This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lHLuCvYlojxjmYBgthrku50CFNA.roa
File:                     lHLuCvYlojxjmYBgthrku50CFNA.roa (raw, json)
Hash identifier:          Gv3bPCl/0kdopBnG3InwZOLGWpHIQ8nPpbLzFizQBFg=
Subject key identifier:   94:72:EE:0A:F6:25:A2:3C:63:99:80:60:B6:1A:E4:BB:9D:02:14:D0
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B1C5548AC5AD983AE07E08FBE31CAD0C1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lHLuCvYlojxjmYBgthrku50CFNA.roa
Signing time:             Sun 14 Dec 2025 10:08:29 +0000
ROA not before:           Sun 14 Dec 2025 10:08:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        212.134.16.0/24 maxlen: 24
                          212.134.17.0/24 maxlen: 24
                          212.134.19.0/24 maxlen: 24
                          212.134.22.0/24 maxlen: 24
                          212.134.24.0/24 maxlen: 24
                          212.134.36.0/24 maxlen: 24
                          212.134.39.0/24 maxlen: 24
                          212.134.47.0/24 maxlen: 24
                          212.134.56.0/23 maxlen: 24
                          212.134.58.0/24 maxlen: 24
                          212.134.80.0/24 maxlen: 24
                          212.134.81.0/24 maxlen: 24
                          212.134.82.0/24 maxlen: 24
                          212.134.85.0/24 maxlen: 24
                          212.134.87.0/24 maxlen: 24
                          212.134.88.0/24 maxlen: 24
                          212.134.98.0/23 maxlen: 24
                          212.134.104.0/23 maxlen: 24
                          212.134.106.0/23 maxlen: 24
                          212.134.110.0/23 maxlen: 24
                          212.134.128.0/22 maxlen: 24
                          212.134.132.0/22 maxlen: 24
                          212.134.136.0/22 maxlen: 24
                          212.134.140.0/22 maxlen: 24
                          212.134.144.0/22 maxlen: 24
                          212.134.148.0/22 maxlen: 24
                          212.134.148.0/24 maxlen: 24
                          212.134.175.0/24 maxlen: 24
                          212.134.179.0/24 maxlen: 24
                          212.134.188.0/22 maxlen: 24
                          212.134.196.0/22 maxlen: 24
                          212.134.199.0/24 maxlen: 24
                          212.134.204.0/22 maxlen: 24
                          212.134.212.0/22 maxlen: 24
                          212.134.216.0/22 maxlen: 24
                          212.134.228.0/22 maxlen: 24
                          212.134.232.0/22 maxlen: 24
                          212.134.248.0/22 maxlen: 24
                          212.134.248.0/24 maxlen: 24
                          212.135.24.0/23 maxlen: 24
                          212.135.28.0/23 maxlen: 24
                          212.135.30.0/24 maxlen: 24
                          212.135.31.0/24 maxlen: 24
                          212.135.128.0/23 maxlen: 24
                          212.135.135.0/24 maxlen: 24
                          212.135.161.0/24 maxlen: 24
                          212.135.162.0/24 maxlen: 24
                          212.135.165.0/24 maxlen: 24
                          212.135.166.0/24 maxlen: 24
                          212.135.167.0/24 maxlen: 24
                          212.135.168.0/24 maxlen: 24
                          212.135.169.0/24 maxlen: 24
                          212.135.170.0/24 maxlen: 24
                          212.135.171.0/24 maxlen: 24
                          212.135.172.0/24 maxlen: 24
                          212.135.173.0/24 maxlen: 24
                          212.135.204.0/22 maxlen: 24
                          212.135.240.0/23 maxlen: 24
                          212.135.244.0/23 maxlen: 24
                          212.135.248.0/23 maxlen: 24
                          212.135.252.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 15 Dec 2025 03:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:55:48:ac:5a:d9:83:ae:07:e0:8f:be:31:ca:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Dec 14 10:08:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9472ee0af625a23c63998060b61ae4bb9d0214d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:6c:4f:5f:41:a3:3f:95:91:84:2e:4d:8a:
                    58:e0:e1:41:31:19:a1:04:73:5e:e9:ce:fa:13:94:
                    fd:53:a1:76:ae:53:25:1f:4b:49:a3:eb:91:63:cb:
                    5c:dc:b4:0d:0b:40:38:c8:92:1f:75:d8:9f:cf:d8:
                    d8:73:72:55:7f:b2:38:93:fd:e9:2d:cb:89:34:5b:
                    21:39:18:e1:84:eb:d5:e5:3a:90:43:1e:79:fc:47:
                    30:59:37:c5:df:57:a3:f6:81:73:68:4b:22:ea:1e:
                    c4:72:72:04:f6:9e:0b:26:0e:0c:c0:7a:29:67:55:
                    bd:1f:0d:55:f6:03:17:d3:f3:0e:14:91:ec:8f:bc:
                    da:cd:a3:b4:50:01:e3:51:85:16:98:9c:e5:b9:60:
                    de:f6:23:5c:30:87:1f:b4:d8:c6:50:3c:38:ac:11:
                    ef:ba:25:0d:68:70:76:06:71:4b:dd:1b:cd:ca:2b:
                    f5:04:7b:a2:f6:89:b2:ae:b8:97:ea:46:d9:71:33:
                    01:d4:36:8c:92:af:f0:20:76:02:95:56:fd:14:3b:
                    aa:7e:22:1a:a9:62:00:0b:27:c5:ca:2a:3e:96:e1:
                    50:ac:18:a7:a9:34:a1:55:b4:b3:9d:60:16:5e:8a:
                    03:c3:2d:e2:23:90:8b:26:6f:41:39:0c:9a:c6:d3:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:72:EE:0A:F6:25:A2:3C:63:99:80:60:B6:1A:E4:BB:9D:02:14:D0
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lHLuCvYlojxjmYBgthrku50CFNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.16.0/23
                  212.134.19.0/24
                  212.134.22.0/24
                  212.134.24.0/24
                  212.134.36.0/24
                  212.134.39.0/24
                  212.134.47.0/24
                  212.134.56.0-212.134.58.255
                  212.134.80.0-212.134.82.255
                  212.134.85.0/24
                  212.134.87.0-212.134.88.255
                  212.134.98.0/23
                  212.134.104.0/22
                  212.134.110.0/23
                  212.134.128.0-212.134.151.255
                  212.134.175.0/24
                  212.134.179.0/24
                  212.134.188.0/22
                  212.134.196.0/22
                  212.134.204.0/22
                  212.134.212.0-212.134.219.255
                  212.134.228.0-212.134.235.255
                  212.134.248.0/22
                  212.135.24.0/23
                  212.135.28.0/22
                  212.135.128.0/23
                  212.135.135.0/24
                  212.135.161.0-212.135.162.255
                  212.135.165.0-212.135.173.255
                  212.135.204.0/22
                  212.135.240.0/23
                  212.135.244.0/23
                  212.135.248.0/23
                  212.135.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:4e:9e:ee:7a:ff:d5:36:f7:67:7b:e1:87:e2:21:47:3e:
         c2:5d:01:9c:af:26:67:8b:4f:a6:6d:7a:6b:7e:86:03:5d:94:
         f4:d6:d0:04:cb:20:c4:ec:c2:b0:b0:f0:d8:db:d9:ff:b2:54:
         d7:69:71:20:d3:2c:b6:e1:24:e5:61:6f:bb:1b:de:53:03:22:
         14:ff:b0:85:53:dd:25:9c:e3:6b:a5:ee:e9:3c:ea:36:c2:4d:
         14:71:04:2e:94:4d:47:40:f6:15:5a:43:b1:5c:81:6d:94:8f:
         62:e4:bc:bf:aa:e7:31:73:a7:9f:0d:38:5b:93:20:5e:63:c8:
         82:b5:e4:5b:c7:37:54:88:00:6f:dc:ef:ab:6b:d3:da:c5:0e:
         c5:44:43:eb:fd:23:30:f4:3f:98:37:9e:81:ea:39:1a:1d:eb:
         f9:dc:00:61:7f:03:c1:cb:dc:b6:7f:d3:f3:30:4e:d4:50:80:
         0a:7f:d8:9a:bb:16:70:f2:4e:0d:7f:7f:63:22:42:de:84:a9:
         f2:c6:ae:12:ba:2a:20:e7:ed:a2:f2:b7:a9:30:b8:cb:ab:06:
         6b:98:bc:f6:42:b6:d9:2b:c6:d5:bc:05:d0:b0:2e:ea:36:19:
         ea:39:38:34:d9:c3:e7:af:d3:7d:ab:23:58:54:a9:b1:9c:4b:
         a9:36:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:32:07 2025 by rpki-client