This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xbnCLtc1xwgQJroc8oixtLcWbpg.roa
File:                     xbnCLtc1xwgQJroc8oixtLcWbpg.roa (raw, json)
Hash identifier:          m5p1Tsx0lOvkay8gFeIgDNGq0rjDbUI9ooVAncqHA28=
Subject key identifier:   C5:B9:C2:2E:D7:35:C7:08:10:26:BA:1C:F2:88:B1:B4:B7:16:6E:98
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019C188A21939DDDA73994014FB91AEE728A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xbnCLtc1xwgQJroc8oixtLcWbpg.roa
Signing time:             Sun 01 Feb 2026 09:30:31 +0000
ROA not before:           Sun 01 Feb 2026 09:30:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198584
IP address blocks:        31.58.231.0/24 maxlen: 24
                          94.183.158.0/24 maxlen: 24
                          217.60.192.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 03 Feb 2026 09:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:18:8a:21:93:9d:dd:a7:39:94:01:4f:b9:1a:ee:72:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Feb  1 09:30:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c5b9c22ed735c7081026ba1cf288b1b4b7166e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:c3:2a:98:d5:55:8e:7b:3b:92:04:c2:3e:
                    f1:28:2e:a6:3f:25:4f:eb:68:d5:a1:52:e6:33:e8:
                    2c:5c:e1:14:ef:7a:74:87:c8:ea:83:dc:b7:2f:10:
                    04:e5:e6:5e:0e:1e:27:e3:20:b8:ef:b7:30:84:13:
                    9f:14:f0:95:da:b7:0d:53:30:35:6f:a4:d4:17:a0:
                    b2:11:75:bb:4d:54:6e:56:0b:47:fc:69:24:10:b4:
                    30:53:6e:9d:df:43:ee:bb:86:40:c5:2c:bf:cf:0b:
                    c0:5c:e4:9a:e8:09:1f:ed:4c:4a:87:4c:a9:52:d5:
                    4a:fd:ad:8d:18:cf:55:ba:e5:ff:11:a9:79:83:f3:
                    bd:a8:b5:17:ef:f6:3f:fd:a9:a3:d7:1f:93:7c:3c:
                    71:2b:99:85:09:4f:86:a4:0d:26:f8:c1:d1:ed:88:
                    5b:a1:cc:89:77:fa:36:81:8c:60:65:aa:ac:6a:f0:
                    25:73:27:fe:78:7c:ba:48:4d:81:81:96:05:32:0a:
                    64:4a:0c:d5:20:51:19:9e:36:85:c2:d4:de:e1:05:
                    3b:0d:9c:09:7e:dd:28:83:8d:a0:9a:cd:3b:a4:3b:
                    76:e5:fd:f0:c0:0d:5a:af:f3:93:5f:8c:f7:c3:47:
                    8e:fc:3a:2b:00:f4:dd:5c:b3:93:59:95:92:41:e9:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B9:C2:2E:D7:35:C7:08:10:26:BA:1C:F2:88:B1:B4:B7:16:6E:98
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xbnCLtc1xwgQJroc8oixtLcWbpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.58.231.0/24
                  94.183.158.0/24
                  217.60.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:c0:12:61:f8:99:87:40:86:c6:10:84:f8:94:23:96:cb:
         a7:1e:b1:f8:67:7f:91:20:d7:a9:c9:81:2e:6b:91:33:44:68:
         ea:e4:80:b6:10:81:ae:1d:7d:c1:83:1c:df:20:92:52:9c:90:
         0b:14:4f:6a:50:c0:81:ef:1b:b2:d0:5a:93:23:85:86:d3:c1:
         d7:ba:4c:a2:c8:60:84:58:31:ab:d3:f3:55:24:52:a4:31:7e:
         f5:bb:4e:a5:3d:a3:5b:b1:45:2b:ae:65:a9:39:ae:e3:e6:15:
         dc:f3:7d:16:e1:61:f7:09:dc:33:30:12:4f:e9:72:31:61:fe:
         a5:c9:2b:cc:c3:03:83:94:9d:ca:6b:95:bf:25:f4:66:2d:de:
         dd:0c:54:1d:2f:53:3c:08:67:50:e8:b5:21:83:dd:a5:d4:ae:
         9f:3f:db:fd:76:ad:7a:65:a9:ee:0d:79:86:41:a5:dc:fd:c6:
         f0:8b:c6:60:66:2e:4f:35:50:59:d2:f3:e9:f5:24:53:78:ee:
         65:cd:32:67:46:b0:e5:02:9d:e8:d0:2a:02:75:7d:3f:f8:7a:
         6f:3d:cc:1f:99:67:00:90:0b:c7:3b:0e:86:12:b9:79:f0:9b:
         97:0f:8e:ce:5a:e5:e6:20:1e:d6:1d:31:a3:18:66:9b:c2:cd:
         9b:91:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 12:36:46 2026 by rpki-client