This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uUBjzy2StU3R10m027PD67DsD3w.roa
File:                     uUBjzy2StU3R10m027PD67DsD3w.roa (raw, json)
Hash identifier:          QxX1yXohTjVA7eSkacGyRnOHQAhTE7rcQgmnhg9kyzk=
Subject key identifier:   B9:40:63:CF:2D:92:B5:4D:D1:D7:49:B4:DB:B3:C3:EB:B0:EC:0F:7C
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019B78A2140B751892EAD2B42FC286A8EB36
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uUBjzy2StU3R10m027PD67DsD3w.roa
Signing time:             Thu 01 Jan 2026 08:17:26 +0000
ROA not before:           Thu 01 Jan 2026 08:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        2001:3080::/29 maxlen: 29
                          2a0e:a780::/29 maxlen: 29
                          2a10:9600::/29 maxlen: 29
                          2a13:8000::/29 maxlen: 29
                          2a13:b640::/29 maxlen: 29
                          2a13:b840::/29 maxlen: 29
                          2a13:d2c0::/29 maxlen: 29
                          2a13:de40::/29 maxlen: 29
                          2a14:6bc0::/29 maxlen: 29
                          2a14:72c0::/29 maxlen: 29
Validation:               Failed, certificate revoked on Wed 07 Jan 2026 18:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:14:0b:75:18:92:ea:d2:b4:2f:c2:86:a8:eb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jan  1 08:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b94063cf2d92b54dd1d749b4dbb3c3ebb0ec0f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cc:d1:df:02:ba:c5:d5:6a:b7:58:d5:09:37:
                    bc:6b:39:76:87:ea:61:aa:38:04:04:b6:5f:88:1f:
                    f6:25:f2:91:94:9e:b8:4b:a0:53:85:be:c7:4c:2d:
                    1b:2c:46:50:38:8d:0c:72:8b:56:98:49:1f:ff:d6:
                    6f:9d:1a:06:4c:8b:44:1a:09:b0:b7:71:f7:44:c8:
                    db:0f:2f:85:39:fb:14:04:dd:4f:59:00:45:e8:7b:
                    fc:13:46:7d:69:b2:79:cb:b0:d6:e5:ea:e6:34:ca:
                    25:4b:a6:0c:25:91:e5:4b:13:64:2d:9c:64:76:70:
                    95:f4:ce:2d:c6:45:d9:fa:13:16:85:73:d9:50:de:
                    2e:5b:77:0c:7f:05:8f:d3:27:ae:97:24:6c:8c:49:
                    52:20:96:e0:2f:95:87:f4:cc:ab:7e:a2:c3:f6:2a:
                    9f:1b:93:aa:ce:a0:f1:20:96:ed:79:f4:bc:3d:f2:
                    73:9e:3e:fc:9a:51:fb:54:dd:66:ed:f3:f8:92:2a:
                    eb:9d:f2:a2:b0:5f:ca:ed:1e:54:58:a0:d2:01:a5:
                    59:79:ee:61:77:2d:35:d5:a6:7c:c0:2f:ea:74:40:
                    1d:29:97:21:63:d2:38:3a:65:ac:e3:a9:1a:03:7e:
                    7f:df:fa:71:19:51:06:93:d1:85:d5:b5:e1:4a:5b:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:63:CF:2D:92:B5:4D:D1:D7:49:B4:DB:B3:C3:EB:B0:EC:0F:7C
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uUBjzy2StU3R10m027PD67DsD3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3080::/29
                  2a0e:a780::/29
                  2a10:9600::/29
                  2a13:8000::/29
                  2a13:b640::/29
                  2a13:b840::/29
                  2a13:d2c0::/29
                  2a13:de40::/29
                  2a14:6bc0::/29
                  2a14:72c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:e0:8b:79:42:12:cc:bc:36:b5:b1:4a:04:ee:08:71:be:
         e3:6a:af:fc:42:70:97:32:30:06:e6:37:79:6a:16:17:28:24:
         2a:57:76:d5:9f:4b:1e:fe:8c:be:68:4a:b9:0d:a7:37:72:9f:
         4d:11:37:5d:5f:d2:9a:83:88:98:77:24:c1:d8:33:4d:11:37:
         a1:16:5e:6c:97:cc:b1:55:06:34:52:42:7d:57:f1:c6:6b:a6:
         c0:61:c9:25:51:0c:e6:bf:63:bb:b1:fc:7e:74:47:99:2f:64:
         03:52:66:e4:99:a0:f0:0d:cc:ef:7b:99:dc:37:37:db:96:31:
         49:04:8d:1f:42:d9:d4:e2:e3:2e:f9:34:43:d3:d5:42:2f:af:
         28:5a:ee:c7:ac:27:9c:e7:3c:86:cc:63:e0:48:4a:13:6c:41:
         5d:33:ba:79:7e:d5:37:bf:a7:9e:aa:42:cc:81:46:5f:c3:fe:
         23:b9:0b:b4:9d:27:3b:05:e6:56:45:99:f2:67:a6:fe:fc:29:
         f2:17:8d:fb:bf:d1:b4:50:03:46:42:49:92:d2:12:3a:ea:1a:
         0e:42:4e:c9:52:51:f4:ff:d4:78:15:f8:74:58:25:05:2e:7a:
         b8:e9:0d:51:bd:23:0e:e6:70:fa:39:b8:4b:52:fd:e5:9b:a3:
         32:17:98:b7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZt4ohQLdRiS6tK0L8KGqOs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTQwNjNjZjJkOTJiNTRkZDFkNzQ5YjRkYmIzYzNlYmIwZWMwZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78zR3wK6xdVqt1jVCTe8azl2h+ph
qjgEBLZfiB/2JfKRlJ64S6BThb7HTC0bLEZQOI0McotWmEkf/9ZvnRoGTItEGgmw
t3H3RMjbDy+FOfsUBN1PWQBF6Hv8E0Z9abJ5y7DW5ermNMolS6YMJZHlSxNkLZxk
dnCV9M4txkXZ+hMWhXPZUN4uW3cMfwWP0yeulyRsjElSIJbgL5WH9MyrfqLD9iqf
G5OqzqDxIJbtefS8PfJznj78mlH7VN1m7fP4kirrnfKisF/K7R5UWKDSAaVZee5h
dy011aZ8wC/qdEAdKZchY9I4OmWs46kaA35/3/pxGVEGk9GF1bXhSlv+zQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFLlAY88tkrVN0ddJtNuzw+uw7A98MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvdVVCanp5MlN0VTNSMTBtMDI3UEQ2N0RzRDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDIAEwgAMF
AyoOp4ADBQMqEJYAAwUDKhOAAAMFAyoTtkADBQMqE7hAAwUDKhPSwAMFAyoT3kAD
BQMqFGvAAwUDKhRywDANBgkqhkiG9w0BAQsFAAOCAQEAk5/gi3lCEsy8NrWxSgTu
CHG+42qv/EJwlzIwBuY3eWoWFygkKld21Z9LHv6MvmhKuQ2nN3KfTRE3XV/SmoOI
mHckwdgzTRE3oRZebJfMsVUGNFJCfVfxxmumwGHJJVEM5r9ju7H8fnRHmS9kA1Jm
5Jmg8A3M73uZ3Dc325YxSQSNH0LZ1OLjLvk0Q9PVQi+vKFrux6wnnOc8hsxj4EhK
E2xBXTO6eX7VN7+nnqpCzIFGX8P+I7kLtJ0nOwXmVkWZ8mem/vwp8heN+7/RtFAD
RkJJktISOuoaDkJOyVJR9P/UeBX4dFglBS56uOkNUb0jDuZw+jm4S1L95ZujMheY
tw==
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:45 2026 by rpki-client