This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kL9VyJElgcECWCq7IMp19tlwxDI.roa
File:                     kL9VyJElgcECWCq7IMp19tlwxDI.roa (raw, json)
Hash identifier:          Q609eh6gENhU2OCqZvTseyLx1VAQ9oErPnirDzR8p6o=
Subject key identifier:   90:BF:55:C8:91:25:81:C1:02:58:2A:BB:20:CA:75:F6:D9:70:C4:32
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01968CFA38503D09A7C108373A9B213BB08C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kL9VyJElgcECWCq7IMp19tlwxDI.roa
Signing time:             Thu 01 May 2025 17:52:10 +0000
ROA not before:           Thu 01 May 2025 17:52:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        193.124.7.0/24 maxlen: 24
                          194.58.36.0/24 maxlen: 24
                          194.58.155.0/24 maxlen: 24
                          194.58.223.0/24 maxlen: 24
                          194.87.53.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.126.0/24 maxlen: 24
                          194.87.169.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          195.133.9.0/24 maxlen: 24
                          195.133.24.0/23 maxlen: 23
                          195.133.40.0/23 maxlen: 23
                          195.133.50.0/23 maxlen: 23
                          195.133.92.0/23 maxlen: 23
                          212.192.241.0/24 maxlen: 24
                          212.193.26.0/23 maxlen: 23
                          2a01:57c0::/29 maxlen: 29
                          2a0c:ff40::/29 maxlen: 29
Validation:               Failed, certificate revoked on Fri 02 May 2025 05:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:fa:38:50:3d:09:a7:c1:08:37:3a:9b:21:3b:b0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May  1 17:52:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=90bf55c8912581c102582abb20ca75f6d970c432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:17:14:ac:b9:be:28:16:fe:45:8a:e9:32:
                    a3:fc:3e:48:fe:7c:d5:3d:b7:5f:b6:b7:6a:37:fb:
                    c2:12:22:5f:c0:06:7a:1b:ae:b6:97:84:5e:4d:0f:
                    7e:60:93:c9:ed:c4:e3:7a:8f:e8:ff:b5:e2:6d:00:
                    c3:c7:6d:4d:75:0b:b3:ba:83:33:9c:16:ba:a7:cc:
                    d4:b1:ab:52:6f:51:35:d7:c2:a6:33:c5:5a:76:8b:
                    5f:5e:d0:26:19:4d:cc:3c:4d:66:ef:ca:cf:d5:77:
                    26:11:38:1c:c7:2d:e9:c0:b1:b5:93:7a:46:fd:d8:
                    5c:c2:a7:0a:77:c9:a2:f5:77:5f:b1:4c:d0:77:7e:
                    8f:8e:f3:49:fb:2e:8f:6f:33:5a:61:1c:1c:76:ca:
                    95:fb:91:ef:92:39:97:bc:1e:80:16:6b:2d:a2:17:
                    51:f2:d0:27:ad:f2:e1:22:52:69:00:10:ac:9c:68:
                    d8:61:5d:96:f1:f7:e4:87:8e:c6:a8:1d:df:50:75:
                    f6:63:f7:8e:9a:52:08:d0:8a:78:9c:c0:d2:aa:2e:
                    ea:5b:a4:5d:b7:d4:6f:03:8d:15:0a:fa:8b:cf:e5:
                    e7:8e:c5:16:dc:f7:ed:ee:b5:81:3e:ee:18:df:2f:
                    c5:3f:de:9f:13:de:a3:c0:00:3b:37:a8:90:57:2a:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:55:C8:91:25:81:C1:02:58:2A:BB:20:CA:75:F6:D9:70:C4:32
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kL9VyJElgcECWCq7IMp19tlwxDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.7.0/24
                  194.58.36.0/24
                  194.58.155.0/24
                  194.58.223.0/24
                  194.87.53.0/24
                  194.87.119.0/24
                  194.87.126.0/24
                  194.87.169.0/24
                  194.87.179.0/24
                  195.133.9.0/24
                  195.133.24.0/23
                  195.133.40.0/23
                  195.133.50.0/23
                  195.133.92.0/23
                  212.192.241.0/24
                  212.193.26.0/23
                IPv6:
                  2a01:57c0::/29
                  2a0c:ff40::/29

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:06:05:bf:b1:8a:9e:7e:c8:89:c9:f9:3c:3c:58:b1:06:
         d0:a7:10:e0:6b:09:4d:d5:38:61:51:d6:3f:b7:61:d3:ab:7a:
         eb:64:cd:ec:00:5f:b3:6f:13:f7:43:3f:cd:b4:a1:4c:f9:e5:
         b3:59:64:57:34:72:93:3d:18:07:14:46:b5:b4:64:8b:7d:7b:
         d5:3d:f7:1e:be:04:a8:bc:6f:1b:9b:e9:60:e8:ea:90:06:b4:
         12:76:a8:82:9a:4b:ea:cc:db:78:4f:78:4a:71:95:48:28:ac:
         69:c8:9f:c2:fc:9a:8a:7e:a9:c5:86:03:23:16:ad:cb:ab:8d:
         c7:ac:fb:9a:e1:f6:76:ae:13:8a:f8:15:8f:d1:6f:86:3c:1e:
         b5:56:b6:72:3d:a7:c2:a2:c3:3c:29:7a:96:32:c4:a0:61:22:
         b8:44:ae:d5:6d:40:f1:d2:90:c0:7b:e8:d7:08:b3:7a:38:c6:
         e9:af:c7:dc:b9:32:61:60:fe:88:8f:8b:27:cb:56:e8:58:e3:
         04:d8:c2:e6:1a:2f:02:36:fc:aa:15:be:20:78:01:9b:52:50:
         2d:03:b6:21:fd:2a:9d:31:0c:cf:5d:f4:2b:2b:4d:0d:64:ea:
         be:a2:4c:ad:4d:eb:dd:a2:19:a3:84:3c:2c:a8:88:f9:c8:3c:
         21:72:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:39:48 2025 by rpki-client