This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20383334.roa
File:                     39352e3231342e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          gYcWGjiYLu3IERXwpDIxKwHehCqdaQn8R0EzGh20tfU=
Subject key identifier:   74:7D:DD:E8:24:C6:7C:5F:B8:74:CF:7F:DF:07:83:1C:01:4C:8B:A6
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       64E658606D5540AED5A24751910ADF3BF3D9367C
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20383334.roa
Signing time:             Sat 15 Nov 2025 00:06:24 +0000
ROA not before:           Sat 15 Nov 2025 00:01:24 +0000
ROA not after:            Sat 14 Nov 2026 00:06:24 +0000
asID:                     834
IP address blocks:        95.214.177.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 21 Nov 2025 05:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:58:60:6d:55:40:ae:d5:a2:47:51:91:0a:df:3b:f3:d9:36:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Nov 15 00:01:24 2025 GMT
            Not After : Nov 14 00:06:24 2026 GMT
        Subject: CN=747DDDE824C67C5FB874CF7FDF07831C014C8BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:54:24:73:86:7a:a6:02:e3:c4:ca:85:38:
                    70:fe:52:a0:47:32:3c:d3:67:ab:76:ae:4a:2c:c5:
                    36:de:65:81:25:80:50:4c:b9:e1:98:89:d3:1a:2f:
                    3f:c0:86:ce:0c:1c:8d:88:e4:95:2a:4d:b5:05:6b:
                    fa:6d:86:c7:00:f2:75:bd:8a:b7:d3:22:31:38:2d:
                    a6:40:21:ae:e7:ab:63:74:40:4a:66:86:d1:49:a4:
                    10:2f:7a:6f:74:81:5e:a0:ea:98:88:07:73:d2:7f:
                    86:81:99:8f:e5:a9:4c:e2:d4:19:00:06:51:ad:ea:
                    5a:80:9f:a6:31:09:bc:7e:81:fc:23:47:79:ff:5b:
                    1f:77:50:b1:21:c3:74:53:fc:1b:e8:30:0b:5b:bd:
                    e5:a2:59:4d:cf:c5:34:73:93:22:ee:3e:09:22:68:
                    a3:4f:81:a8:42:32:49:a8:4b:dc:c3:84:ff:7f:56:
                    2c:92:4f:a9:ae:60:ec:2a:43:01:40:f7:11:76:ee:
                    57:77:66:98:52:1e:cc:cd:28:35:04:3a:77:bf:c9:
                    54:ef:17:e1:d6:30:a2:1c:15:b9:bc:f1:69:1a:18:
                    6c:5e:87:3b:c4:14:ec:9f:38:95:e5:0a:f0:92:f3:
                    bb:40:eb:49:72:a7:9a:19:d1:64:26:6a:27:7b:09:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:DD:E8:24:C6:7C:5F:B8:74:CF:7F:DF:07:83:1C:01:4C:8B:A6
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:c9:c7:98:5c:8f:c1:be:25:88:90:aa:68:a4:6b:65:2c:
         f5:3f:ec:6a:c7:55:78:35:f6:26:85:00:6b:a8:a4:3a:9a:9f:
         c7:b0:e3:60:3b:89:9e:c7:bb:8b:a0:59:ab:0b:3a:26:60:36:
         e8:c5:34:a6:3e:3b:51:91:22:cc:57:3b:cb:74:49:dd:5a:bc:
         36:55:81:a9:56:da:cc:91:19:1a:fd:39:21:58:fb:c2:95:9c:
         d4:91:1c:70:9e:8b:68:8e:4c:ca:41:ff:1c:17:3d:ba:31:df:
         00:c7:23:51:e3:79:80:aa:3b:46:a7:d1:35:93:f2:d6:8d:2a:
         15:a8:2a:bc:5b:f3:31:d9:1d:55:11:ae:74:92:16:f2:0c:cd:
         4b:4e:e5:85:8d:30:dd:32:97:e9:1f:0e:e1:21:5f:6d:90:a1:
         38:b8:79:75:44:cb:62:c3:de:14:08:5e:ec:63:69:6e:84:c7:
         99:de:f9:e9:86:f2:ab:8e:dc:04:e7:79:71:db:f0:0a:ca:4f:
         4d:76:5c:74:0e:2d:23:44:aa:69:e8:de:d7:97:89:47:6a:22:
         f5:f8:73:0f:c6:fb:c4:b4:cb:4d:80:9e:50:08:56:bd:95:e6:
         c5:d1:55:4b:fe:39:60:b7:3d:3d:f7:39:d6:da:25:37:d4:47:
         f0:0f:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----