:0b:87:ee:6c:d4:0a:5c:19:8e:0c:
                    dd:67:73:95:e7:0e:c9:c9:ef:fb:97:83:61:8b:25:
                    b3:f8:7b:a6:f5:aa:5b:c1:73:d7:9f:3f:9c:36:2e:
                    26:82:51:c5:8a:6b:11:4a:01:7d:ee:8b:84:8b:7a:
                    c3:24:01:71:5a:44:9a:09:2d:f3:d6:e1:bc:27:e0:
                    14:d6:c5:9c:e2:1d:72:a6:24:40:94:1a:c4:4d:66:
                    8a:19:7a:0c:c4:0d:83:a9:b2:a3:de:ce:79:a8:ea:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4B:58:20:8F:B3:21:1D:49:CC:EB:87:89:98:12:9F:CC:78:52:FB
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:d440::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:13:3e:cc:c8:5b:e8:db:b7:d0:df:49:c2:11:9e:b6:40:
         fb:17:26:7f:80:ea:62:47:f9:fb:df:27:4f:20:5b:29:64:c1:
         df:1e:3c:bd:d5:18:77:fa:ca:fe:af:9b:f6:0d:74:9f:cd:7f:
         ad:10:06:16:00:83:ee:05:59:a0:ab:5b:1a:c2:0f:7b:87:ec:
         af:e6:d1:7b:17:79:01:9d:97:69:b0:72:ae:8a:a8:cb:44:27:
         da:e9:54:15:26:28:78:bf:54:86:44:92:6a:3a:e2:ab:3f:d4:
         fe:e6:9a:8b:6e:8b:b0:1c:f6:53:b6:a8:3a:59:ad:24:79:4e:
         3a:5b:18:0e:92:0d:88:69:66:75:1a:59:50:87:7f:e0:e8:63:
         0d:4f:d9:63:81:54:59:45:b2:d4:c1:5e:c2:01:bf:1f:38:8d:
         f5:c8:ea:18:17:00:bb:0f:ab:9b:bd:8a:e6:fc:48:b4:b8:3b:
         18:22:89:cc:a8:d1:e9:81:9b:2a:0e:07:ef:14:f7:86:b7:f7:
         7d:c0:2a:bd:d3:fd:f0:a7:8a:46:e8:11:8e:33:1e:a1:4a:34:
         eb:d2:69:d1:0d:7f:e9:14:d9:55:65:07:65:68:63:bd:b1:a5:
         34:59:38:ae:6f:80:a4:9c:1a:ab:b2:20:bc:02:36:dd:14:40:
         01:d8:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:14:54 2025 by rpki-client