This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/88x-TfBM_okSj6Vmsoxxvf9pEdQ.roa
File:                     88x-TfBM_okSj6Vmsoxxvf9pEdQ.roa (raw, json)
Hash identifier:          MyuXZvCffqPkmeAG9vvnNl7GUs7HX0KJaCBcaanh1/c=
Subject key identifier:   F3:CC:7E:4D:F0:4C:FE:89:12:8F:A5:66:B2:8C:71:BD:FF:69:11:D4
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       0194266BF55524DACF4403A43DF72DA22086
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/88x-TfBM_okSj6Vmsoxxvf9pEdQ.roa
Signing time:             Thu 02 Jan 2025 09:49:56 +0000
ROA not before:           Thu 02 Jan 2025 09:49:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57795
IP address blocks:        45.154.45.0/24 maxlen: 24
                          45.154.46.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 14 Jan 2025 09:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:f5:55:24:da:cf:44:03:a4:3d:f7:2d:a2:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Jan  2 09:49:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3cc7e4df04cfe89128fa566b28c71bdff6911d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:3b:1a:45:02:5c:78:cc:3b:19:b8:69:53:
                    5d:21:69:d5:3d:a8:43:77:91:26:3b:2d:e5:d9:7b:
                    5c:95:bd:1e:cd:40:cd:19:93:53:78:19:a3:dd:f7:
                    08:f1:e5:2e:87:2f:7e:8d:b6:9e:a2:58:4f:35:29:
                    75:74:8a:76:24:18:9d:b8:c4:42:ec:66:a9:20:1b:
                    54:16:f9:e4:73:b8:e8:b1:e7:bb:d9:ab:3c:fb:1c:
                    c7:f9:8f:c8:3a:12:39:47:41:5b:2b:62:aa:47:6f:
                    9b:d5:c9:e0:74:cd:68:bf:45:4d:b6:4c:0a:44:88:
                    73:3d:2e:6a:27:27:41:f2:95:a4:9d:42:cd:b9:a9:
                    cc:b7:97:ac:a1:0d:a5:3e:fa:16:0a:1c:ce:9a:b3:
                    95:b6:64:86:8d:fd:fd:1c:09:df:52:90:bf:c2:11:
                    4f:9a:c1:40:c2:2d:84:21:d1:10:35:9c:23:b2:71:
                    d1:d7:e2:8c:bb:b0:fb:cb:37:5c:44:cc:5a:57:0c:
                    1d:79:79:71:5a:c2:5d:ad:82:b6:06:76:37:19:41:
                    69:a6:46:23:98:bf:e1:0b:a5:c1:df:9c:d5:d9:b4:
                    fb:85:25:49:6a:4d:b7:eb:90:a1:0e:f3:aa:5b:28:
                    91:26:d3:18:6c:7a:4a:0c:95:bb:c2:77:d7:47:02:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:7E:4D:F0:4C:FE:89:12:8F:A5:66:B2:8C:71:BD:FF:69:11:D4
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/88x-TfBM_okSj6Vmsoxxvf9pEdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.45.0-45.154.46.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:15:d8:ab:9f:00:08:87:dd:28:ee:51:a5:37:b3:b6:59:
         12:1d:9c:a8:5a:fb:ba:64:ed:8d:27:65:1f:be:eb:95:e8:9b:
         4f:57:a9:a1:01:45:f5:66:09:6d:c9:90:9c:77:5f:11:9d:65:
         a2:6e:d0:33:a9:43:0d:3a:35:33:01:47:ea:b5:e0:cd:8d:ec:
         aa:02:e7:4e:0b:ed:f1:b7:58:f8:ed:c0:93:6a:61:56:50:69:
         e1:79:d3:4c:9a:6f:f6:bc:42:4e:9a:2d:a0:fa:b0:b5:2f:39:
         d4:72:85:bf:78:2b:b1:d0:1f:11:83:bf:06:7c:6c:44:67:9b:
         ee:dc:9b:f1:fa:e1:68:65:c8:7e:0f:a0:45:aa:a8:97:9d:c8:
         9c:7e:95:12:57:ef:73:04:a7:26:41:e1:28:08:76:b8:22:0f:
         28:eb:9b:11:22:28:3e:b4:2c:91:0e:fc:1d:3b:b6:85:1b:c9:
         f7:0d:78:24:2d:d0:cb:8c:1f:f8:4e:48:20:ea:98:36:63:a8:
         23:06:1a:8e:7f:93:7d:75:8f:6e:e8:66:a4:f9:b4:0d:22:96:
         e5:8e:12:6f:03:79:1e:79:0b:19:3b:c4:e8:e1:46:68:e0:ff:
         58:88:92:ad:6c:4f:45:96:a3:04:cb:f8:aa:b0:9d:e3:bc:66:
         78:ba:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:12:11 2025 by rpki-client