This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          80yoC4HOSdDfJKrePu2RrG5oieBa0AnihPNmPJplTuw=
Subject key identifier:   1F:05:CC:E0:71:78:F7:DC:73:90:D7:44:F8:E7:99:C9:95:D0:2F:EB
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       177DC99031E277D7FEAE0B2006DFCE95D765BA98
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
Signing time:             Wed 13 Aug 2025 00:00:21 +0000
ROA not before:           Tue 12 Aug 2025 23:55:21 +0000
ROA not after:            Wed 12 Aug 2026 00:00:21 +0000
asID:                     62240
IP address blocks:        140.150.236.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 15 Aug 2025 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7d:c9:90:31:e2:77:d7:fe:ae:0b:20:06:df:ce:95:d7:65:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Aug 12 23:55:21 2025 GMT
            Not After : Aug 12 00:00:21 2026 GMT
        Subject: CN=1F05CCE07178F7DC7390D744F8E799C995D02FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:df:5a:cc:2c:db:dc:aa:20:48:bd:b7:27:
                    d1:d2:85:51:87:27:59:16:55:eb:ab:19:6b:4d:8a:
                    4b:3c:82:3f:11:5e:04:f2:16:4a:fb:4e:ef:0e:3c:
                    27:9c:75:43:b2:d7:2c:ca:cf:9f:7c:f2:e6:ef:a6:
                    88:ce:f5:2d:5d:14:a6:c8:2d:5d:df:48:b5:aa:fb:
                    72:4f:8f:3a:68:e1:a7:1f:8d:fc:bf:74:f7:3b:10:
                    11:11:09:bc:9c:a4:61:4e:d4:11:03:1e:78:f4:07:
                    f8:66:9b:28:35:5d:dd:57:ff:1e:3f:62:a2:57:4b:
                    ea:d7:82:b8:73:b5:7e:09:a6:14:1f:ce:c6:db:ab:
                    15:b6:22:c0:44:80:4d:ab:1a:bf:42:56:88:41:40:
                    fe:6a:c5:fd:f8:32:49:fe:ab:63:34:c9:66:33:02:
                    34:17:a8:f8:ce:d6:c5:15:6c:cd:75:57:34:3d:1e:
                    d6:17:f4:0e:af:2c:4b:d4:79:0a:3c:4a:82:0b:f7:
                    90:39:e6:13:5d:8b:ad:88:3c:b3:ab:62:76:a8:25:
                    35:8b:90:0d:bb:25:8d:8d:2f:f3:af:d1:8c:2f:61:
                    f6:0e:88:cb:18:59:6e:58:e3:18:b2:b2:c6:92:e9:
                    74:40:e7:20:d9:b3:d7:15:4b:51:1c:60:05:ef:1e:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:05:CC:E0:71:78:F7:DC:73:90:D7:44:F8:E7:99:C9:95:D0:2F:EB
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.150.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:80:f9:eb:87:64:ce:44:3f:a3:3c:91:96:27:ab:40:1d:fb:
         93:17:c8:8f:79:f3:6c:03:e7:08:a3:d4:1c:6e:91:ba:fd:5c:
         d1:86:9a:59:18:5e:79:96:21:be:b1:79:fb:78:b6:d0:88:8d:
         35:fb:0e:41:00:99:9b:a8:b3:e5:24:9b:05:2e:10:45:27:3b:
         60:43:d3:c4:42:3a:81:fb:60:18:36:ee:36:14:ea:ea:be:5d:
         64:f2:7c:0d:69:a8:55:50:27:57:1b:8c:7a:a8:c6:fa:e7:c5:
         c6:bf:89:55:b0:8f:2c:49:b3:66:3e:18:5b:ef:8d:39:65:31:
         77:53:62:c5:a3:39:3a:68:52:72:20:18:b8:1f:b3:d1:89:ef:
         7b:ac:b7:2c:a7:50:ed:0a:f7:9d:7b:77:2c:ee:a6:6c:53:fe:
         2c:ac:1d:d7:42:cb:46:ad:1b:87:1e:e8:cb:1c:3d:50:20:58:
         79:68:74:d9:ef:b4:d9:eb:9b:e3:92:6b:de:25:1c:49:14:47:
         7e:13:90:1c:d8:59:b9:30:73:a8:69:3e:f8:d7:68:da:7d:11:
         e3:b6:03:b1:d8:ef:aa:a7:75:6f:49:c1:ed:fb:5b:45:c7:9d:
         3b:78:f9:26:7a:2c:48:8c:1d:8f:32:c0:fe:04:33:85:d5:98:
         15:0b:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:11:01 2025 by rpki-client