This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/boppmzNiAeVV6eF1AVCvD3ujaaY.roa
File:                     boppmzNiAeVV6eF1AVCvD3ujaaY.roa (raw, json)
Hash identifier:          MxXqKWawtxxDugZpaDgJO+pbmg1dpprsTK8O1JTTMLM=
Subject key identifier:   6E:8A:69:9B:33:62:01:E5:55:E9:E1:75:01:50:AF:0F:7B:A3:69:A6
Certificate issuer:       /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial:       019AF19F233B4C9B996665EDD4B076BC43C0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/boppmzNiAeVV6eF1AVCvD3ujaaY.roa
Signing time:             Sat 06 Dec 2025 03:05:29 +0000
ROA not before:           Sat 06 Dec 2025 03:05:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:19a:f19e:4dca/128 maxlen: 128
Validation:               Failed, certificate revoked on Sat 06 Dec 2025 03:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9f:23:3b:4c:9b:99:66:65:ed:d4:b0:76:bc:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
        Validity
            Not Before: Dec  6 03:05:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6e8a699b336201e555e9e1750150af0f7ba369a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:fc:18:92:58:ea:66:48:ec:b8:16:96:b9:
                    7e:93:c9:47:6a:5d:bb:41:54:ba:0c:d5:e3:41:c0:
                    4e:90:35:7d:83:b1:24:f7:40:e7:38:6c:8f:ba:81:
                    8e:10:0e:55:e5:69:3d:16:b5:76:cd:6f:6f:20:0c:
                    d4:0e:86:4f:73:6b:29:02:c5:5b:c1:13:c9:59:ff:
                    e7:bf:fd:e0:e3:68:7d:52:71:5e:7c:09:cb:5c:ab:
                    6d:de:a9:72:e9:19:81:90:4b:b3:6d:b5:18:05:7c:
                    86:8f:f5:ce:fb:40:b5:a3:12:2f:19:66:f2:b4:a0:
                    7c:df:80:f4:ff:0e:4d:9f:b1:da:13:d6:7e:69:54:
                    88:68:a8:30:84:ca:df:29:89:d3:0d:26:11:1f:bc:
                    db:2f:f4:b0:fb:45:84:9d:57:26:1b:ac:bb:58:68:
                    60:e6:ae:6d:d1:03:35:50:78:53:9b:29:50:f1:b5:
                    ea:0d:0b:c5:81:3d:61:e2:28:35:69:71:8e:29:2b:
                    29:8b:ec:b4:8a:e3:8e:eb:7b:9b:76:87:a3:af:d0:
                    f5:b0:bd:d7:2e:59:9a:96:ae:6b:0d:98:9b:b9:b9:
                    b0:ea:49:5d:0d:0f:4f:2e:e8:e9:5e:2e:fc:c2:37:
                    01:cf:f6:ec:f2:75:4f:8e:d9:c7:99:47:c7:a9:41:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:69:9B:33:62:01:E5:55:E9:E1:75:01:50:AF:0F:7B:A3:69:A6
            X509v3 Authority Key Identifier:
                keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/boppmzNiAeVV6eF1AVCvD3ujaaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:19a:f19e:4dca/128

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:17:de:a6:81:ac:99:00:9c:20:34:97:9c:1c:da:90:49:
         4a:40:ed:96:a7:86:7f:f5:0b:79:b5:17:39:51:c0:42:d4:8f:
         8e:fd:10:70:52:2b:cf:ca:8e:e4:ef:11:9e:0a:eb:9f:b7:46:
         5d:25:40:d9:1f:45:c6:a2:73:03:ed:f2:71:c3:4a:5e:c5:86:
         23:c6:40:73:ff:9d:3f:73:76:b2:3d:21:93:60:0d:8c:b0:1b:
         d8:31:78:4e:a3:75:72:c3:c0:f3:48:b0:e4:f5:83:eb:ae:31:
         31:d5:04:e0:8e:53:ab:43:c3:e8:b5:fa:05:32:46:cf:61:0e:
         63:ac:e2:4f:21:94:e0:ea:8e:37:54:0d:1b:63:db:5c:66:e7:
         84:7f:4f:13:4b:71:e2:43:e4:25:83:ee:d6:14:da:88:3b:92:
         26:8e:23:95:be:db:64:4b:2e:29:5b:e0:ac:a4:c4:15:94:a8:
         33:c2:c8:6b:b7:8d:88:f6:a5:6c:ba:84:c5:5b:8a:78:00:bc:
         f5:5f:43:e2:59:7d:1f:13:2c:bf:e1:bb:c3:01:5b:c6:bf:91:
         62:91:58:7c:73:4f:dd:40:05:73:61:e8:cb:1f:6e:12:16:92:
         6c:3b:a0:28:ed:5a:ee:fa:69:b7:d0:ef:e0:59:e4:a8:4f:4a:
         8e:3e:39:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:17 2025 by rpki-client