This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/2D3bjKCCUCHtY2gIYAvImNwKXIk.roa
File:                     2D3bjKCCUCHtY2gIYAvImNwKXIk.roa (raw, json)
Hash identifier:          fynq+uZJ25gwNAP+P5kpX/Kb/THOS5CwpcdZ08PoyVs=
Subject key identifier:   D8:3D:DB:8C:A0:82:50:21:ED:63:68:08:60:0B:C8:98:DC:0A:5C:89
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       0196429BD28506D5B64440AD54E00BE5B286
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/2D3bjKCCUCHtY2gIYAvImNwKXIk.roa
Signing time:             Thu 17 Apr 2025 07:17:10 +0000
ROA not before:           Thu 17 Apr 2025 07:17:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        178.210.248.0/24 maxlen: 24
                          178.210.249.0/24 maxlen: 24
                          178.210.251.0/24 maxlen: 24
                          178.210.254.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Fri 18 Apr 2025 13:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:9b:d2:85:06:d5:b6:44:40:ad:54:e0:0b:e5:b2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Apr 17 07:17:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d83ddb8ca0825021ed636808600bc898dc0a5c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:d0:15:6c:7a:70:4f:5d:72:2e:42:56:69:
                    42:c3:7a:e8:24:42:39:1c:8e:c6:45:b2:0b:a3:91:
                    9c:d9:38:03:ff:2f:4d:9e:7a:a3:13:f5:40:ce:59:
                    f4:cf:d8:39:c1:64:ac:5a:d5:b2:0a:09:3f:e1:1f:
                    db:49:06:7a:d1:e6:28:99:0a:c6:df:96:36:69:26:
                    1d:1b:7c:7f:a0:c7:2d:18:ae:3b:67:6c:a4:66:14:
                    2c:86:c7:89:b7:25:0c:4e:41:60:b2:69:32:af:d9:
                    c3:fd:bc:3f:e1:21:e6:61:26:bf:92:41:47:ce:62:
                    d9:58:07:13:f4:08:bf:7c:96:89:90:a6:2c:04:b4:
                    5b:69:5a:52:75:12:a9:82:fc:9d:9c:9e:2a:67:a1:
                    12:a5:77:b8:57:3c:52:db:06:1b:65:ce:ec:4a:44:
                    87:43:10:35:54:8a:c9:7e:86:7d:d6:ca:63:8d:97:
                    54:66:e5:ae:77:37:05:84:8e:9b:6a:d3:3a:44:51:
                    69:9c:38:3a:19:c4:49:1e:cd:0e:24:a2:58:95:be:
                    a8:3f:e6:d7:41:f2:38:ca:69:05:47:d7:7d:47:ff:
                    d6:a2:49:3f:f9:ae:a4:72:a4:9e:6c:7a:29:b7:2c:
                    f0:83:a7:c8:0c:fe:ac:40:08:4e:71:17:aa:31:3d:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3D:DB:8C:A0:82:50:21:ED:63:68:08:60:0B:C8:98:DC:0A:5C:89
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/2D3bjKCCUCHtY2gIYAvImNwKXIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.210.248.0/23
                  178.210.251.0/24
                  178.210.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:49:b4:70:15:91:33:84:0d:ba:7e:a8:85:5f:49:17:ca:e3:
         d3:c6:22:47:d6:22:98:53:38:23:6a:44:42:49:8d:aa:5c:2f:
         38:a0:33:f2:0f:5a:fa:b0:95:33:90:40:ba:e0:e6:49:b2:cc:
         47:c2:03:27:95:db:fc:50:70:b5:d4:be:ed:d2:18:76:78:f1:
         6e:81:a5:5c:75:20:ae:2b:91:31:1c:0e:ee:5a:2a:d7:a9:70:
         d7:7f:2c:47:64:44:fe:f9:cf:82:d2:7d:71:3e:56:e8:ee:de:
         5b:0e:07:61:44:40:c2:ca:17:72:9e:d1:29:fe:26:4d:3a:a8:
         71:21:61:b5:65:ac:5d:5b:c6:b2:c9:6f:7d:32:42:9d:b9:55:
         b4:4f:d1:cf:88:81:67:47:53:26:69:c2:74:c2:eb:cd:f6:fe:
         1e:b9:46:05:e9:8e:bb:16:25:d8:5a:67:61:f6:01:87:d9:1c:
         ac:9f:76:9e:a8:60:33:35:f5:ac:b4:c8:39:b6:6e:21:51:0c:
         42:92:66:1b:21:c0:49:a5:99:8a:68:01:5b:59:71:a0:4e:02:
         2f:04:5e:71:49:53:8b:1f:89:cb:fd:e9:b5:1b:42:72:8b:43:
         d8:1e:6a:de:e7:3c:a2:a3:7e:6a:97:e5:0e:43:da:2a:f7:bf:
         74:ec:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:29:20 2025 by rpki-client