This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J2W8AyTyrUL0y3klW9h6sK1KLM8.roa
File:                     J2W8AyTyrUL0y3klW9h6sK1KLM8.roa (raw, json)
Hash identifier:          P8gExnwGKEgYdKyhWIw/43NM1imqJULIdjZd2na10GI=
Subject key identifier:   27:65:BC:03:24:F2:AD:42:F4:CB:79:25:5B:D8:7A:B0:AD:4A:2C:CF
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019A49CE8931A7CF8F6D3C2E46FA3A360D65
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J2W8AyTyrUL0y3klW9h6sK1KLM8.roa
Signing time:             Mon 03 Nov 2025 13:01:03 +0000
ROA not before:           Mon 03 Nov 2025 13:01:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212306
IP address blocks:        163.5.179.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 20 Nov 2025 07:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:49:ce:89:31:a7:cf:8f:6d:3c:2e:46:fa:3a:36:0d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Nov  3 13:01:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2765bc0324f2ad42f4cb79255bd87ab0ad4a2ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:fa:07:d7:0a:54:2e:d0:70:f9:05:8b:54:
                    bb:d5:b4:7c:8e:19:ff:af:db:fa:a8:dc:22:c3:41:
                    d5:8b:fe:70:c0:80:40:9a:94:6a:f3:7e:76:40:5c:
                    5e:dc:01:30:40:68:03:41:f2:df:e3:86:8a:48:d9:
                    ee:58:f7:93:a7:4a:da:3f:30:89:b1:eb:4d:ba:04:
                    f7:44:6c:07:cb:72:c6:04:0a:9e:d6:e5:df:c0:56:
                    9e:df:88:5e:7c:2b:a5:ae:24:17:92:b5:55:d9:68:
                    1d:85:f5:a1:a0:8f:35:ff:d8:f7:b5:44:ac:27:9e:
                    ba:86:27:df:de:a0:ce:1a:de:a5:dd:3f:ed:1c:e6:
                    8b:b7:b3:e9:d8:e0:6f:58:ac:6d:40:3f:c3:05:22:
                    c1:fd:4a:b8:3d:a0:1b:a0:fb:84:d7:6d:54:1e:2a:
                    79:20:19:f0:81:fc:95:d6:97:b6:f7:fb:42:8b:bf:
                    aa:10:53:c9:38:76:4f:e7:e7:7c:1f:db:7f:22:68:
                    7c:cb:5c:8c:5a:a8:a9:ed:0a:b4:6c:fa:af:86:46:
                    ac:96:37:d8:45:32:e4:2a:a8:d0:0f:c5:72:fb:c6:
                    a1:00:3b:20:f4:35:d5:8b:31:ba:71:1d:67:c6:b5:
                    bb:47:5d:f3:ab:b6:1b:d4:f7:35:d3:bd:e0:b4:85:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:BC:03:24:F2:AD:42:F4:CB:79:25:5B:D8:7A:B0:AD:4A:2C:CF
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J2W8AyTyrUL0y3klW9h6sK1KLM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:a4:84:0e:5f:91:ee:46:81:4f:31:df:48:13:57:75:bd:
         4a:83:2e:95:98:f9:88:3a:8c:87:a8:9f:a4:89:a0:80:fb:17:
         a1:c2:ea:37:85:ef:4e:59:17:5b:79:6d:cd:8e:c5:ba:d9:af:
         a7:ab:f8:91:1a:4d:7e:47:b0:0d:fd:cc:0c:60:0b:01:36:95:
         dd:21:22:d5:15:e1:b4:13:bf:f1:00:cc:ce:d8:9c:f1:45:57:
         32:28:14:cc:12:fc:f7:87:cb:52:0d:6a:f4:60:0a:99:bd:41:
         e4:de:a8:89:c0:b0:bb:20:0b:12:08:58:51:2d:df:b4:2a:1f:
         f8:ea:93:e6:66:fc:67:df:72:53:15:97:34:e5:dc:78:99:fa:
         50:1c:b9:25:5e:a4:9c:7b:4d:fd:da:fb:9f:fb:80:9f:6d:b7:
         bf:92:9c:d0:dd:70:96:c6:28:cc:c8:9f:87:05:0e:b1:39:7e:
         4f:30:5b:bf:f0:48:70:22:e9:89:61:f8:a8:cc:d2:6d:5b:94:
         8c:b0:dd:a6:7d:25:72:f9:1a:cc:d8:6b:ad:f0:d4:42:24:cb:
         d8:19:b8:43:36:99:46:ff:7e:bd:bb:85:80:1e:32:da:f5:62:
         6b:4a:67:83:b4:4b:5d:c1:dd:96:85:c4:dd:96:15:b5:25:94:
         ca:fd:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:21:35 2025 by rpki-client