This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fg4inc7_Fmynpzp7fwBB_zOJLkQ.roa
File:                     Fg4inc7_Fmynpzp7fwBB_zOJLkQ.roa (raw, json)
Hash identifier:          k48kH/D6UxoRif1iOKHGXHr1vfw7BNY/u2Y6zcP9euA=
Subject key identifier:   16:0E:22:9D:CE:FF:16:6C:A7:A7:3A:7B:7F:00:41:FF:33:89:2E:44
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019AEEB413D250725F875BB2DD3060377244
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fg4inc7_Fmynpzp7fwBB_zOJLkQ.roa
Signing time:             Fri 05 Dec 2025 13:29:30 +0000
ROA not before:           Fri 05 Dec 2025 13:29:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        212.134.16.0/24 maxlen: 24
                          212.134.36.0/24 maxlen: 24
                          212.134.47.0/24 maxlen: 24
                          212.134.56.0/23 maxlen: 24
                          212.134.58.0/24 maxlen: 24
                          212.134.80.0/24 maxlen: 24
                          212.134.81.0/24 maxlen: 24
                          212.134.82.0/24 maxlen: 24
                          212.134.85.0/24 maxlen: 24
                          212.134.87.0/24 maxlen: 24
                          212.134.88.0/24 maxlen: 24
                          212.134.98.0/23 maxlen: 24
                          212.134.104.0/23 maxlen: 24
                          212.134.106.0/23 maxlen: 24
                          212.134.110.0/23 maxlen: 24
                          212.134.128.0/22 maxlen: 24
                          212.134.132.0/22 maxlen: 24
                          212.134.136.0/22 maxlen: 24
                          212.134.140.0/22 maxlen: 24
                          212.134.144.0/22 maxlen: 24
                          212.134.148.0/22 maxlen: 24
                          212.134.148.0/24 maxlen: 24
                          212.134.175.0/24 maxlen: 24
                          212.134.179.0/24 maxlen: 24
                          212.134.188.0/22 maxlen: 24
                          212.134.196.0/22 maxlen: 24
                          212.134.199.0/24 maxlen: 24
                          212.134.212.0/22 maxlen: 24
                          212.134.216.0/22 maxlen: 24
                          212.134.228.0/22 maxlen: 24
                          212.134.232.0/22 maxlen: 24
                          212.134.248.0/22 maxlen: 24
                          212.134.248.0/24 maxlen: 24
                          212.135.24.0/23 maxlen: 24
                          212.135.28.0/23 maxlen: 24
                          212.135.135.0/24 maxlen: 24
                          212.135.161.0/24 maxlen: 24
                          212.135.162.0/24 maxlen: 24
                          212.135.165.0/24 maxlen: 24
                          212.135.166.0/24 maxlen: 24
                          212.135.167.0/24 maxlen: 24
                          212.135.168.0/24 maxlen: 24
                          212.135.169.0/24 maxlen: 24
                          212.135.170.0/24 maxlen: 24
                          212.135.171.0/24 maxlen: 24
                          212.135.172.0/24 maxlen: 24
                          212.135.173.0/24 maxlen: 24
                          212.135.204.0/22 maxlen: 24
                          212.135.240.0/23 maxlen: 24
                          212.135.244.0/23 maxlen: 24
                          212.135.248.0/23 maxlen: 24
                          212.135.252.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Sat 06 Dec 2025 11:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:b4:13:d2:50:72:5f:87:5b:b2:dd:30:60:37:72:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Dec  5 13:29:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=160e229dceff166ca7a73a7b7f0041ff33892e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:6c:eb:e3:a5:80:ce:ea:df:a8:62:21:54:
                    2d:b6:41:65:f1:fb:db:de:66:66:c3:71:03:2f:54:
                    3f:8e:aa:12:72:ab:fa:08:f8:ea:2e:6a:7b:7b:af:
                    cd:19:fb:4d:87:e0:5d:40:fa:c2:38:bb:97:ae:b9:
                    02:08:5f:b9:85:e5:22:50:ed:9f:82:5b:74:2f:a6:
                    ba:6f:73:9a:3a:78:e1:36:72:fb:ed:81:d6:4c:2c:
                    70:03:5f:d5:8f:b8:ba:c7:58:ed:51:85:1d:73:7f:
                    45:59:cd:91:6a:3b:69:d4:23:10:1c:d3:0c:e2:66:
                    5b:b1:74:e7:03:9b:43:75:77:1a:c7:2e:be:c3:79:
                    62:27:b2:7c:93:7f:5a:f8:99:84:3a:36:ad:af:d9:
                    0c:12:64:1c:9f:0a:96:60:11:ce:e7:25:a8:a8:e4:
                    49:2f:3d:a5:80:cb:df:f3:c6:8e:04:c9:87:38:39:
                    fb:99:0c:de:0b:53:31:6e:d4:11:1f:88:e0:ef:e1:
                    b6:9f:d3:65:27:cf:f2:10:31:7b:45:76:28:12:bd:
                    8f:3c:7d:0f:41:88:2b:6e:73:6a:4b:87:20:e3:4e:
                    e5:1e:aa:60:1e:4e:5d:0d:71:50:1e:43:bb:93:07:
                    d5:30:cc:20:f4:a2:d2:5b:cc:04:c5:b2:96:13:ee:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:22:9D:CE:FF:16:6C:A7:A7:3A:7B:7F:00:41:FF:33:89:2E:44
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fg4inc7_Fmynpzp7fwBB_zOJLkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.16.0/24
                  212.134.36.0/24
                  212.134.47.0/24
                  212.134.56.0-212.134.58.255
                  212.134.80.0-212.134.82.255
                  212.134.85.0/24
                  212.134.87.0-212.134.88.255
                  212.134.98.0/23
                  212.134.104.0/22
                  212.134.110.0/23
                  212.134.128.0-212.134.151.255
                  212.134.175.0/24
                  212.134.179.0/24
                  212.134.188.0/22
                  212.134.196.0/22
                  212.134.212.0-212.134.219.255
                  212.134.228.0-212.134.235.255
                  212.134.248.0/22
                  212.135.24.0/23
                  212.135.28.0/23
                  212.135.135.0/24
                  212.135.161.0-212.135.162.255
                  212.135.165.0-212.135.173.255
                  212.135.204.0/22
                  212.135.240.0/23
                  212.135.244.0/23
                  212.135.248.0/23
                  212.135.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:98:b1:c8:1a:6c:aa:8a:f7:05:a1:34:d8:37:d8:57:c7:
         46:27:8e:a4:21:0e:50:97:5f:71:70:fb:28:e9:06:86:49:38:
         b3:e0:87:48:ee:a9:3c:2d:b3:30:40:df:cc:60:f2:28:56:66:
         5c:01:21:84:e8:0f:a8:ff:9d:a9:ee:b9:62:c4:40:d4:55:e2:
         19:3b:59:25:db:5a:db:b8:8d:ed:dc:04:01:b1:c0:10:47:c6:
         ab:6b:02:f7:7d:78:65:16:ef:4e:d3:ab:d4:ef:50:73:51:cf:
         96:0c:5c:3e:08:58:09:84:62:9b:92:3a:52:6b:d1:9c:db:57:
         30:73:d7:1e:f6:c4:ac:94:57:a1:41:2c:1c:7f:70:e1:3e:fd:
         c8:9a:e0:b7:c1:82:05:22:08:fa:8b:50:e9:b5:43:b5:6a:7a:
         6b:3c:f5:9e:8c:4a:4b:4c:b5:2a:a0:dd:3b:ec:cf:73:75:05:
         d9:31:40:39:9f:7f:58:1e:b7:19:30:39:ad:8d:3c:8b:14:9a:
         69:cd:d0:d9:d1:08:15:e1:ac:87:77:77:a6:7d:01:16:09:b1:
         10:86:1e:5b:6d:4f:b5:00:1f:ae:ba:47:24:9f:59:29:62:21:
         26:1c:3e:72:a3:d1:de:be:76:b4:c4:2b:5f:70:f4:f8:b6:04:
         b1:fd:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:36 2025 by rpki-client