This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa
File:                     FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa (raw, json)
Hash identifier:          ZPR1ahqFuSLj5WcXUo51Aae6DvHklnjWblb7NeXVe+U=
Subject key identifier:   16:A2:92:48:47:AA:5D:9C:DC:0D:7A:9F:2F:77:50:17:FD:3E:8A:36
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       0199F8915A53576B64BBB5A3DACAF07974AD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa
Signing time:             Sat 18 Oct 2025 18:24:59 +0000
ROA not before:           Sat 18 Oct 2025 18:24:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215460
IP address blocks:        2a14:42c0::/29 maxlen: 29
Validation:               Failed, certificate revoked on Sun 19 Oct 2025 05:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:f8:91:5a:53:57:6b:64:bb:b5:a3:da:ca:f0:79:74:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Oct 18 18:24:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16a2924847aa5d9cdc0d7a9f2f775017fd3e8a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:31:8c:9c:36:83:d8:75:12:ef:80:62:e2:
                    23:1f:2a:c3:cb:65:fb:52:66:84:bd:5d:ee:b0:b0:
                    dc:53:f0:46:93:b5:c0:22:5e:3d:81:b7:e3:da:be:
                    3d:c5:94:21:fd:69:fb:c7:92:ac:b1:ce:e7:fc:7b:
                    44:b9:c2:8f:5d:96:fc:8f:15:62:ad:e1:95:c0:79:
                    e1:99:1f:15:0d:55:8b:71:a5:c9:42:c0:ca:a4:3a:
                    65:82:b3:e1:fc:7f:7d:5f:29:ac:47:e7:7e:2e:cd:
                    53:23:08:58:7a:cd:03:90:93:f2:ab:70:2e:6a:36:
                    bc:1c:3e:af:56:c5:a5:ec:21:fc:40:36:a9:e2:6d:
                    9a:ad:94:d9:70:4d:26:30:b4:56:41:1d:6a:71:f3:
                    53:a6:01:b4:e0:bb:44:2e:fe:7e:49:f9:07:bc:50:
                    b1:dc:34:7f:f4:0f:dd:8d:2e:a8:ab:80:72:95:3f:
                    b8:0a:44:0e:ac:76:b4:aa:9f:9b:47:83:4f:21:74:
                    8b:a0:b6:65:21:d6:cb:f4:62:29:51:9b:2e:b0:99:
                    f0:66:46:3e:b8:9f:29:19:80:e3:73:11:19:46:8f:
                    78:70:b4:4c:12:86:5d:41:28:13:50:6b:32:62:0b:
                    6b:9d:ba:9a:90:e1:76:c5:5c:06:11:44:65:cd:41:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A2:92:48:47:AA:5D:9C:DC:0D:7A:9F:2F:77:50:17:FD:3E:8A:36
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:42c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         d3:1f:da:ca:2a:2c:7e:33:02:dd:0e:d6:06:b4:11:e1:85:90:
         e0:4f:59:86:37:0d:d0:7e:f7:bc:e1:e1:77:dd:ee:f1:53:ea:
         77:e2:7d:db:ed:bf:62:3e:d9:d3:13:ee:1d:35:6b:99:bd:15:
         c2:e5:b8:8f:33:f7:c0:dd:be:73:9b:a0:5b:49:27:ad:a1:fc:
         2c:95:fd:70:6e:aa:1d:9a:7e:f4:85:e9:4e:5d:83:aa:68:88:
         63:b4:25:ab:ee:62:b5:b7:58:ea:b9:f7:58:bf:88:4b:d3:9f:
         2e:ba:6a:e6:fa:9d:d9:a8:93:73:b2:09:d6:93:fe:95:23:0d:
         4c:cb:03:b1:37:ff:03:ec:66:0e:81:c4:de:5a:1c:94:2b:61:
         62:e4:31:1a:c0:52:2b:ee:e6:be:f2:c7:de:a2:8b:87:c4:13:
         f7:86:a0:ce:a6:a9:27:8f:e2:fd:dd:54:a3:9e:53:b2:ae:92:
         fe:8c:e7:4f:c4:d3:ba:a2:51:5d:93:87:74:09:6f:7d:31:fa:
         06:db:de:02:fe:27:b7:0c:0e:e8:8d:78:11:cb:f8:54:b1:2d:
         66:a6:83:66:b8:65:fa:a8:62:6a:77:72:db:d2:05:a9:20:34:
         29:d7:00:88:08:4e:a9:bc:92:b0:3f:db:50:c3:da:08:c8:60:
         40:47:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:08:18 2025 by rpki-client