This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa
File:                     NCp2dRyECDq1-aGO1LFnNuUHYqs.roa (raw, json)
Hash identifier:          VmEoNl977NCbes6GuVG4fCMEtK8saXqQUbDMVtl9tzo=
Subject key identifier:   34:2A:76:75:1C:84:08:3A:B5:F9:A1:8E:D4:B1:67:36:E5:07:62:AB
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B8ECCBA51D42A21AB8442A16C671800FA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa
Signing time:             Mon 05 Jan 2026 15:35:40 +0000
ROA not before:           Mon 05 Jan 2026 15:35:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        31.56.211.0/24 maxlen: 24
                          31.57.96.0/24 maxlen: 24
                          31.57.200.0/24 maxlen: 24
                          31.58.180.0/22 maxlen: 24
                          31.58.184.0/21 maxlen: 24
                          31.58.192.0/22 maxlen: 24
                          31.58.239.0/24 maxlen: 24
                          31.59.84.0/22 maxlen: 24
                          31.59.90.0/23 maxlen: 24
                          31.59.92.0/22 maxlen: 24
                          94.183.151.0/24 maxlen: 24
                          94.183.158.0/24 maxlen: 24
                          94.183.164.0/24 maxlen: 24
                          94.183.174.0/24 maxlen: 24
                          94.183.175.0/24 maxlen: 24
                          94.183.176.0/24 maxlen: 24
                          94.183.180.0/24 maxlen: 24
                          94.183.181.0/24 maxlen: 24
                          217.60.15.0/24 maxlen: 24
                          217.60.160.0/20 maxlen: 24
                          217.60.176.0/21 maxlen: 24
                          217.60.188.0/22 maxlen: 24
                          217.60.199.0/24 maxlen: 24
                          217.60.208.0/20 maxlen: 24
                          217.60.224.0/21 maxlen: 24
                          217.60.232.0/22 maxlen: 24
                          217.60.237.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 Jan 2026 16:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8e:cc:ba:51:d4:2a:21:ab:84:42:a1:6c:67:18:00:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  5 15:35:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=342a76751c84083ab5f9a18ed4b16736e50762ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:35:00:ca:8a:68:05:15:d3:86:8f:bd:15:
                    37:4f:ca:dc:5a:81:85:c8:a6:96:4f:48:99:4e:48:
                    25:88:c1:37:38:89:d1:0b:7e:79:b4:87:07:ff:b4:
                    04:8d:54:57:39:89:63:bc:67:53:80:70:aa:4a:75:
                    38:0d:9e:87:2e:b2:6f:8e:62:0b:84:4f:32:8a:c6:
                    f1:f5:58:03:66:84:1c:ab:25:2f:8d:c2:93:eb:48:
                    45:51:c5:d5:61:a1:6e:71:2d:35:5d:44:11:6b:f5:
                    11:f8:81:a4:70:05:35:19:8e:6c:8f:ee:e9:67:50:
                    cb:63:78:c3:1d:dd:7d:e7:65:9f:e1:67:a5:69:6f:
                    fa:ad:ce:77:43:db:34:36:2f:5d:48:52:49:79:7c:
                    29:28:34:93:79:37:56:2b:4a:f7:fb:f4:8c:30:0b:
                    96:64:cf:ff:32:e9:2b:e4:6b:b3:3d:b0:f3:a5:78:
                    27:fc:bd:11:1a:83:39:74:7a:8b:b8:fe:2d:f9:bf:
                    11:dd:7c:8c:7a:ac:fc:3e:c1:ae:bc:d2:a4:b0:58:
                    7d:72:c0:56:4a:d1:81:dd:9b:81:e8:b6:57:62:2c:
                    09:b9:74:0b:a2:3b:1c:af:e3:0a:6d:e1:66:6b:33:
                    14:9e:41:93:21:f7:b3:7a:e7:4f:84:9b:fb:d3:56:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:76:75:1C:84:08:3A:B5:F9:A1:8E:D4:B1:67:36:E5:07:62:AB
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.211.0/24
                  31.57.96.0/24
                  31.57.200.0/24
                  31.58.180.0-31.58.195.255
                  31.58.239.0/24
                  31.59.84.0/22
                  31.59.90.0-31.59.95.255
                  94.183.151.0/24
                  94.183.158.0/24
                  94.183.164.0/24
                  94.183.174.0-94.183.176.255
                  94.183.180.0/23
                  217.60.15.0/24
                  217.60.160.0-217.60.183.255
                  217.60.188.0/22
                  217.60.199.0/24
                  217.60.208.0-217.60.235.255
                  217.60.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:37:37:62:2e:e4:92:f2:a7:3e:fb:34:40:05:bc:dc:8e:
         81:55:8c:88:69:aa:de:b3:4e:aa:24:83:11:26:cb:df:86:6a:
         a0:92:da:3a:85:b7:2f:12:c1:c1:86:d3:99:7b:b6:ab:ed:b8:
         fa:f9:d6:79:30:fd:ac:0b:e1:60:dd:ab:4a:b5:73:17:9e:2f:
         06:66:e5:86:cc:39:48:27:c5:12:fc:3d:3f:d8:52:d2:a9:24:
         44:48:4a:93:9d:b6:5d:7d:e8:8c:ba:d6:11:f0:f5:ca:44:5f:
         9b:04:5a:ed:68:e5:65:ea:68:86:ae:1a:0d:c9:0c:47:b4:03:
         e8:74:1b:68:5d:13:0f:a7:bc:14:41:e0:0f:e3:94:33:95:88:
         b4:86:b2:38:96:f3:e0:53:ff:3c:ca:50:44:9a:98:b9:4b:ae:
         a9:b4:92:ed:b7:1c:da:9b:f0:23:69:ed:fe:5b:29:e4:2c:39:
         7b:20:90:eb:09:cd:6e:45:da:77:5a:c1:c7:75:19:9d:c8:91:
         87:8a:25:13:9b:7c:fa:6d:ac:02:4c:2e:b0:da:22:7c:a5:01:
         e2:05:7c:0c:e9:92:c4:ef:fd:fb:b9:de:ff:37:4a:7f:5c:77:
         85:82:39:42:ce:05:99:17:fc:cf:42:09:96:eb:6e:47:54:62:
         cd:06:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:57:56 2026 by rpki-client