This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa
File:                     Kx6AcZlrhanOY3lB7VgroERPNz8.roa (raw, json)
Hash identifier:          F87U+8U9LUwIAjWsP9bNrcNp2cYRMd1b/Kr90l42qcM=
Subject key identifier:   2B:1E:80:71:99:6B:85:A9:CE:63:79:41:ED:58:2B:A0:44:4F:37:3F
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019424B3A0589FFD4ACDA110200C5FC817FE
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa
Signing time:             Thu 02 Jan 2025 01:48:59 +0000
ROA not before:           Thu 02 Jan 2025 01:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136050
IP address blocks:        45.135.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 07:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:a0:58:9f:fd:4a:cd:a1:10:20:0c:5f:c8:17:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  2 01:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2b1e8071996b85a9ce637941ed582ba0444f373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:aa:9f:50:5d:44:29:ab:19:e9:ef:c5:5e:
                    e4:fa:75:b1:8c:53:fb:b9:8f:18:40:4c:a3:c3:80:
                    a2:de:3a:4a:25:81:c0:1d:a6:63:9c:6c:77:ca:cc:
                    c2:8e:4b:ac:d0:b5:70:61:25:ef:c2:f1:0a:75:7a:
                    07:2b:2d:40:36:f8:b2:9d:c8:18:8e:93:ac:fd:74:
                    e1:c8:ac:db:52:23:5f:d8:2d:fd:b1:3b:de:ce:56:
                    3f:c3:68:2a:00:14:9c:f0:f4:06:6b:34:b9:98:15:
                    de:c0:93:f1:06:99:41:81:58:8c:2d:43:09:14:e5:
                    85:ee:f4:84:b1:22:60:61:b6:c1:62:7b:d6:89:85:
                    14:92:2b:d2:d9:e5:41:22:48:33:b0:84:34:b8:39:
                    0c:10:65:25:dd:e2:e6:eb:8c:c3:ef:50:60:15:fd:
                    44:d8:f1:1d:20:3f:b0:77:ec:ca:a1:7b:6f:fa:7f:
                    23:15:d7:be:9f:65:8b:95:b9:f5:71:c5:bd:6a:e9:
                    87:63:57:c6:7e:2b:94:7b:0e:60:43:4f:75:4f:a8:
                    3b:36:3e:f5:43:dd:1c:9e:41:b2:25:12:3b:66:ab:
                    d1:0b:d8:19:d2:67:ab:f4:1b:c0:d4:d7:c4:7a:25:
                    2a:f1:e0:01:28:93:16:47:95:3e:ee:92:3c:04:d6:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:80:71:99:6B:85:A9:CE:63:79:41:ED:58:2B:A0:44:4F:37:3F
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e9:5d:80:f4:8b:ed:cf:00:23:6d:5e:00:5a:ce:68:2e:67:
         ed:03:b4:7e:fb:55:c6:f3:06:c9:4f:1f:5f:c9:8f:38:b1:05:
         62:f3:3c:63:bc:f8:1d:a2:73:c3:da:a4:50:59:85:93:d7:f1:
         7c:ff:92:dc:94:d3:72:c6:e8:03:ca:02:44:f3:c7:e2:a9:08:
         e4:14:8f:0d:6d:c4:e9:b2:1d:05:34:e0:cd:be:2d:9f:2f:95:
         2a:cd:9d:d2:bc:c1:65:fd:64:42:19:32:f4:f8:f5:c2:b8:7c:
         11:01:ad:35:a1:73:14:50:d5:81:dc:bc:00:0e:9d:dc:61:f2:
         b2:84:ae:d2:f2:da:29:5f:e8:05:54:a0:64:37:2b:bf:ef:77:
         0a:78:f8:bf:9e:b1:15:2e:f4:ac:22:b6:04:df:5e:15:2a:53:
         05:a1:c0:c1:43:30:aa:9c:29:fc:3e:d4:3d:1d:b0:b4:2d:d9:
         bd:2c:77:92:d7:b7:f4:f9:af:08:f9:c8:59:5e:0f:97:1e:c9:
         4d:a5:84:5c:fe:92:65:a8:50:84:61:80:48:43:76:28:7b:2d:
         3c:30:9e:8c:18:60:90:e5:40:f9:9b:d1:5b:2d:7a:73:d0:45:
         21:19:25:ff:32:fb:c2:66:05:d6:9d:34:23:7f:4f:b8:b2:94:
         e1:6a:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:59:25 2025 by rpki-client