This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yD5QD9udyhYcGitBh7EBR7L7e70.roa
File:                     yD5QD9udyhYcGitBh7EBR7L7e70.roa (raw, json)
Hash identifier:          4XUurNe3CekBJYhwX8FV2gf430UUzRYG+lomuBgvc5Y=
Subject key identifier:   C8:3E:50:0F:DB:9D:CA:16:1C:1A:2B:41:87:B1:01:47:B2:FB:7B:BD
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01969A6E6DBFEB8E07077B50705BCBB6A1D5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yD5QD9udyhYcGitBh7EBR7L7e70.roa
Signing time:             Sun 04 May 2025 08:34:10 +0000
ROA not before:           Sun 04 May 2025 08:34:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20326
IP address blocks:        212.193.9.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 04 May 2025 08:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9a:6e:6d:bf:eb:8e:07:07:7b:50:70:5b:cb:b6:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May  4 08:34:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c83e500fdb9dca161c1a2b4187b10147b2fb7bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:59:02:fa:24:38:8b:48:7d:fc:68:13:c0:
                    63:ff:ea:e0:eb:3d:08:2e:cc:97:69:be:13:f7:9a:
                    dc:94:26:84:76:ab:99:57:94:3b:a4:c3:13:d5:a2:
                    61:58:d0:e3:ef:80:da:25:ff:1e:4d:6c:bc:c3:09:
                    93:04:57:a9:c8:6d:72:6f:1b:fb:b9:a7:bb:ed:14:
                    3b:2e:bf:06:94:d3:d7:d3:38:b7:42:29:06:ba:e3:
                    ea:05:94:21:3c:86:75:e2:83:f7:06:82:88:a1:94:
                    42:ed:3f:d7:42:3b:f5:f6:03:3b:ad:d2:72:25:1c:
                    71:0b:f8:d5:24:8c:48:eb:92:88:27:34:a4:03:01:
                    0c:b7:c9:d9:a2:f0:8a:2e:48:f5:3f:00:a4:b6:0e:
                    c8:61:97:bf:e5:3b:b6:4d:3a:2d:73:ce:34:2d:35:
                    c6:db:d9:fb:9d:58:8a:e1:e3:47:17:23:0d:48:f4:
                    74:fb:ff:ac:9c:66:b1:72:2f:6c:2e:f5:92:c2:92:
                    fa:68:e4:68:30:c1:5c:9f:26:1b:20:2e:71:4a:3a:
                    ad:76:c1:9f:45:8d:ac:be:2b:4c:a9:19:6b:d5:63:
                    89:1c:58:b6:a2:c4:6a:48:49:53:ca:22:c1:3d:4b:
                    b1:6c:19:6d:75:d6:59:8b:98:75:fe:ff:59:a6:ec:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:50:0F:DB:9D:CA:16:1C:1A:2B:41:87:B1:01:47:B2:FB:7B:BD
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yD5QD9udyhYcGitBh7EBR7L7e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.193.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:51:6e:46:5d:be:dc:f6:48:5f:43:a9:65:79:4f:04:4a:
         ff:ef:a8:85:a1:59:f7:2c:30:a3:79:9c:24:04:5b:8e:58:24:
         2e:c5:e3:64:fb:dc:13:54:7a:59:d9:36:9d:1d:09:2c:81:45:
         cd:9f:5c:23:20:ed:90:ac:b2:25:4b:04:ab:41:91:fd:f4:2d:
         d6:e9:e9:46:bb:ab:14:be:ce:d6:64:db:5b:16:e9:a6:23:85:
         76:0a:69:5e:17:30:bf:2a:15:0c:f5:40:25:7b:2d:77:c3:01:
         5d:39:11:61:49:68:9b:15:af:6c:fc:30:c0:dd:02:8f:93:87:
         c5:50:70:5e:08:46:89:1b:e3:98:a7:40:ea:12:0e:3e:b3:94:
         e1:cb:e5:72:47:bc:21:1e:ac:80:a7:45:e3:13:3a:0e:c3:f3:
         0f:8f:71:ed:ac:8a:7d:a4:0b:f8:ae:ea:7c:9e:7c:a7:32:eb:
         18:49:28:36:94:83:79:32:12:86:72:0a:16:21:05:e7:76:72:
         08:39:22:a8:9a:ee:25:95:00:bd:0e:e8:55:8a:dc:9a:23:e4:
         d8:2a:3f:34:b7:76:51:17:49:bc:59:5b:83:bf:52:7d:ae:13:
         31:c2:6a:40:3d:b5:c2:ec:4f:7e:bd:5a:46:e5:90:9e:08:39:
         cb:31:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:02:46 2025 by rpki-client