This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4uwG8qIfYjJata7XAARa17QIxLY.roa
File:                     4uwG8qIfYjJata7XAARa17QIxLY.roa (raw, json)
Hash identifier:          K7xoEuCWKEw5/UtdnFtluVDWEu7zdED3xVrCTHQst5Y=
Subject key identifier:   E2:EC:06:F2:A2:1F:62:32:5A:B5:AE:D7:00:04:5A:D7:B4:08:C4:B6
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019A1C69BEFC710F7640EBFA2489283432A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4uwG8qIfYjJata7XAARa17QIxLY.roa
Signing time:             Sat 25 Oct 2025 17:28:03 +0000
ROA not before:           Sat 25 Oct 2025 17:28:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16276
IP address blocks:        163.5.53.0/24 maxlen: 24
                          163.5.62.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Nov 2025 14:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:69:be:fc:71:0f:76:40:eb:fa:24:89:28:34:32:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 25 17:28:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e2ec06f2a21f62325ab5aed700045ad7b408c4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:18:09:37:0e:12:e7:f9:72:7f:38:36:74:
                    a4:41:f8:d0:22:cd:32:5e:04:7f:25:ab:b3:41:c8:
                    cf:d1:4d:f1:a5:d2:22:76:bb:05:0b:cc:9f:6a:b8:
                    15:3a:0d:ef:58:07:58:96:c6:2e:13:b9:c4:e6:96:
                    dc:68:75:7b:26:bc:2e:b7:ef:5f:01:2a:a3:d3:bb:
                    03:84:5c:77:30:1d:28:fb:62:27:37:b9:d8:bb:48:
                    6b:92:99:0a:ab:39:8b:9b:9a:72:c9:bc:7c:b4:f9:
                    0f:62:06:4d:cb:34:19:77:c6:79:ae:88:37:b7:c7:
                    b5:28:5e:da:0e:93:14:35:1c:69:f4:f6:76:76:59:
                    09:1d:c4:41:a8:fb:c8:38:ad:8f:6c:42:50:7a:b7:
                    97:a8:50:d0:37:88:60:95:8e:39:cd:a3:de:a1:ef:
                    06:c1:46:42:50:b5:5d:4a:82:20:24:be:15:7d:bb:
                    de:d1:c3:b9:83:61:be:f8:57:8a:93:7d:ce:5d:1b:
                    cf:ba:56:66:44:45:dd:66:18:72:a1:ec:0a:84:e0:
                    9a:2c:4d:4d:0c:81:24:79:e3:cc:1a:1a:f3:b8:6e:
                    2a:54:33:f8:d5:1f:ed:a9:9b:3c:4d:f5:9f:68:34:
                    c6:b5:b4:7c:52:54:3a:2a:35:11:a7:6d:27:73:cc:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EC:06:F2:A2:1F:62:32:5A:B5:AE:D7:00:04:5A:D7:B4:08:C4:B6
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4uwG8qIfYjJata7XAARa17QIxLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.53.0/24
                  163.5.62.0/24
                  163.5.149.0/24
                  163.5.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:3a:a9:4d:2d:dd:97:b9:7d:ab:52:98:6a:a1:58:20:a3:
         d8:d0:da:b7:ab:71:86:f2:ee:ff:a3:ad:9c:99:b3:f3:fa:2c:
         5e:68:bb:d7:bf:28:60:bc:d3:8d:dd:14:3d:30:5a:fb:72:4c:
         9f:6e:d8:b9:42:2f:a4:3c:a8:24:db:b7:10:93:94:9d:81:2f:
         f9:c3:3d:23:a3:83:e6:f0:55:3d:7b:19:ee:44:4d:a0:3c:ec:
         dd:d1:b0:f7:66:2b:78:39:22:3d:45:6e:79:24:54:9f:cc:fb:
         db:ad:58:67:8f:2c:ca:48:c3:92:76:49:99:2e:76:2d:2c:54:
         ad:44:3e:0e:06:37:1a:4a:18:6f:84:39:60:e6:a0:8f:e6:37:
         be:2c:59:02:e3:3f:c6:c5:78:85:48:e8:eb:23:35:8a:65:2d:
         cb:18:e8:33:5f:2a:8b:3d:bf:61:83:38:61:12:dd:86:e6:27:
         d4:06:69:a1:5e:af:60:42:4d:1c:a5:1b:f3:70:2b:35:98:f7:
         4e:1d:45:f6:59:28:0d:7a:60:a4:fc:5a:34:cc:f4:b0:b6:20:
         20:ac:eb:fa:b1:5f:64:45:15:8b:63:b4:38:b6:ba:1d:11:39:
         2e:23:3b:a3:9f:2b:93:d1:0d:80:e8:1a:0c:a2:fd:12:29:d5:
         49:11:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:21:36 2025 by rpki-client