This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/s5aJGLlB9Rql_m8Lveclc5gv3ow.roa
File:                     s5aJGLlB9Rql_m8Lveclc5gv3ow.roa (raw, json)
Hash identifier:          p8NVG45xE+0INyvyTukiUlxzFYQykVvUoZAWTyP0FIU=
Subject key identifier:   B3:96:89:18:B9:41:F5:1A:A5:FE:6F:0B:BD:E7:25:73:98:2F:DE:8C
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       01951D98F15BCCC37D85A499580BAA81B10A
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/s5aJGLlB9Rql_m8Lveclc5gv3ow.roa
Signing time:             Wed 19 Feb 2025 09:45:17 +0000
ROA not before:           Wed 19 Feb 2025 09:45:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202015
IP address blocks:        77.83.199.0/24 maxlen: 24
                          79.141.160.0/23 maxlen: 23
                          79.141.162.0/23 maxlen: 23
                          79.141.172.0/24 maxlen: 24
                          79.141.173.0/24 maxlen: 24
                          91.193.19.0/24 maxlen: 24
                          185.33.84.0/23 maxlen: 23
                          185.33.86.0/23 maxlen: 23
                          193.42.38.0/24 maxlen: 24
                          194.124.229.0/24 maxlen: 24
                          2a01:8640:4::/48 maxlen: 48
                          2a01:8640:5::/48 maxlen: 48
                          2a01:8640:b::/48 maxlen: 48
                          2a01:8640:e::/48 maxlen: 48
                          2a01:8640:1e::/48 maxlen: 48
                          2a01:8640:1f::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 20 Feb 2025 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1d:98:f1:5b:cc:c3:7d:85:a4:99:58:0b:aa:81:b1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Feb 19 09:45:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b3968918b941f51aa5fe6f0bbde72573982fde8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:01:1f:7c:59:90:8b:c5:cc:93:65:6b:65:
                    95:07:34:f1:16:fa:69:53:eb:07:e1:3c:ae:02:23:
                    b4:a3:20:17:c7:c0:a0:f8:83:fb:21:02:c4:2a:00:
                    31:09:eb:d4:1b:e7:af:84:52:10:a6:f2:7e:2f:ea:
                    fa:57:22:25:18:86:7c:a3:b0:6a:bf:7e:ca:f3:3a:
                    5c:ac:56:46:81:ce:ee:34:7f:38:fa:bb:6b:55:a1:
                    17:3e:a0:11:c6:56:83:9a:39:89:dc:39:31:13:2c:
                    d7:4f:ac:10:b2:85:eb:19:53:a2:5c:0d:25:b2:2f:
                    84:cd:de:d7:84:d6:e8:d8:6a:b8:07:85:4e:37:27:
                    ab:dd:07:d2:ef:c7:df:dd:63:b6:e5:72:78:87:29:
                    a5:cb:e3:69:55:ac:77:47:b8:f9:f0:1b:f4:b9:c5:
                    72:bd:d5:c7:fa:52:7c:34:b0:b9:06:77:75:2b:c0:
                    1d:f4:31:84:a1:b5:d1:66:f4:d5:37:23:b2:57:93:
                    c9:d6:7a:e2:4a:91:5b:40:12:ac:3f:20:5a:2b:b5:
                    92:ba:3d:7b:e7:57:39:dd:82:99:54:49:cf:ff:66:
                    61:66:cd:01:b7:f0:bc:3f:b8:47:f1:df:31:a1:95:
                    27:d3:aa:e7:1a:46:38:f9:ec:cc:6d:16:53:90:b9:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:89:18:B9:41:F5:1A:A5:FE:6F:0B:BD:E7:25:73:98:2F:DE:8C
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/s5aJGLlB9Rql_m8Lveclc5gv3ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.199.0/24
                  79.141.160.0/22
                  79.141.172.0/23
                  91.193.19.0/24
                  185.33.84.0/22
                  193.42.38.0/24
                  194.124.229.0/24
                IPv6:
                  2a01:8640:4::/47
                  2a01:8640:b::/48
                  2a01:8640:e::/48
                  2a01:8640:1e::/47

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:0e:5f:20:30:28:12:b0:02:79:c4:28:7c:3d:df:3e:a3:
         ef:54:5a:11:df:a0:a1:f0:02:8e:84:b2:48:a7:ca:44:c4:3f:
         d8:6b:d3:b8:bc:3c:46:55:07:22:13:30:72:c4:ad:17:00:b5:
         eb:df:b6:f5:d8:31:c3:0f:40:99:a5:70:a9:39:52:17:b0:4e:
         48:97:c3:01:85:9b:bd:9f:5e:a0:08:fa:4a:75:f1:d2:d7:7b:
         66:e0:8f:9f:42:c1:ae:25:1c:cd:c0:5e:c5:f2:13:a4:4a:a7:
         8a:be:57:95:05:b6:88:0e:f1:93:5b:aa:ec:e8:22:0f:c4:7c:
         ab:5b:df:3b:df:cd:8d:59:99:8e:40:2d:48:ed:a2:51:d8:4e:
         7b:6e:95:fd:f0:c5:a2:24:df:20:bd:7f:7b:4d:29:fc:63:13:
         47:a8:d5:23:77:5d:f5:3d:e5:df:bf:9b:a2:58:59:c2:78:e6:
         59:5b:55:a3:8e:0f:81:fa:f0:fb:66:d9:25:d0:77:a9:a3:d1:
         67:ae:b1:cf:91:d6:37:e6:1b:22:d2:49:da:a8:9e:ea:2f:8c:
         1b:41:6c:8b:f9:10:eb:1d:24:40:2c:0b:2e:c8:7a:56:81:48:
         6b:fe:40:13:f5:e9:60:1b:5b:48:4d:04:6f:65:43:8d:18:07:
         62:c5:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:09:20 2025 by rpki-client