This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bXKld5nzVfhwWwUF6Y0hSXfQDtY.roa
File:                     bXKld5nzVfhwWwUF6Y0hSXfQDtY.roa (raw, json)
Hash identifier:          34CBgLTiu8wtNdR0Fv6SMOltK/bFk/dpF8szNtxGkIE=
Subject key identifier:   6D:72:A5:77:99:F3:55:F8:70:5B:05:05:E9:8D:21:49:77:D0:0E:D6
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0199281BA83041953A77F754F230F13F5FCA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bXKld5nzVfhwWwUF6Y0hSXfQDtY.roa
Signing time:             Mon 08 Sep 2025 06:55:25 +0000
ROA not before:           Mon 08 Sep 2025 06:55:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215211
IP address blocks:        217.60.247.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 08 Sep 2025 07:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:28:1b:a8:30:41:95:3a:77:f7:54:f2:30:f1:3f:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Sep  8 06:55:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d72a57799f355f8705b0505e98d214977d00ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:77:d6:91:42:e4:a7:5f:6a:7b:45:32:fd:
                    0e:03:bc:86:a3:d0:0c:29:95:2d:44:55:3a:9e:ea:
                    d5:87:44:04:d2:e8:41:b4:4c:e3:a3:b9:c2:4e:c0:
                    87:a0:c7:e8:4f:37:8a:e3:f3:7c:76:03:02:20:cb:
                    a3:6f:fc:bd:c7:14:e1:38:34:fd:62:95:4a:7c:00:
                    87:87:96:70:58:5c:4f:f5:22:3a:a9:0f:65:2f:fb:
                    dc:81:51:f9:7b:73:6b:43:76:9d:46:5e:ff:f1:8a:
                    65:ae:7e:74:54:ce:7a:cf:fd:6f:a3:17:87:1e:ad:
                    f2:99:63:50:33:92:05:b2:9e:33:ee:55:3d:93:a4:
                    05:41:e7:9b:25:02:9a:15:4a:5d:08:4b:0d:f6:b4:
                    46:47:43:b3:26:c5:d0:37:33:38:1d:a9:44:1a:1a:
                    c8:0d:ec:37:df:b0:df:a2:f7:1e:29:ef:b6:24:ff:
                    43:7a:76:34:39:2a:fa:95:6c:6f:20:f4:03:9d:fa:
                    45:4e:49:6e:48:d6:05:68:a9:81:60:d4:9b:3a:95:
                    00:1c:bf:07:42:4a:42:28:d8:d3:3c:b8:ba:0a:c4:
                    18:6a:24:96:e1:a0:8b:1b:c8:89:3f:2d:c8:4b:aa:
                    44:09:f7:dd:35:10:62:e2:69:28:4d:44:22:3b:9c:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:72:A5:77:99:F3:55:F8:70:5B:05:05:E9:8D:21:49:77:D0:0E:D6
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bXKld5nzVfhwWwUF6Y0hSXfQDtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.60.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:54:f8:9d:89:3f:2a:29:48:26:f3:bc:28:41:ba:bf:94:a9:
         85:e8:e5:4a:cd:88:fe:20:61:6e:67:8e:35:96:53:50:2d:d5:
         84:b2:53:53:b7:97:72:ef:d8:f8:37:9d:e1:9c:32:d7:14:b3:
         29:5d:96:15:c6:fe:3f:b1:c2:13:6d:88:ed:61:eb:be:32:9a:
         16:32:fa:ed:d2:b9:4a:51:61:a1:bc:95:27:04:6e:e6:7b:52:
         08:db:b5:44:7a:70:19:63:88:8a:d6:11:85:f4:ef:d0:af:87:
         52:0a:2f:e1:07:24:d2:de:d8:bd:63:42:09:94:f1:ae:36:f0:
         9d:af:ee:16:12:d3:03:15:0b:68:a3:01:60:bc:57:48:41:ec:
         eb:73:ed:ec:29:59:88:ca:81:04:63:be:36:0b:c9:1b:3a:b5:
         70:c5:55:88:83:11:b1:2a:d3:4d:10:84:86:1f:fe:27:71:49:
         71:61:86:5b:48:c6:bd:9d:99:f1:60:8f:c9:60:c9:22:d9:df:
         7b:f2:13:d9:fe:fd:56:28:20:b5:20:2f:d5:12:ba:ce:c1:0d:
         02:29:82:6a:b5:7b:f1:54:db:c7:3a:17:2b:da:d5:67:09:a7:
         cd:3c:c8:68:fb:3d:da:4e:a9:48:22:67:bd:3a:ae:0e:98:8b:
         71:21:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:42:56 2025 by rpki-client