This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5yLSlpetSuzPyRTqC-0F95La3l0.roa
File:                     5yLSlpetSuzPyRTqC-0F95La3l0.roa (raw, json)
Hash identifier:          8ewTrMx86eLeMqW49ixepikAAUAmESeO5hKdWf0rFSM=
Subject key identifier:   E7:22:D2:96:97:AD:4A:EC:CF:C9:14:EA:0B:ED:05:F7:92:DA:DE:5D
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B9373CF86F3EDAE80754B1EBF2E9D2297
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5yLSlpetSuzPyRTqC-0F95La3l0.roa
Signing time:             Tue 06 Jan 2026 13:16:39 +0000
ROA not before:           Tue 06 Jan 2026 13:16:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        46.102.237.0/24 maxlen: 24
                          89.34.106.0/24 maxlen: 24
                          89.44.76.0/24 maxlen: 24
                          89.125.126.0/24 maxlen: 24
                          91.132.50.0/24 maxlen: 24
                          93.114.183.0/24 maxlen: 24
                          93.115.106.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          206.245.158.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 08 Jan 2026 17:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:73:cf:86:f3:ed:ae:80:75:4b:1e:bf:2e:9d:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  6 13:16:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e722d29697ad4aeccfc914ea0bed05f792dade5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:a6:ab:e8:21:8a:94:26:a4:ef:4b:9f:8c:
                    ed:65:14:f4:1b:2a:7b:81:d3:7e:70:84:b7:e0:04:
                    d3:de:8f:ef:ec:0b:1c:93:4e:01:e2:87:71:17:4e:
                    8b:fb:fd:33:95:7b:ad:1f:ba:2f:0f:42:6c:f4:25:
                    76:ff:af:8a:99:9d:3e:7b:c1:4a:5b:ec:62:7e:3e:
                    2f:04:62:87:4e:cc:37:a1:59:82:9f:79:59:24:9f:
                    70:56:cb:3e:db:09:fe:8d:bc:48:c6:21:ac:ce:9d:
                    8a:18:3f:55:81:90:8c:f5:5f:93:08:01:04:8e:8a:
                    d4:47:eb:7f:bf:86:20:9a:1f:3d:78:e4:2a:c5:28:
                    12:25:8f:36:6b:aa:6e:03:a0:cf:77:0c:4f:fd:cf:
                    4a:43:29:4a:9a:8f:56:cb:d9:92:88:27:a3:82:7e:
                    73:7e:c0:59:65:d4:ff:26:5d:2e:d6:c9:e0:f3:53:
                    7e:5d:27:03:de:3b:a2:53:f5:ba:52:d7:d6:0a:23:
                    f8:d2:7a:37:f4:34:0e:c9:b0:9c:f8:ea:46:5b:28:
                    89:68:0a:26:4c:68:40:fc:7a:ba:ad:06:10:00:30:
                    2b:05:e6:77:a1:fa:62:27:10:81:42:92:1f:00:f5:
                    a3:29:c4:22:7b:9d:ad:9a:a0:e2:b3:7c:15:18:dd:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:22:D2:96:97:AD:4A:EC:CF:C9:14:EA:0B:ED:05:F7:92:DA:DE:5D
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5yLSlpetSuzPyRTqC-0F95La3l0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.237.0/24
                  89.34.106.0/24
                  89.44.76.0/24
                  89.125.126.0/24
                  91.132.50.0/24
                  93.114.183.0/24
                  93.115.106.0/24
                  194.58.47.0/24
                  206.245.158.0/24
                  212.192.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:9e:b9:6c:5c:7c:09:93:e4:0b:fc:cd:a7:a8:70:76:c1:
         71:4a:ef:94:1b:ed:91:9e:01:94:9f:37:b4:51:59:71:01:70:
         ee:25:1b:53:e0:b5:a8:3b:35:a3:ce:d3:9c:74:49:a7:76:4c:
         8e:24:6e:8b:98:92:71:23:2c:d6:da:66:9f:c4:ac:00:84:15:
         29:ab:e8:e0:e8:71:4a:cd:46:b7:6d:51:df:97:dd:bd:3c:e1:
         54:65:9a:80:8c:15:a0:b2:dd:06:5e:39:49:4b:c2:bb:6a:bb:
         14:7d:c4:ed:ef:0f:bd:4b:13:78:4f:8c:86:86:bb:d3:7b:47:
         a4:b5:cd:b2:c7:c5:c6:4e:1a:98:32:6f:7d:99:6a:e3:c1:99:
         4f:61:72:a5:f0:ed:e6:28:b8:97:80:ae:cb:af:16:1a:8b:6f:
         db:82:d4:81:82:80:5a:46:c5:c1:9a:29:44:97:bb:32:52:a4:
         20:4a:29:bf:47:c1:ea:e2:1d:2b:cd:7a:e9:00:4c:96:9e:88:
         f0:26:a5:d7:11:46:49:dc:a2:d3:62:f7:30:a0:43:ff:f4:e1:
         9b:7f:7a:99:af:e1:e6:da:33:ce:c6:31:ab:06:bf:52:da:ec:
         0a:e3:d1:dc:0f:d3:b3:b4:6d:e3:8d:42:ea:f7:d9:3d:27:6c:
         bf:ce:7e:e2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZuTc8+G8+2ugHVLHr8unSKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTA2MTMxNjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzIyZDI5Njk3YWQ0YWVjY2ZjOTE0ZWEwYmVkMDVmNzkyZGFkZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEumq+ghipQmpO9Ln4ztZRT0Gyp7
gdN+cIS34ATT3o/v7Asck04B4odxF06L+/0zlXutH7ovD0Js9CV2/6+KmZ0+e8FK
W+xifj4vBGKHTsw3oVmCn3lZJJ9wVss+2wn+jbxIxiGszp2KGD9VgZCM9V+TCAEE
jorUR+t/v4Ygmh89eOQqxSgSJY82a6puA6DPdwxP/c9KQylKmo9Wy9mSiCejgn5z
fsBZZdT/Jl0u1sng81N+XScD3juiU/W6UtfWCiP40no39DQOybCc+OpGWyiJaAom
TGhA/Hq6rQYQADArBeZ3ofpiJxCBQpIfAPWjKcQie52tmqDis3wVGN03GQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFOci0paXrUrsz8kU6gvtBfeS2t5dMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNXlMU2xwZXRTdXpQeVJUcUMtMEY5NUxhM2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALmbtAwQA
WSJqAwQAWSxMAwQAWX1+AwQAW4QyAwQAXXK3AwQAXXNqAwQAwjovAwQAzvWeAwQA
1MAIMA0GCSqGSIb3DQEBCwUAA4IBAQA3Gp65bFx8CZPkC/zNp6hwdsFxSu+UG+2R
ngGUnze0UVlxAXDuJRtT4LWoOzWjztOcdEmndkyOJG6LmJJxIyzW2mafxKwAhBUp
q+jg6HFKzUa3bVHfl929POFUZZqAjBWgst0GXjlJS8K7arsUfcTt7w+9SxN4T4yG
hrvTe0ektc2yx8XGThqYMm99mWrjwZlPYXKl8O3mKLiXgK7LrxYai2/bgtSBgoBa
RsXBmilEl7syUqQgSim/R8Hq4h0rzXrpAEyWnojwJqXXEUZJ3KLTYvcwoEP/9OGb
f3qZr+Hm2jPOxjGrBr9S2uwK49HcD9OztG3jjULq99k9J2y/zn7i
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:29 2026 by rpki-client