This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/jvhXt1NXTY4Adt6RSO6atSs3IaY.roa
File:                     jvhXt1NXTY4Adt6RSO6atSs3IaY.roa (raw, json)
Hash identifier:          hTZ/kdrm7IQUZY2CbaiBGS7r8jgtOLAJ26J8FCNkoeI=
Subject key identifier:   8E:F8:57:B7:53:57:4D:8E:00:76:DE:91:48:EE:9A:B5:2B:37:21:A6
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019B18D2A879DB3654959C9D07E9DF2133B8
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/jvhXt1NXTY4Adt6RSO6atSs3IaY.roa
Signing time:             Sat 13 Dec 2025 17:46:57 +0000
ROA not before:           Sat 13 Dec 2025 17:46:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        82.206.2.0/23 maxlen: 23
                          82.206.4.0/22 maxlen: 24
                          82.206.8.0/23 maxlen: 24
                          82.206.16.0/22 maxlen: 22
                          82.206.16.0/23 maxlen: 23
                          82.206.16.0/24 maxlen: 24
                          82.206.18.0/24 maxlen: 24
                          82.206.81.0/24 maxlen: 24
                          82.206.82.0/23 maxlen: 23
                          82.206.84.0/22 maxlen: 24
                          82.206.88.0/21 maxlen: 21
                          82.206.96.0/21 maxlen: 21
                          82.206.104.0/22 maxlen: 22
                          82.206.108.0/24 maxlen: 24
                          82.206.110.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 15 Dec 2025 11:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:d2:a8:79:db:36:54:95:9c:9d:07:e9:df:21:33:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Dec 13 17:46:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ef857b753574d8e0076de9148ee9ab52b3721a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:4a:e9:3c:26:ec:2c:52:6a:c1:48:2b:37:
                    39:d6:34:79:2e:ec:88:98:03:a9:ec:95:c3:15:e2:
                    ee:0e:2c:78:1d:c8:77:41:34:0f:a3:13:e1:ca:57:
                    31:6c:f8:e8:dd:35:99:b4:bc:9b:94:12:65:9e:e5:
                    93:68:bd:e0:1b:70:bb:89:6f:87:38:08:00:35:23:
                    ad:33:0f:51:42:47:92:c1:90:79:a5:b6:cb:09:93:
                    10:78:7b:04:85:2f:df:74:f4:b6:eb:33:8b:29:9f:
                    9d:fe:c8:15:4f:50:07:03:64:ff:24:34:6c:6c:51:
                    17:ac:cc:f7:15:60:b0:a5:78:6b:d9:07:f4:e9:4f:
                    48:c2:79:bd:53:e2:e7:5a:f7:23:7e:ff:94:0d:2e:
                    7d:55:0c:fa:f6:d6:24:24:af:e9:88:4b:ea:af:e8:
                    8f:d2:e4:32:29:df:f8:c4:2d:2f:7b:ef:b5:44:4b:
                    0b:58:a0:60:e6:76:25:ec:e4:09:cf:69:e4:3a:29:
                    6c:1f:e4:b2:28:92:58:58:c6:60:b2:d9:d5:87:fd:
                    99:2b:4f:2c:12:88:8a:0f:73:2f:59:17:f0:27:d6:
                    f5:21:95:c7:56:3d:2d:f0:7e:2a:90:27:8d:68:89:
                    99:8e:21:57:3a:e6:03:ba:27:14:be:41:d0:14:cf:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:57:B7:53:57:4D:8E:00:76:DE:91:48:EE:9A:B5:2B:37:21:A6
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/jvhXt1NXTY4Adt6RSO6atSs3IaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.2.0-82.206.9.255
                  82.206.16.0/22
                  82.206.81.0-82.206.108.255
                  82.206.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:75:d9:71:c4:3a:8a:25:01:3b:09:cc:5c:91:23:f4:89:42:
         39:08:ae:30:ab:96:2c:9f:27:18:80:76:88:bf:bf:f6:d2:04:
         7a:18:83:09:9a:c9:65:ba:60:05:d1:3f:7b:4f:84:0e:7a:15:
         c6:55:16:e0:1f:60:d6:c4:9a:07:5a:77:62:ae:e6:83:ee:21:
         10:49:f5:b1:53:52:b1:85:cf:8d:40:22:8a:be:87:b0:d5:9b:
         f1:c2:19:e2:47:52:c7:84:db:f1:cf:f6:fb:fa:63:43:d6:46:
         e4:03:56:d7:4f:68:8e:68:7d:8c:fd:f9:75:ef:ef:be:4c:b4:
         cf:23:94:ba:9f:8c:35:41:ff:aa:24:57:54:ff:8a:05:55:f2:
         11:52:3c:27:5b:33:78:75:8f:b2:6d:ae:94:19:0d:1c:72:01:
         a8:64:b3:2c:31:e7:48:99:f5:39:28:ab:bb:65:9b:d5:3f:47:
         f3:12:9e:f3:d4:9b:55:e7:28:42:ea:47:a4:fe:c5:0b:b7:fc:
         87:f6:7e:b7:82:88:54:a0:c4:44:9a:91:11:0f:b3:b3:f5:b2:
         04:fb:aa:68:c7:36:ac:f6:5c:0f:6a:53:7c:33:c4:5f:40:89:
         79:37:f8:0a:36:b0:29:e7:d4:3b:cb:55:d1:ca:42:81:57:56:
         8f:e3:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:27:56 2025 by rpki-client