This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LlU10lACgkC6R7pK-4xiAOmCI6g.roa
File:                     LlU10lACgkC6R7pK-4xiAOmCI6g.roa (raw, json)
Hash identifier:          u+t03+jZGB6LEsMSyBZ/D+uXK5Thka9WnyLDjBEOXbA=
Subject key identifier:   2E:55:35:D2:50:02:82:40:BA:47:BA:4A:FB:8C:62:00:E9:82:23:A8
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019BE9F0CE1107E6AC99552249827E3FBAFF
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LlU10lACgkC6R7pK-4xiAOmCI6g.roa
Signing time:             Fri 23 Jan 2026 08:20:31 +0000
ROA not before:           Fri 23 Jan 2026 08:20:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        144.56.8.0/24 maxlen: 24
                          144.56.10.0/24 maxlen: 24
                          144.56.11.0/24 maxlen: 24
                          144.56.18.0/24 maxlen: 24
                          144.56.19.0/24 maxlen: 24
                          144.56.25.0/24 maxlen: 24
                          144.56.26.0/24 maxlen: 24
                          144.56.30.0/24 maxlen: 24
                          144.56.54.0/24 maxlen: 24
                          144.56.74.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 Jan 2026 13:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:f0:ce:11:07:e6:ac:99:55:22:49:82:7e:3f:ba:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Jan 23 08:20:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e5535d250028240ba47ba4afb8c6200e98223a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:58:25:9c:b4:6a:90:a9:16:a8:cf:ba:81:
                    30:c2:69:69:62:bb:0c:b4:d3:19:29:96:94:5f:fd:
                    0f:0e:5c:2a:3f:14:de:6c:d1:d0:1a:06:25:98:db:
                    63:8a:cc:ae:5a:1d:b4:f8:27:fd:1c:16:68:88:d8:
                    41:f0:68:00:1a:ab:39:22:2b:68:59:2f:04:fd:b4:
                    bd:d0:b2:a4:ee:40:93:b5:8c:ca:61:7a:35:7f:5f:
                    d7:42:b5:93:69:9a:5d:92:1d:0b:b9:ae:7e:03:aa:
                    e2:cf:15:cc:35:31:2c:7b:ad:71:c4:60:cf:20:fc:
                    ab:5e:14:43:b9:b8:da:9e:98:f0:60:8a:db:08:8b:
                    d4:2c:14:f8:94:37:eb:b2:5e:40:a6:70:c4:c6:83:
                    74:4d:24:05:2e:a3:ac:89:29:f2:92:09:e9:29:59:
                    03:a4:54:74:fb:30:60:91:7e:c7:ec:ae:5c:70:f1:
                    0e:8a:4d:89:ce:b2:16:63:2e:fd:4d:29:80:2a:ca:
                    fd:e9:2f:78:36:9b:c8:e4:c6:15:24:8e:ae:74:d1:
                    a0:dc:2d:52:ff:76:c4:b6:0d:9f:2c:6d:fe:a8:ed:
                    4a:44:f3:14:b3:c0:40:46:ec:bc:3e:6d:bd:83:c1:
                    e8:7c:58:f1:ee:9b:42:3f:ed:98:87:73:db:db:62:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:35:D2:50:02:82:40:BA:47:BA:4A:FB:8C:62:00:E9:82:23:A8
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LlU10lACgkC6R7pK-4xiAOmCI6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.56.8.0/24
                  144.56.10.0/23
                  144.56.18.0/23
                  144.56.25.0-144.56.26.255
                  144.56.30.0/24
                  144.56.54.0/24
                  144.56.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:bd:90:7f:8d:67:dd:96:fb:7a:f1:10:28:b6:ad:09:70:
         6e:e7:8e:e1:b3:a7:06:ef:ba:8e:f9:c8:d0:14:da:f0:75:a2:
         81:3f:26:3c:d7:9f:d2:e7:00:03:1d:2b:d4:cb:d0:6e:89:a0:
         e3:f4:05:1f:a8:a0:14:5e:11:ce:ef:bf:ea:9e:4d:07:40:a9:
         44:9e:5d:24:63:28:e1:99:eb:8b:da:ac:f5:8d:29:d3:62:4f:
         6b:e1:4e:6e:86:4c:82:42:13:aa:9e:18:32:4d:62:4e:6b:52:
         a1:41:8b:db:f4:45:81:6c:1a:13:0b:30:27:8c:6e:01:75:32:
         ba:b3:21:b2:b9:01:d8:22:30:72:b9:d5:1b:79:9f:9e:b2:0b:
         00:7c:b2:0e:4c:a1:e9:2c:f9:d7:21:06:4b:aa:18:7a:76:e9:
         b6:0a:25:b5:e2:ed:23:69:64:20:fa:b1:88:68:c8:36:a4:31:
         33:07:c8:69:4d:e2:e6:06:b1:d1:69:24:da:2d:2d:45:d7:50:
         53:53:26:98:6a:df:f7:ae:ef:81:de:11:99:ee:11:85:d7:97:
         e3:41:e1:95:44:95:9e:5e:87:11:f1:ca:75:9e:e6:34:d8:2b:
         be:b0:db:20:9e:e8:bf:cf:55:5f:7f:e5:13:07:62:d5:9d:51:
         1f:5b:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:57 2026 by rpki-client