This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20383334.roa
File:                     3138352e31332e3232372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          D2fcU0Of9kgSFSLzRvws1Nrf1Ap96I0whgisOgk7EY4=
Subject key identifier:   FB:6F:F3:A6:EF:6A:AD:FF:A6:BA:B9:C4:A1:EE:A6:18:F3:5E:B1:02
Certificate issuer:       /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial:       539C54934471CE6ECE2A9241B08E6D0E22E93F84
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20383334.roa
Signing time:             Tue 14 Oct 2025 14:12:05 +0000
ROA not before:           Tue 14 Oct 2025 14:07:05 +0000
ROA not after:            Tue 13 Oct 2026 14:12:05 +0000
asID:                     834
IP address blocks:        185.13.227.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 14 Oct 2025 18:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:54:93:44:71:ce:6e:ce:2a:92:41:b0:8e:6d:0e:22:e9:3f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
        Validity
            Not Before: Oct 14 14:07:05 2025 GMT
            Not After : Oct 13 14:12:05 2026 GMT
        Subject: CN=FB6FF3A6EF6AADFFA6BAB9C4A1EEA618F35EB102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:6e:05:7b:56:ba:3a:28:93:05:0f:ad:a1:
                    c4:be:47:88:af:49:bd:f8:dc:dd:7e:fb:ba:1c:37:
                    01:35:7b:e8:dc:29:8a:1a:3a:0e:f8:7a:f4:be:be:
                    60:ca:b4:67:bf:91:03:9b:e0:e3:da:ca:26:18:64:
                    97:8e:96:23:91:5c:21:f2:d2:1c:ad:71:c3:c7:88:
                    05:72:18:4f:18:0f:37:03:9d:b9:c1:9c:31:e4:ec:
                    4d:19:1b:2d:77:cd:93:32:6c:32:1f:2c:70:58:17:
                    de:bc:6b:2a:c4:1b:00:13:ad:14:7e:a5:49:b1:0e:
                    79:03:0e:89:02:ec:c4:85:a2:40:30:10:bd:f5:20:
                    2e:4d:3a:ad:2c:6a:14:02:b9:6f:90:15:7a:6b:82:
                    af:02:d7:fa:7f:cf:3c:e1:38:f4:75:8e:7a:04:f8:
                    aa:77:d0:0d:61:cc:2b:e4:16:6f:16:9b:a3:05:1a:
                    cb:4b:b3:ca:89:34:51:20:0f:6e:b7:e7:4b:15:de:
                    51:d5:1b:16:78:9f:d9:e6:56:20:9e:8e:11:d2:b1:
                    aa:fd:5b:25:ad:f0:54:0f:c7:d8:64:00:48:e7:0d:
                    fd:6d:53:2b:ca:f2:ce:db:78:99:eb:d2:50:cd:e6:
                    cb:f0:13:e9:e2:15:c4:40:25:f4:91:e8:fd:53:2a:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:F3:A6:EF:6A:AD:FF:A6:BA:B9:C4:A1:EE:A6:18:F3:5E:B1:02
            X509v3 Authority Key Identifier:
                keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:e8:21:67:e1:49:1e:46:da:96:a8:c3:8a:51:37:1b:f7:
         af:4b:56:c2:af:11:bd:32:1d:e9:ed:30:43:d5:87:9d:ec:04:
         d5:df:f1:ca:8c:4d:a9:e2:2f:f4:69:bd:e4:f3:d9:71:46:fe:
         f8:ec:a9:dd:0d:37:82:b4:a6:d6:4e:3f:88:ec:c0:2f:f4:95:
         77:b8:9f:b7:bf:14:18:ed:83:26:56:b8:8f:3b:f3:ae:6d:9d:
         b2:d5:f1:bb:92:b8:30:ad:c6:24:a3:5f:3e:80:2a:0f:b4:ed:
         68:bc:3e:82:5a:c5:91:8e:29:80:46:fc:d5:e9:84:a9:9a:39:
         7f:8c:55:0e:18:9d:c6:d7:46:d2:1c:a6:2c:bf:c6:c0:df:69:
         59:f0:c9:81:5e:c9:4e:4d:7c:0b:60:9e:4a:14:55:37:37:62:
         a8:91:ea:e4:1a:e4:c0:b7:cb:26:d4:35:24:74:27:8c:30:4a:
         c1:3e:af:6d:1b:0d:e4:8f:5d:d0:ea:35:0c:b1:dd:34:ea:b4:
         d2:18:40:5c:30:0b:6e:27:9a:41:4a:5c:54:62:3c:50:f0:b6:
         65:0c:5f:9e:48:f9:ce:57:1f:39:1a:c5:fd:54:2a:0e:dd:4d:
         29:27:98:89:5e:ed:f2:dd:6e:ac:72:33:da:da:e6:e3:a6:01:
         91:1f:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:35:19 2025 by rpki-client