This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rdkPTvmTEIfvxp56J6eUQWMJ13c.roa
File:                     rdkPTvmTEIfvxp56J6eUQWMJ13c.roa (raw, json)
Hash identifier:          /+g+uGSP0kXdY5RTOiilOurlj0RRbQfcbNLiVdbtThc=
Subject key identifier:   AD:D9:0F:4E:F9:93:10:87:EF:C6:9E:7A:27:A7:94:41:63:09:D7:77
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019B7F852DEC89D689772F6764C1D4D8C7AB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rdkPTvmTEIfvxp56J6eUQWMJ13c.roa
Signing time:             Fri 02 Jan 2026 16:23:13 +0000
ROA not before:           Fri 02 Jan 2026 16:23:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        5.182.28.0/22 maxlen: 22
                          45.67.117.0/24 maxlen: 24
                          89.40.161.0/24 maxlen: 24
                          91.242.68.0/23 maxlen: 24
                          91.242.70.0/24 maxlen: 24
                          91.242.73.0/24 maxlen: 24
                          91.242.74.0/24 maxlen: 24
                          91.242.82.0/24 maxlen: 24
                          91.242.105.0/24 maxlen: 24
                          91.242.124.0/24 maxlen: 24
                          91.242.126.0/24 maxlen: 24
                          185.147.48.0/24 maxlen: 24
                          185.180.145.0/24 maxlen: 24
                          185.212.11.0/24 maxlen: 24
                          194.50.200.0/24 maxlen: 24
                          194.50.201.0/24 maxlen: 24
                          194.50.206.0/23 maxlen: 24
                          194.50.206.0/24 maxlen: 24
                          195.138.103.0/24 maxlen: 24
                          195.138.104.0/22 maxlen: 24
                          195.138.107.0/24 maxlen: 24
                          195.138.111.0/24 maxlen: 24
                          195.138.114.0/24 maxlen: 24
                          195.138.120.0/24 maxlen: 24
                          195.211.48.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 06 Jan 2026 21:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:2d:ec:89:d6:89:77:2f:67:64:c1:d4:d8:c7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  2 16:23:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=add90f4ef9931087efc69e7a27a794416309d777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:35:42:1d:bd:1f:55:fe:86:27:30:1c:0d:
                    22:85:d1:36:2f:c8:49:40:93:53:90:a2:e2:db:59:
                    d0:79:ec:2f:e7:a9:c9:79:6f:84:1b:da:7b:96:28:
                    53:42:ee:0d:34:33:26:38:d0:9f:94:e6:57:2e:76:
                    a5:fe:bf:6f:1d:3e:ed:ec:4c:2e:25:ab:40:30:d0:
                    07:7a:76:d8:4b:0a:fe:33:d7:d1:5c:e3:82:41:32:
                    e7:7e:3a:b1:78:e3:8c:84:b5:1c:1b:e1:af:eb:1d:
                    a2:4b:ec:89:78:01:7b:60:b8:eb:c7:fd:cb:fc:2d:
                    76:c1:bd:2c:88:f9:07:dd:5e:90:e5:92:c8:6b:ef:
                    1f:dd:94:68:e8:94:62:74:d0:28:1f:cf:2b:ff:64:
                    8d:12:6e:48:0f:07:b4:a9:f9:be:96:89:6a:eb:ad:
                    fd:00:c8:5c:1a:46:93:23:d7:06:1f:a7:f6:bc:79:
                    99:f3:d9:e9:f6:a5:2f:6c:07:d5:62:33:ae:7b:bb:
                    bb:83:41:f4:0d:87:83:67:b9:bf:60:71:ea:44:6b:
                    22:21:25:d4:ef:94:53:25:2e:87:b7:b7:33:1e:fd:
                    a8:30:2e:4a:59:e4:22:c7:57:01:27:16:6b:21:a9:
                    0e:f5:a7:ac:f2:82:84:0b:7f:c8:4a:41:9f:b6:60:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D9:0F:4E:F9:93:10:87:EF:C6:9E:7A:27:A7:94:41:63:09:D7:77
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rdkPTvmTEIfvxp56J6eUQWMJ13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.28.0/22
                  45.67.117.0/24
                  89.40.161.0/24
                  91.242.68.0-91.242.70.255
                  91.242.73.0-91.242.74.255
                  91.242.82.0/24
                  91.242.105.0/24
                  91.242.124.0/24
                  91.242.126.0/24
                  185.147.48.0/24
                  185.180.145.0/24
                  185.212.11.0/24
                  194.50.200.0/23
                  194.50.206.0/23
                  195.138.103.0-195.138.107.255
                  195.138.111.0/24
                  195.138.114.0/24
                  195.138.120.0/24
                  195.211.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:82:b6:7a:a3:ba:32:97:30:4d:1e:8d:4c:70:e6:05:a3:
         f6:c5:0b:0a:e1:4c:be:4e:ef:4a:3d:a4:46:11:d3:03:fc:74:
         7d:84:8d:40:d7:41:6e:b8:aa:74:ce:c4:6e:65:ce:a0:a8:d8:
         43:43:56:bd:63:8c:c9:4a:08:b1:8e:03:14:3f:27:5b:7a:58:
         a7:3c:0e:9e:d0:1d:70:43:71:c8:be:02:83:59:d0:94:04:65:
         3a:8a:b0:45:42:70:b8:85:90:cf:bb:02:08:46:e6:21:49:3b:
         af:c8:47:d6:4a:d1:e5:83:b3:90:d3:0c:3d:00:fb:fe:80:e9:
         e6:f2:cf:ed:26:19:27:cf:73:18:4d:b4:b6:ee:2e:46:4e:08:
         a3:30:60:dd:aa:04:52:8f:42:25:66:ff:6a:d5:65:af:d7:b5:
         96:00:27:74:31:6e:fd:93:da:3f:77:be:10:39:8a:a9:08:1a:
         36:0c:fb:3e:7c:88:d2:ca:3b:d5:c8:a9:f7:19:d0:0c:34:cd:
         04:f0:be:6b:63:5d:20:62:6a:15:e6:10:c9:0b:78:31:ea:8f:
         29:85:44:fd:3a:9d:76:d5:54:5d:39:92:6a:6c:61:27:9e:c7:
         45:82:1e:af:4a:5d:16:80:c3:18:8f:42:80:b3:23:48:a0:cb:
         ed:ff:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 00:16:39 2026 by rpki-client