This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/VyXrqLxhT_DZiUZ5bJYg60WDiJ8.roa
File:                     VyXrqLxhT_DZiUZ5bJYg60WDiJ8.roa (raw, json)
Hash identifier:          0YxyhJbK5xfBoBHLqEX8doLySG5k+m0fpiJ189n8Oyk=
Subject key identifier:   57:25:EB:A8:BC:61:4F:F0:D9:89:46:79:6C:96:20:EB:45:83:88:9F
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       019933D30D0EAF71BB53B375F6FDF5BB3A9D
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/VyXrqLxhT_DZiUZ5bJYg60WDiJ8.roa
Signing time:             Wed 10 Sep 2025 13:31:33 +0000
ROA not before:           Wed 10 Sep 2025 13:31:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64425
IP address blocks:        45.148.121.0/24 maxlen: 24
                          45.148.122.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 10 Sep 2025 19:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:d3:0d:0e:af:71:bb:53:b3:75:f6:fd:f5:bb:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Sep 10 13:31:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5725eba8bc614ff0d98946796c9620eb4583889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:d7:7a:a9:28:af:f3:0a:0b:f5:64:b6:b8:
                    01:ba:25:a9:c8:76:1b:71:a5:64:dd:43:9d:83:51:
                    fc:01:80:71:7a:a7:67:c8:ea:c9:08:f1:72:f4:ef:
                    ed:a9:56:24:1f:9e:40:da:d8:d3:ca:a1:8e:55:d9:
                    9f:72:97:82:a8:7d:31:32:18:79:78:c8:3e:30:3b:
                    06:95:98:37:a4:ea:24:15:0a:19:dd:36:74:01:54:
                    74:ad:ee:c0:08:ab:1f:c0:a3:0d:c7:da:01:60:29:
                    3a:58:0b:d6:88:f8:dd:0c:fa:1e:99:ec:40:94:81:
                    54:10:dd:15:03:4a:e2:5d:ef:f9:dd:88:50:4a:6e:
                    cb:ab:7d:ab:52:5f:ce:56:e6:a6:fd:17:40:dd:d9:
                    c3:04:ee:b0:a4:6c:b3:e0:76:fc:35:81:7b:4a:8a:
                    07:25:28:46:8a:49:88:a9:51:03:81:75:56:77:a4:
                    85:e0:19:45:35:e1:31:e8:f5:91:b9:0a:5f:12:9b:
                    68:15:d2:eb:5e:7d:95:b2:88:a7:2d:fe:b3:09:3a:
                    35:24:1c:e2:4f:7e:98:16:54:e6:b3:db:ac:ed:ff:
                    7a:e3:1f:bc:f5:d2:e0:7d:b4:f9:c0:75:b5:0e:23:
                    e8:6c:65:b3:5c:e7:f3:04:07:ea:e0:0a:76:bd:e9:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:25:EB:A8:BC:61:4F:F0:D9:89:46:79:6C:96:20:EB:45:83:88:9F
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/VyXrqLxhT_DZiUZ5bJYg60WDiJ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.121.0-45.148.122.255

    Signature Algorithm: sha256WithRSAEncryption
         11:38:f1:a7:cb:b8:a1:83:46:8b:22:43:74:14:7e:76:3f:bb:
         68:66:37:fa:3c:4a:07:00:52:a9:f1:12:2d:3e:3c:65:14:59:
         39:07:d6:7e:e6:93:05:0c:33:57:df:d0:d1:30:eb:29:94:2a:
         8e:9a:bf:45:26:09:b6:1a:f7:7f:72:8e:ff:1c:bf:8e:a1:a5:
         9e:eb:bf:3c:f3:8a:91:73:ec:f7:da:6d:86:40:b7:ca:7a:ed:
         44:8c:30:7f:ae:41:60:0a:3a:8c:a4:c0:21:68:21:b1:58:97:
         ac:42:86:02:d5:5a:a8:01:b2:ab:b3:f6:40:45:9c:6e:d7:c3:
         54:16:ed:e4:54:6f:a6:cf:2c:2b:9b:c3:ec:c1:7d:58:94:42:
         2a:67:00:eb:dd:a2:24:f1:09:da:ef:1c:3d:30:3f:8a:54:61:
         d9:cf:d0:88:d2:17:e6:55:32:c6:ac:e3:15:57:67:ca:0a:d3:
         fa:4a:93:d2:31:4e:d8:ad:51:54:43:1f:74:3b:7f:fd:c9:18:
         82:4f:6c:46:89:53:61:34:d2:10:cc:98:76:5f:d1:34:de:b2:
         d4:51:66:62:af:88:4d:20:13:02:bc:b9:ca:83:74:a0:5e:a5:
         56:d1:6a:0d:13:c7:8c:60:dd:40:2e:2a:be:ca:98:e7:b6:90:
         d7:52:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:54:00 2025 by rpki-client