This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5aeHeY0WFZoIN73MxZqFd6OV_rs.roa
File:                     5aeHeY0WFZoIN73MxZqFd6OV_rs.roa (raw, json)
Hash identifier:          kXxKlZ19zMi4KqP8wyH5dfQOZjZ1Vajc+XO8tMsRe70=
Subject key identifier:   E5:A7:87:79:8D:16:15:9A:08:37:BD:CC:C5:9A:85:77:A3:95:FE:BB
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019A6390AEE1BC0B8D19202C3BACC340E476
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5aeHeY0WFZoIN73MxZqFd6OV_rs.roa
Signing time:             Sat 08 Nov 2025 13:03:37 +0000
ROA not before:           Sat 08 Nov 2025 13:03:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        212.134.18.0/24 maxlen: 24
                          212.134.36.0/24 maxlen: 24
                          212.134.56.0/23 maxlen: 24
                          212.134.58.0/24 maxlen: 24
                          212.134.83.0/24 maxlen: 24
                          212.134.86.0/24 maxlen: 24
                          212.134.89.0/24 maxlen: 24
                          212.134.91.0/24 maxlen: 24
                          212.134.98.0/23 maxlen: 24
                          212.134.104.0/23 maxlen: 24
                          212.134.106.0/23 maxlen: 24
                          212.134.110.0/23 maxlen: 24
                          212.134.148.0/22 maxlen: 24
                          212.134.188.0/22 maxlen: 24
                          212.134.196.0/22 maxlen: 24
                          212.134.212.0/22 maxlen: 24
                          212.134.216.0/22 maxlen: 24
                          212.134.228.0/22 maxlen: 24
                          212.134.232.0/22 maxlen: 24
                          212.134.248.0/22 maxlen: 24
                          212.135.204.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Nov 2025 08:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:63:90:ae:e1:bc:0b:8d:19:20:2c:3b:ac:c3:40:e4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Nov  8 13:03:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5a787798d16159a0837bdccc59a8577a395febb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:e1:9d:ed:9d:22:17:ee:a3:3f:b4:5b:75:
                    f0:d9:45:1a:1d:69:de:c5:8e:40:83:4b:47:9a:99:
                    8a:40:1c:ee:d3:b7:ed:17:ef:54:e4:ef:c2:85:01:
                    af:c7:3f:b6:b7:71:b9:83:51:8d:5e:8e:d2:80:68:
                    28:c6:c9:f2:77:cd:1e:0f:65:ee:e6:0b:f5:3a:e1:
                    cf:61:81:84:ef:3c:e6:81:01:6e:9f:41:db:30:27:
                    04:e6:c1:5b:7c:af:ca:c0:a8:41:32:f6:e2:02:a4:
                    81:e7:cd:63:1d:b8:d8:c1:0f:17:22:e8:1b:3b:6c:
                    a6:2b:22:db:d7:0d:12:29:bb:60:77:9f:e7:72:e6:
                    1f:38:4b:31:a0:39:bf:b1:ac:83:fd:b5:cc:74:e8:
                    46:d9:d0:f1:00:f7:53:b0:25:22:17:ee:f3:5a:0c:
                    fa:9f:f5:17:4f:59:57:e2:f7:32:98:7a:8c:45:9c:
                    1e:73:b8:59:e8:7c:19:c4:e3:8d:f5:0f:52:be:6e:
                    4b:26:08:43:fc:3d:2e:72:34:65:63:28:5c:81:d4:
                    1f:20:a0:3e:2e:f8:35:03:46:09:f8:b4:f9:14:53:
                    db:6e:7c:eb:d7:dd:c8:be:2f:99:c2:5d:d3:0a:a6:
                    c2:30:af:51:cc:98:87:6a:70:b0:32:fe:81:04:56:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:87:79:8D:16:15:9A:08:37:BD:CC:C5:9A:85:77:A3:95:FE:BB
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5aeHeY0WFZoIN73MxZqFd6OV_rs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.18.0/24
                  212.134.36.0/24
                  212.134.56.0-212.134.58.255
                  212.134.83.0/24
                  212.134.86.0/24
                  212.134.89.0/24
                  212.134.91.0/24
                  212.134.98.0/23
                  212.134.104.0/22
                  212.134.110.0/23
                  212.134.148.0/22
                  212.134.188.0/22
                  212.134.196.0/22
                  212.134.212.0-212.134.219.255
                  212.134.228.0-212.134.235.255
                  212.134.248.0/22
                  212.135.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:63:22:56:cc:48:69:15:97:40:d9:49:a4:af:00:14:7f:
         54:e4:4c:40:67:c4:d0:bb:fd:9f:e5:aa:83:ad:31:62:bf:96:
         48:6e:ee:d0:7b:80:2d:09:6d:e8:c0:ff:36:69:a3:e8:25:42:
         cb:3c:fe:d2:45:3a:1b:7a:5f:8e:26:4e:c6:c2:7f:c6:7d:2b:
         7d:d9:85:3e:dd:26:93:d9:84:b7:30:ca:e6:ba:b5:00:82:e3:
         cc:df:84:03:8c:8a:d8:e8:4f:67:fd:de:91:41:a9:04:25:83:
         98:52:8e:da:ae:c6:28:14:e0:ed:20:5e:23:d1:13:cb:bf:e8:
         72:a6:8d:15:02:a6:19:0d:6f:07:b5:97:2f:80:b9:5b:a1:36:
         50:80:7c:6c:83:c3:1e:ed:78:4c:fa:47:6e:78:d1:e9:50:5a:
         8b:dd:9e:2f:3f:ec:9c:27:98:1c:ab:22:12:60:ea:9c:88:52:
         66:03:b5:54:80:5c:dc:ca:cf:9f:33:05:b7:39:33:b0:2a:0f:
         5a:e1:2a:9b:c2:9a:a8:e5:00:86:50:b5:54:d9:b0:ef:79:05:
         87:f1:b4:ea:e0:d4:0e:ff:a4:d6:15:ff:0c:23:e3:df:be:30:
         1c:20:f5:be:ab:98:f2:5f:4b:b1:d1:13:26:9f:3a:ad:ad:8c:
         22:1a:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:38:47 2025 by rpki-client