This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/f1BhYMhV-wTg0INnx0D6XmuZpVE.roa
File:                     f1BhYMhV-wTg0INnx0D6XmuZpVE.roa (raw, json)
Hash identifier:          aBZLlpiHnLv3pkgB38czlET3PuTdi5cZuugsaXSYELk=
Subject key identifier:   7F:50:61:60:C8:55:FB:04:E0:D0:83:67:C7:40:FA:5E:6B:99:A5:51
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019B07A0620D62FCB145C383D5706AFDBEFB
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/f1BhYMhV-wTg0INnx0D6XmuZpVE.roa
Signing time:             Wed 10 Dec 2025 09:38:29 +0000
ROA not before:           Wed 10 Dec 2025 09:38:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29802
IP address blocks:        80.174.113.0/24 maxlen: 24
                          80.174.117.0/24 maxlen: 24
                          80.174.122.0/24 maxlen: 24
                          80.174.125.0/24 maxlen: 24
                          80.174.126.0/24 maxlen: 24
                          80.174.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 11 Dec 2025 10:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:a0:62:0d:62:fc:b1:45:c3:83:d5:70:6a:fd:be:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Dec 10 09:38:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7f506160c855fb04e0d08367c740fa5e6b99a551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:1f:f4:d4:1d:94:4c:d0:85:ed:4e:38:d2:
                    f5:77:dd:69:0c:a0:1a:9b:e7:db:4e:22:f8:54:1f:
                    fe:c9:00:29:a4:74:95:01:4b:24:6f:09:20:df:79:
                    de:cb:fa:60:a4:4f:f8:b7:21:2d:ce:45:d1:96:fb:
                    fe:29:12:b2:00:cb:5f:98:1c:a3:3d:27:28:56:9b:
                    e7:44:27:f9:e2:6d:3a:8b:78:01:32:c5:cd:87:22:
                    a4:83:d3:20:82:9e:fc:ff:77:ad:a5:66:08:3f:a0:
                    a7:94:68:65:32:44:9e:08:cb:3d:27:5d:bc:e9:2a:
                    40:48:1d:a5:fc:5b:94:39:9c:46:45:d1:97:36:0e:
                    df:c1:a5:0f:31:75:ad:2d:0c:3b:ef:6b:73:04:91:
                    f6:16:6d:79:7c:68:87:8f:5f:05:dd:5f:3d:41:ef:
                    16:29:ad:b2:0a:31:ff:1a:61:ac:9e:8a:0f:c5:37:
                    20:a7:ad:a2:22:81:d9:e7:bf:36:98:5a:16:84:56:
                    c0:c2:13:f8:d5:be:ce:1b:64:93:89:4b:76:d8:68:
                    24:17:35:de:d6:80:eb:36:c0:17:43:3c:bb:60:d5:
                    a3:dc:c2:dc:86:7e:1b:e9:1a:72:0f:f0:5e:36:bb:
                    54:8e:8f:83:8e:b5:33:16:ae:37:e9:00:d7:35:81:
                    6a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:61:60:C8:55:FB:04:E0:D0:83:67:C7:40:FA:5E:6B:99:A5:51
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/f1BhYMhV-wTg0INnx0D6XmuZpVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.174.113.0/24
                  80.174.117.0/24
                  80.174.122.0/24
                  80.174.125.0-80.174.127.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:03:08:e9:a1:76:2a:00:ae:58:f8:ff:46:73:58:6c:7f:
         0b:ea:ef:5e:fb:c5:21:32:8e:fa:22:a6:b9:88:96:6e:34:27:
         eb:52:b6:7f:f1:cf:c4:31:78:a5:1f:c4:b3:11:fd:9a:a6:0b:
         ab:c9:b6:38:f1:f2:3b:a7:c2:a9:a0:59:a9:9f:fb:30:41:5e:
         ff:c0:76:6f:7f:1b:ff:c0:de:a1:1d:7b:11:82:fc:9c:4d:85:
         01:31:75:2a:79:a8:ba:9f:7c:1b:86:29:78:26:c8:0b:40:bb:
         04:63:11:a8:e4:79:24:a6:d3:47:d2:e0:43:0b:82:d5:fe:b6:
         fa:07:fa:7d:19:e5:18:4d:1d:67:38:46:ff:fc:d9:5d:bc:23:
         99:06:fa:46:c7:33:15:e9:9e:7a:d8:a4:b1:32:ee:51:25:fd:
         d8:99:19:27:e2:0d:cf:c8:a7:88:2c:cb:12:01:04:c5:63:27:
         b1:c0:59:c1:73:5f:52:4f:8c:92:f9:8b:aa:dd:e8:a7:f5:6a:
         89:31:54:49:97:09:a0:82:46:dc:0b:3e:7e:21:18:98:5c:f0:
         93:13:7b:f2:15:f7:89:11:2a:f2:65:37:f4:b7:b0:3b:cc:c9:
         06:2d:a9:27:62:61:41:e2:db:a8:51:88:fe:ab:e0:cc:ac:5a:
         d4:f8:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 16:26:39 2025 by rpki-client