This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/p8nBFMmLksi2CXd0EiMsjtrNlJE.roa
File:                     p8nBFMmLksi2CXd0EiMsjtrNlJE.roa (raw, json)
Hash identifier:          CIm0TnTG2DYki0JBb+WE4d9UOmfHadOwhuJsr2Psw7Q=
Subject key identifier:   A7:C9:C1:14:C9:8B:92:C8:B6:09:77:74:12:23:2C:8E:DA:CD:94:91
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019A60C5A89D2E92C9480D65B23CCBE5C6CB
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/p8nBFMmLksi2CXd0EiMsjtrNlJE.roa
Signing time:             Sat 08 Nov 2025 00:02:37 +0000
ROA not before:           Sat 08 Nov 2025 00:02:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        212.100.189.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 17 Nov 2025 00:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:60:c5:a8:9d:2e:92:c9:48:0d:65:b2:3c:cb:e5:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Nov  8 00:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7c9c114c98b92c8b609777412232c8edacd9491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:48:f9:d9:20:5d:19:96:4b:1a:96:93:64:
                    bd:74:24:79:63:d1:fc:81:6b:18:fb:e9:18:36:2c:
                    92:4c:53:29:23:fc:c7:f1:b1:7d:8a:20:91:25:02:
                    87:6a:ba:c5:fb:e1:dd:49:78:85:f0:46:c2:b6:98:
                    b7:a0:92:bb:da:d2:a4:4a:d6:62:0b:54:e1:9f:d8:
                    ec:bc:26:df:81:24:59:3d:3f:f7:71:b6:14:d4:33:
                    ac:dd:23:4e:6a:cf:96:2d:a3:b3:4e:2e:fd:72:bb:
                    f6:1d:8d:54:70:31:1f:5f:81:ab:cc:1c:d6:17:09:
                    db:63:69:ba:e4:f0:2e:c6:b4:cf:12:20:2f:d1:2b:
                    d1:95:8c:e1:e6:ef:94:43:f1:d2:ac:8c:69:eb:cb:
                    fa:7f:90:4d:60:16:b6:db:fb:46:0c:31:80:5e:6c:
                    bb:ab:57:89:c0:ac:5e:61:e0:5c:fd:31:3f:1d:42:
                    bc:c1:ae:99:cb:fc:ce:d5:37:54:ea:a0:5f:6c:7e:
                    32:f7:59:21:23:7d:1f:2d:1a:9d:8b:56:45:de:a0:
                    f1:34:3a:da:61:ec:57:c9:5f:0f:df:f2:2b:a8:1a:
                    cf:ff:fa:85:ff:0f:2a:c8:8f:cb:87:04:93:8c:2d:
                    6c:4d:23:01:11:0e:47:e8:bc:76:e2:d4:46:5a:cd:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:C1:14:C9:8B:92:C8:B6:09:77:74:12:23:2C:8E:DA:CD:94:91
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/p8nBFMmLksi2CXd0EiMsjtrNlJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d2:e1:c6:d6:19:4f:cf:0a:69:15:32:d1:b3:b7:c5:d7:39:
         f4:54:cb:17:38:f2:f0:e9:d6:64:a0:b6:74:79:6f:aa:d6:aa:
         46:9b:51:f9:37:17:2b:2a:f8:9e:d7:df:a7:a1:fe:d7:49:4c:
         e0:03:34:d0:e8:39:0f:b6:40:f8:69:bc:4e:47:63:20:a5:58:
         ac:04:e2:89:10:7f:70:c6:71:e3:66:8a:59:0f:ed:a6:18:bb:
         94:11:16:3c:e5:78:21:d7:85:3b:21:f2:b9:dd:68:d0:81:bf:
         ca:2b:6e:42:cd:75:12:eb:8b:47:c2:76:3b:bd:2d:3a:b8:8a:
         83:7c:5b:ed:da:69:63:2d:f1:39:bb:99:0c:9a:ce:38:de:b5:
         68:e9:9c:22:14:85:e7:35:ee:d8:e0:ee:e7:be:4f:c2:67:be:
         b1:86:a2:f5:6d:90:05:21:b7:a1:ac:f6:28:3a:41:73:6f:37:
         2f:50:13:5b:20:17:5e:cc:49:26:46:60:6a:f3:20:64:16:9b:
         cf:2f:03:fd:01:02:ae:2b:58:f1:e6:82:59:ea:51:6e:bd:6f:
         6c:e9:d1:17:60:3e:14:eb:29:aa:80:4b:2d:3e:41:ee:5c:33:
         e6:b0:67:7b:d3:db:17:42:00:ce:c7:f2:7a:31:bf:3a:41:c5:
         08:1c:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:00 2025 by rpki-client