This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/85jx7HzTQny-Cq9HbNSxBtGkEcw.roa
File:                     85jx7HzTQny-Cq9HbNSxBtGkEcw.roa (raw, json)
Hash identifier:          meUgx8GD2/H8H+XbQ+J5kP5gXM2n+xffZtk+iX7b4gg=
Subject key identifier:   F3:98:F1:EC:7C:D3:42:7C:BE:0A:AF:47:6C:D4:B1:06:D1:A4:11:CC
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01969A369732224BCA25FBEC6BAE10D80FB9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/85jx7HzTQny-Cq9HbNSxBtGkEcw.roa
Signing time:             Sun 04 May 2025 07:33:10 +0000
ROA not before:           Sun 04 May 2025 07:33:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136501
IP address blocks:        217.60.0.0/21 maxlen: 24
                          217.60.12.0/22 maxlen: 24
                          217.60.24.0/22 maxlen: 24
                          217.60.36.0/22 maxlen: 24
                          217.60.44.0/22 maxlen: 24
                          217.60.60.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Sun 04 May 2025 07:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9a:36:97:32:22:4b:ca:25:fb:ec:6b:ae:10:d8:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: May  4 07:33:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f398f1ec7cd3427cbe0aaf476cd4b106d1a411cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:01:1a:d1:39:ea:d5:60:d5:d4:6d:57:af:
                    57:0f:10:43:9b:f1:ed:f0:78:d6:03:3c:3a:57:1f:
                    31:79:ee:07:d5:f3:09:98:c0:a8:c9:80:32:d4:75:
                    48:d9:42:b4:6f:ac:d0:c5:c6:11:e6:e3:6f:cc:49:
                    96:3c:a1:ee:24:11:44:67:ac:96:8b:ed:ea:0e:5d:
                    f4:a9:77:b2:00:a3:38:b0:34:e9:93:14:a0:6f:c5:
                    c9:7a:c7:c2:0d:f5:f2:dd:45:cc:64:3f:c1:38:cb:
                    93:f8:6c:d9:32:ae:d1:3f:14:68:a5:81:c4:17:01:
                    81:db:bc:69:52:89:cc:8c:71:d4:18:94:bd:c4:fc:
                    21:90:3c:20:1e:7d:71:d8:38:3e:c5:23:7c:40:51:
                    03:6d:8a:91:ce:56:53:90:02:d3:e0:5d:93:43:d5:
                    b0:9a:4e:51:40:54:4c:b3:92:fa:73:04:4c:6b:7c:
                    1d:2e:31:5a:fc:5b:0c:59:aa:2f:5a:60:0d:e3:06:
                    ba:ae:c1:f5:49:ed:fa:1b:e6:a2:da:2f:6c:46:ee:
                    3b:35:11:71:80:fb:25:f3:ac:2a:72:22:98:8a:8b:
                    e5:bd:32:85:a9:d7:a7:d9:22:79:a1:78:37:3c:c8:
                    65:10:9e:65:ce:a1:76:23:65:03:38:3d:55:ff:d0:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:F1:EC:7C:D3:42:7C:BE:0A:AF:47:6C:D4:B1:06:D1:A4:11:CC
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/85jx7HzTQny-Cq9HbNSxBtGkEcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.60.0.0/21
                  217.60.12.0/22
                  217.60.24.0/22
                  217.60.36.0/22
                  217.60.44.0/22
                  217.60.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:04:0f:df:63:4e:5d:58:1b:e8:5c:d8:50:4e:12:6b:aa:1c:
         42:d2:34:2a:50:98:9e:40:d7:55:25:09:b9:f3:de:a6:00:7d:
         f9:e6:d4:4c:9d:e6:e0:93:a4:8c:93:d2:9e:fb:c1:e1:c9:29:
         1e:00:83:4f:aa:89:a4:b9:69:88:63:2b:ca:cd:ef:eb:a4:0d:
         24:84:79:a2:90:58:a9:7c:bd:6e:91:2b:d9:7c:06:7a:7d:b5:
         bf:25:ea:e3:be:1e:34:22:25:ce:1c:ba:4f:6e:42:f5:08:fe:
         c4:f8:48:b3:91:56:1d:86:16:b2:6f:e8:cd:b3:80:d2:72:08:
         19:b4:c8:a7:7f:ec:af:de:48:b4:ae:9e:cb:1c:3a:31:9b:94:
         0c:9e:1c:f7:e8:71:e4:72:59:34:25:23:97:17:39:9f:d7:62:
         31:5e:6a:b3:9f:40:a7:b4:18:2b:77:6f:ab:5f:84:8e:c4:88:
         88:0b:4b:1d:56:3e:ea:03:29:07:4e:15:9c:d5:51:b9:25:00:
         8d:17:f2:df:f2:a0:6b:ee:e8:06:b8:10:62:40:36:25:13:83:
         dc:f9:30:8e:11:3c:de:aa:22:08:86:18:f9:a4:ec:a3:8c:10:
         c2:6f:5b:f5:11:8c:8a:fb:e9:f7:92:03:da:f0:f7:17:3f:aa:
         70:78:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:15:04 2025 by rpki-client