This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYaNudgA2NoH4m1dr67hNzpeEPM.roa
File:                     tYaNudgA2NoH4m1dr67hNzpeEPM.roa (raw, json)
Hash identifier:          Ipy0mKTEOfAGr2JPs2OkHgk68lU8wUpYz3pQMrgeXlE=
Subject key identifier:   B5:86:8D:B9:D8:00:D8:DA:07:E2:6D:5D:AF:AE:E1:37:3A:5E:10:F3
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       01987DB01BE02475971F1D2EAE173D2ED123
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYaNudgA2NoH4m1dr67hNzpeEPM.roa
Signing time:             Wed 06 Aug 2025 04:42:30 +0000
ROA not before:           Wed 06 Aug 2025 04:42:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18733
IP address blocks:        151.241.96.0/20 maxlen: 24
                          151.241.224.0/19 maxlen: 24
Validation:               Failed, certificate revoked on Fri 22 Aug 2025 11:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:b0:1b:e0:24:75:97:1f:1d:2e:ae:17:3d:2e:d1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Aug  6 04:42:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5868db9d800d8da07e26d5dafaee1373a5e10f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:15:a7:d2:fb:bb:a8:a6:0a:52:d9:1a:1e:
                    ed:11:cf:67:50:97:9d:53:cd:6b:ca:c4:fd:a3:24:
                    fd:10:7b:fd:81:9e:fa:68:8a:f0:b3:6e:94:d2:83:
                    b4:38:72:51:d2:1c:6a:e4:eb:44:aa:c5:99:ea:95:
                    71:1b:6a:f3:7b:a0:0b:5e:2c:22:a9:cd:02:15:9b:
                    cd:85:f5:d0:5c:46:6d:3d:50:0d:b7:f2:6d:c2:d5:
                    7a:46:3b:bd:35:6c:0a:38:0a:a7:b4:4f:54:1f:d4:
                    9a:89:c7:d9:32:1f:4b:83:ac:48:66:6b:ec:da:63:
                    dc:29:ae:2b:e5:94:a0:ee:87:86:5b:09:b9:c4:5a:
                    8f:3b:f4:9a:2d:87:b7:08:cb:5f:c0:68:c1:c6:8a:
                    fa:af:1a:90:59:04:b9:50:ad:d3:30:28:c5:14:1f:
                    5d:f2:8e:30:60:38:a3:fb:85:44:e0:b9:f3:85:32:
                    0b:d5:df:ac:85:54:ea:7a:47:37:c3:74:c8:82:36:
                    d3:78:3c:48:b3:08:09:77:7d:e4:63:f0:bf:ac:a3:
                    50:e7:05:55:dd:79:a7:b7:85:32:1d:3b:56:be:fb:
                    79:55:cf:d0:cf:0b:cd:02:40:e4:52:21:d4:24:10:
                    8c:ab:97:95:cd:6e:f7:b9:d8:30:cb:80:4a:48:7b:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:86:8D:B9:D8:00:D8:DA:07:E2:6D:5D:AF:AE:E1:37:3A:5E:10:F3
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYaNudgA2NoH4m1dr67hNzpeEPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.241.96.0/20
                  151.241.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:24:cd:0b:f6:69:7f:e2:4f:ff:f4:b9:bf:16:87:5c:51:
         b1:cf:da:b7:40:d5:29:86:d2:6a:9e:85:55:87:e3:5f:67:4f:
         b9:a7:10:03:45:12:94:b8:07:e6:45:da:d4:a4:68:63:c5:9b:
         d3:37:b4:11:6e:b6:ce:17:4a:76:8b:f9:40:c3:b2:f2:8b:5d:
         27:cc:e7:e6:d6:65:26:d9:c8:89:9f:34:71:e8:b1:05:a9:4b:
         73:a7:be:a5:b0:6a:29:bd:28:c7:58:6a:82:57:a1:d5:5e:33:
         38:9e:26:20:c7:65:93:5d:1d:c8:ce:58:22:59:5d:48:dc:1f:
         b5:25:1d:30:bc:37:ed:70:29:0a:2b:48:6b:88:1e:17:57:f6:
         82:59:24:fc:50:5e:8f:d8:89:e5:cd:66:1e:2c:02:84:29:e2:
         1e:e4:f8:50:1c:5f:27:43:06:de:ab:a6:cd:9a:f1:9f:e3:8c:
         e1:4d:6f:4e:8b:bd:b1:53:42:1e:b4:db:10:28:9e:81:17:3c:
         5d:c3:f1:35:07:7f:a6:75:9a:41:52:95:cc:f1:c1:e7:2f:7f:
         9e:4d:73:c0:f0:a0:e2:90:49:27:da:04:e6:12:55:8a:b7:2a:
         05:25:bf:62:a0:d9:87:f4:f4:d6:94:ff:27:90:e8:da:72:cf:
         64:2d:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:18:09 2025 by rpki-client