This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa
File:                     GHJnqtEnTxub2b1ThPhfMQYmCcU.roa (raw, json)
Hash identifier:          e/FC9dvVcUK9CMnUHfKen63jq/hfF5CRNtnBpZgMeVg=
Subject key identifier:   18:72:67:AA:D1:27:4F:1B:9B:D9:BD:53:84:F8:5F:31:06:26:09:C5
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01961ECA3BFC705C762AD512454DC02979E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa
Signing time:             Thu 10 Apr 2025 08:21:32 +0000
ROA not before:           Thu 10 Apr 2025 08:21:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        62.76.234.0/24 maxlen: 24
                          62.76.239.0/24 maxlen: 24
                          192.124.176.0/24 maxlen: 24
                          192.124.209.0/24 maxlen: 24
                          193.124.22.0/24 maxlen: 24
                          193.124.41.0/24 maxlen: 24
                          193.124.46.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.39.0/24 maxlen: 24
                          194.58.40.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          194.58.66.0/24 maxlen: 24
                          194.58.68.0/24 maxlen: 24
                          194.87.10.0/24 maxlen: 24
                          194.87.17.0/24 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.30.0/24 maxlen: 24
                          194.87.39.0/24 maxlen: 24
                          194.87.47.0/24 maxlen: 24
                          194.87.48.0/24 maxlen: 24
                          194.87.58.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.82.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.108.0/24 maxlen: 24
                          194.87.123.0/24 maxlen: 24
                          194.87.128.0/24 maxlen: 24
                          194.87.178.0/24 maxlen: 24
                          194.87.198.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.87.230.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.245.0/24 maxlen: 24
                          195.133.55.0/24 maxlen: 24
                          195.133.67.0/24 maxlen: 24
                          195.133.83.0/24 maxlen: 24
                          195.133.92.0/24 maxlen: 24
                          212.192.221.0/24 maxlen: 24
                          212.192.223.0/24 maxlen: 24
                          212.193.1.0/24 maxlen: 24
                          212.193.2.0/24 maxlen: 24
                          212.193.6.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 10 Apr 2025 15:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:ca:3b:fc:70:5c:76:2a:d5:12:45:4d:c0:29:79:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 10 08:21:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=187267aad1274f1b9bd9bd5384f85f31062609c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:65:74:19:cd:6e:2e:af:94:ce:f6:ac:6a:
                    8c:6a:04:c9:5c:a9:b6:d1:ad:d0:7a:ae:e4:b8:cb:
                    b7:63:8b:79:77:d7:97:1e:cd:82:8b:0a:84:a6:41:
                    cb:c3:29:45:7b:4e:42:9d:f6:68:7b:23:a5:3a:58:
                    e5:7b:d7:d4:cd:de:40:3b:1b:62:72:43:19:1e:0d:
                    b8:24:a3:76:03:65:d5:09:38:fa:37:dc:1e:2f:8d:
                    85:b9:cf:65:b1:ff:23:79:36:f4:3e:3b:26:91:55:
                    be:21:95:94:70:94:54:de:8b:6e:47:2d:7f:78:f0:
                    c5:ef:82:16:40:89:55:b3:44:e9:87:cd:a7:3e:fe:
                    c6:80:92:e1:47:14:a6:b3:cb:fe:9c:85:db:a3:a6:
                    ca:dc:d5:1b:43:d7:97:93:0f:51:4d:b8:2c:08:84:
                    02:95:41:82:e8:0a:8a:2f:80:6e:6d:6f:e8:4c:25:
                    bf:db:b3:4a:b7:da:d4:f1:91:6b:78:93:ac:98:1f:
                    71:42:f6:4d:5a:3c:1b:e2:ef:d7:bd:67:98:3e:52:
                    1d:85:ef:7d:bb:6c:8b:5d:21:11:69:1c:28:3c:17:
                    c7:33:95:a3:0e:ce:f1:34:74:32:bd:31:c2:d0:65:
                    ab:27:65:08:e4:60:d2:38:89:90:df:cd:bb:0a:78:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:67:AA:D1:27:4F:1B:9B:D9:BD:53:84:F8:5F:31:06:26:09:C5
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.234.0/24
                  62.76.239.0/24
                  192.124.176.0/24
                  192.124.209.0/24
                  193.124.22.0/24
                  193.124.41.0/24
                  193.124.46.0/24
                  194.58.38.0-194.58.40.255
                  194.58.59.0/24
                  194.58.66.0/24
                  194.58.68.0/24
                  194.87.10.0/24
                  194.87.17.0-194.87.18.255
                  194.87.23.0/24
                  194.87.30.0/24
                  194.87.39.0/24
                  194.87.47.0-194.87.48.255
                  194.87.58.0/24
                  194.87.73.0/24
                  194.87.82.0/24
                  194.87.105.0/24
                  194.87.108.0/24
                  194.87.123.0/24
                  194.87.128.0/24
                  194.87.178.0/24
                  194.87.198.0/24
                  194.87.227.0/24
                  194.87.230.0/24
                  194.87.240.0/24
                  194.87.245.0/24
                  195.133.55.0/24
                  195.133.67.0/24
                  195.133.83.0/24
                  195.133.92.0/24
                  212.192.221.0/24
                  212.192.223.0/24
                  212.193.1.0-212.193.2.255
                  212.193.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:a7:5c:3e:57:22:22:a5:46:94:04:bf:c6:d3:3d:c7:d1:
         7e:44:80:a9:06:af:99:11:c1:dd:94:89:2c:32:73:48:3f:ff:
         75:f6:8a:b8:06:65:0e:3a:e2:78:d8:6d:d8:32:a4:51:54:da:
         e0:82:2a:79:e6:2f:8b:40:0f:5d:ef:d3:4f:7b:ad:ea:46:fb:
         9c:45:7f:c1:3c:40:51:ea:e7:81:48:1b:08:1f:8a:e1:de:0d:
         00:32:63:f6:2a:5e:7f:5f:ac:b8:9b:50:6e:e6:b6:a0:e1:96:
         ca:66:6d:c6:68:94:01:59:70:91:d3:f3:13:90:1d:cb:2c:2f:
         5a:c3:7f:d2:ba:b0:89:39:7b:37:e0:2f:11:78:82:86:20:90:
         2e:7b:7e:e8:56:fa:ea:23:c8:d4:ba:0d:29:a0:a8:92:93:50:
         ce:de:a8:66:33:fb:d4:5c:f3:cd:17:6c:69:1f:49:30:8e:db:
         4d:4a:1f:da:19:fc:d1:99:68:83:5f:ff:b7:b9:fc:a8:bb:66:
         41:ee:f0:35:1b:b2:1d:f2:a7:27:0c:ff:2d:ed:8c:c2:af:29:
         51:84:6c:92:57:db:41:f9:17:8d:5a:fd:9f:c8:d1:07:78:86:
         60:67:14:6f:f0:79:55:7a:a5:6b:27:b8:3b:c9:4a:15:a8:73:
         44:26:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:53:56 2025 by rpki-client