This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x5wFL4t45tZs6hdsd8JkCbGOTz0.roa
File:                     x5wFL4t45tZs6hdsd8JkCbGOTz0.roa (raw, json)
Hash identifier:          A558Hq5PtlLeBfDsb790yF+gxXcDHgRy1Gn3dcV41lM=
Subject key identifier:   C7:9C:05:2F:8B:78:E6:D6:6C:EA:17:6C:77:C2:64:09:B1:8E:4F:3D
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019A5810BC84AE61CBAD43845B490A387F9B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x5wFL4t45tZs6hdsd8JkCbGOTz0.roa
Signing time:             Thu 06 Nov 2025 07:28:03 +0000
ROA not before:           Thu 06 Nov 2025 07:28:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        194.231.132.0/22 maxlen: 22
                          194.231.136.0/22 maxlen: 22
                          194.231.140.0/24 maxlen: 24
                          194.231.150.0/24 maxlen: 24
                          194.231.152.0/22 maxlen: 22
                          194.231.196.0/22 maxlen: 22
                          194.231.200.0/22 maxlen: 22
                          194.231.204.0/22 maxlen: 22
                          194.231.204.0/23 maxlen: 24
                          194.231.206.0/23 maxlen: 24
                          194.231.208.0/22 maxlen: 22
                          194.231.208.0/23 maxlen: 24
                          194.231.210.0/23 maxlen: 24
                          194.231.212.0/22 maxlen: 22
                          194.231.220.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 11 Nov 2025 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:58:10:bc:84:ae:61:cb:ad:43:84:5b:49:0a:38:7f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Nov  6 07:28:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c79c052f8b78e6d66cea176c77c26409b18e4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:a6:e7:3d:16:0a:8f:ea:a3:e2:fb:10:f8:
                    a9:62:1b:42:00:6f:7e:87:63:13:42:b0:80:d8:97:
                    af:02:3a:b2:d2:3a:70:e1:b1:6b:7e:49:2c:70:a2:
                    68:73:86:7c:b0:0a:8b:53:cc:8f:b3:c0:0e:f2:f9:
                    5d:5e:15:2b:20:17:11:88:b4:f4:32:1b:fe:2e:62:
                    19:e7:89:9a:68:8c:8c:e2:fc:ba:d0:c6:8c:e3:3a:
                    d6:35:04:64:9f:44:62:c8:f3:2e:62:f0:8b:b7:56:
                    53:05:49:0a:8a:ab:6f:25:7c:13:b4:86:b8:f9:50:
                    c3:ac:19:6c:f3:4f:89:e9:7e:1d:48:2e:85:bb:1d:
                    e8:31:e3:4e:29:05:96:27:0b:26:97:c4:6f:54:bf:
                    de:2b:6a:83:33:ea:41:7b:b5:26:4c:c3:ad:8d:ff:
                    48:0f:bb:21:c0:61:2e:ba:76:d0:9b:b6:87:16:94:
                    d7:cf:e8:e5:1c:cc:7e:c7:67:8b:5d:d2:9f:74:a9:
                    67:0d:86:9e:62:e5:4a:38:87:c7:ab:49:36:d5:32:
                    40:b5:0d:f5:c6:e2:98:0d:d4:10:d9:8d:4a:83:7e:
                    c2:ea:71:38:f3:56:18:dc:c2:9e:a0:15:b4:22:c1:
                    a8:7c:05:71:df:c4:a4:68:0c:d1:bf:33:e1:62:ed:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9C:05:2F:8B:78:E6:D6:6C:EA:17:6C:77:C2:64:09:B1:8E:4F:3D
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x5wFL4t45tZs6hdsd8JkCbGOTz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.132.0-194.231.140.255
                  194.231.150.0/24
                  194.231.152.0/22
                  194.231.196.0-194.231.215.255
                  194.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:69:a1:1c:1a:f3:3d:98:3b:c6:e0:f0:b9:9d:d6:4f:3e:
         c5:84:63:4e:1f:2a:54:d9:08:97:26:95:8c:fc:32:c2:f9:14:
         a2:8e:2a:a8:f4:0e:8c:70:0e:14:be:9d:25:16:b2:62:9a:5c:
         be:c8:f2:bc:45:84:a3:f6:90:17:c7:2a:30:ee:5d:e3:e2:d8:
         9c:93:37:25:d7:19:77:5d:09:91:97:94:9f:55:30:b1:ad:d1:
         71:de:64:60:cf:4a:15:5a:b0:72:aa:97:42:12:e6:15:a1:84:
         a8:da:6a:cc:c8:85:b2:a6:dc:85:39:ff:c0:a3:b0:c2:46:d9:
         d4:f8:57:e3:3e:d1:b0:69:ec:f9:ee:7c:ed:1b:e7:bc:bb:79:
         d1:de:05:d3:00:ba:24:b3:ba:ce:a7:09:4c:55:9c:66:f8:5f:
         25:d2:a2:54:7f:31:01:d9:a3:e7:49:f6:f3:00:3d:dc:73:65:
         e7:1e:6b:72:4b:f0:9a:2d:53:7c:3e:fb:a9:59:ec:ee:39:6b:
         85:a0:3b:6e:bd:e5:7d:ff:13:b1:46:c8:99:79:21:6d:71:46:
         9e:06:77:e3:06:ff:6c:d1:9e:7c:36:83:40:3b:38:20:55:a9:
         ee:d9:3b:a9:9c:a2:0c:a6:e6:67:21:33:fc:2d:f4:00:67:92:
         2c:13:92:06
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZpYELyErmHLrUOEW0kKOH+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMTA2MDcyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzljMDUyZjhiNzhlNmQ2NmNlYTE3NmM3N2MyNjQwOWIxOGU0ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6mm5z0WCo/qo+L7EPipYhtCAG9+
h2MTQrCA2JevAjqy0jpw4bFrfkkscKJoc4Z8sAqLU8yPs8AO8vldXhUrIBcRiLT0
Mhv+LmIZ54maaIyM4vy60MaM4zrWNQRkn0RiyPMuYvCLt1ZTBUkKiqtvJXwTtIa4
+VDDrBls80+J6X4dSC6Fux3oMeNOKQWWJwsml8RvVL/eK2qDM+pBe7UmTMOtjf9I
D7shwGEuunbQm7aHFpTXz+jlHMx+x2eLXdKfdKlnDYaeYuVKOIfHq0k21TJAtQ31
xuKYDdQQ2Y1Kg37C6nE481YY3MKeoBW0IsGofAVx38SkaAzRvzPhYu1jAwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMecBS+LeObWbOoXbHfCZAmxjk89MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEveDV3Rkw0dDQ1dFpzNmhkc2Q4SmtDYkdPVHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBALC54QD
BADC54wDBADC55YDBALC55gwDAMEAsLnxAMEA8Ln0AMEAsLn3DANBgkqhkiG9w0B
AQsFAAOCAQEAAotpoRwa8z2YO8bg8Lmd1k8+xYRjTh8qVNkIlyaVjPwywvkUoo4q
qPQOjHAOFL6dJRayYppcvsjyvEWEo/aQF8cqMO5d4+LYnJM3JdcZd10JkZeUn1Uw
sa3Rcd5kYM9KFVqwcqqXQhLmFaGEqNpqzMiFsqbchTn/wKOwwkbZ1PhX4z7RsGns
+e587RvnvLt50d4F0wC6JLO6zqcJTFWcZvhfJdKiVH8xAdmj50n28wA93HNl5x5r
ckvwmi1TfD77qVns7jlrhaA7br3lff8TsUbImXkhbXFGngZ34wb/bNGefDaDQDs4
IFWp7tk7qZyiDKbmZyEz/C30AGeSLBOSBg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:38:46 2025 by rpki-client