This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa
File:                     nMdYjkElI3d6qEHmTPrRWiWITl4.roa (raw, json)
Hash identifier:          Mn8tlnYkd2XzrN46T8ZRCSaCYKdBShQNw/ozND8vVaE=
Subject key identifier:   9C:C7:58:8E:41:25:23:77:7A:A8:41:E6:4C:FA:D1:5A:25:88:4E:5E
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       01973A3A22AA9702204505970B8C519BA426
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa
Signing time:             Wed 04 Jun 2025 09:16:17 +0000
ROA not before:           Wed 04 Jun 2025 09:16:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12548
IP address blocks:        212.68.160.0/22 maxlen: 22
                          212.68.172.0/22 maxlen: 22
                          212.68.172.0/24 maxlen: 24
                          212.68.173.0/24 maxlen: 24
                          212.68.174.0/24 maxlen: 24
                          212.68.175.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 04 Jun 2025 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3a:3a:22:aa:97:02:20:45:05:97:0b:8c:51:9b:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Jun  4 09:16:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9cc7588e412523777aa841e64cfad15a25884e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:97:fc:2f:84:8e:4f:1a:c6:0a:56:a3:c2:
                    ac:af:85:f2:69:1f:f2:42:b2:93:02:1d:b6:da:7e:
                    b2:da:9c:32:aa:8c:f8:20:09:57:c1:85:40:53:7f:
                    67:db:38:4c:a6:e0:d1:0a:5b:41:e0:8b:3d:d2:05:
                    5a:a3:1a:88:43:08:33:00:46:61:d9:ff:38:3f:7a:
                    c2:62:25:c0:1b:4e:e6:6b:0c:9c:a1:49:e5:45:01:
                    4e:66:d8:9f:6e:e2:13:db:6d:28:17:3c:9b:f6:d9:
                    da:3e:1d:cb:ae:9c:dd:fe:05:fd:d2:f3:ee:88:aa:
                    cf:94:d2:d9:b2:c5:09:6c:10:2b:36:2a:9e:ea:61:
                    a2:83:81:26:ed:68:7a:69:f9:3f:41:75:65:09:29:
                    e9:64:1e:eb:4d:45:df:5b:97:a7:c6:b2:44:c7:45:
                    63:1d:bb:05:85:2e:5d:48:4a:78:23:f9:93:e8:53:
                    f7:5a:7a:fc:29:61:b6:8b:f6:96:7d:8c:cb:eb:02:
                    ef:5c:fa:2a:fd:ab:aa:fe:15:bc:fa:3f:55:b4:eb:
                    86:ac:a9:b3:08:10:65:4b:00:d6:c2:72:92:68:a5:
                    ec:2c:66:c2:8a:a2:11:9c:3a:21:6f:2b:72:eb:85:
                    82:79:bb:d4:0d:68:15:9d:a3:fd:d2:88:1c:6a:a7:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C7:58:8E:41:25:23:77:7A:A8:41:E6:4C:FA:D1:5A:25:88:4E:5E
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.68.160.0/22
                  212.68.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:5d:3e:c7:01:8c:dd:ee:d6:02:a2:91:4b:50:7e:d3:0e:
         e0:d5:a1:06:54:6a:cd:df:e9:cb:17:44:b0:47:24:40:82:5e:
         60:10:c1:46:31:2f:93:8c:a6:7d:cb:a4:6e:dc:82:8b:bc:ec:
         48:ff:4b:82:36:a5:46:72:5e:6c:a6:e9:3e:f3:1e:24:8d:00:
         b9:04:d6:26:4c:0e:50:7c:dc:44:c1:89:b1:14:93:f0:c4:f8:
         fe:71:df:34:28:d5:c4:a9:93:b4:0f:43:d1:c9:33:9a:98:e9:
         b4:69:bc:bd:2c:bc:c1:a5:e8:e5:73:50:93:37:a4:05:bf:91:
         d2:d5:52:2b:b0:ea:95:ec:d4:f1:b7:19:57:11:43:31:54:12:
         d9:8f:9d:20:76:5e:fe:17:00:34:19:81:6c:de:2e:44:ec:72:
         14:b4:32:5f:20:8c:a1:d6:cd:f2:5e:2f:34:75:d8:9f:f7:4d:
         18:8c:c0:b7:40:43:69:73:d0:df:1c:e7:31:b8:a1:0d:8a:d6:
         4f:b0:5a:0f:80:e7:3c:4e:27:9b:34:a5:be:50:a7:21:fe:71:
         03:81:62:a6:93:e3:db:8b:eb:bb:0d:e9:9b:c5:65:90:b4:ee:
         07:a7:18:f6:0f:1f:1e:2e:c8:27:da:e6:4c:ac:63:6b:27:95:
         cf:e9:68:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZc6OiKqlwIgRQWXC4xRm6QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3
Njg5YWMwHhcNMjUwNjA0MDkxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2M3NTg4ZTQxMjUyMzc3N2FhODQxZTY0Y2ZhZDE1YTI1ODg0ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pGX/C+Ejk8axgpWo8Ksr4XyaR/y
QrKTAh222n6y2pwyqoz4IAlXwYVAU39n2zhMpuDRCltB4Is90gVaoxqIQwgzAEZh
2f84P3rCYiXAG07mawycoUnlRQFOZtifbuIT220oFzyb9tnaPh3Lrpzd/gX90vPu
iKrPlNLZssUJbBArNiqe6mGig4Em7Wh6afk/QXVlCSnpZB7rTUXfW5enxrJEx0Vj
HbsFhS5dSEp4I/mT6FP3Wnr8KWG2i/aWfYzL6wLvXPoq/auq/hW8+j9VtOuGrKmz
CBBlSwDWwnKSaKXsLGbCiqIRnDohbyty64WCebvUDWgVnaP90ogcaqeazQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJzHWI5BJSN3eqhB5kz60VoliE5eMB8GA1UdIwQY
MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct
NTVjNDM0ZWVjOTZjLzEvbk1kWWprRWxJM2Q2cUVIbVRQclJXaVdJVGw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj
LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1ESgAwQC
1ESsMA0GCSqGSIb3DQEBCwUAA4IBAQCMl10+xwGM3e7WAqKRS1B+0w7g1aEGVGrN
3+nLF0SwRyRAgl5gEMFGMS+TjKZ9y6Ru3IKLvOxI/0uCNqVGcl5spuk+8x4kjQC5
BNYmTA5QfNxEwYmxFJPwxPj+cd80KNXEqZO0D0PRyTOamOm0aby9LLzBpejlc1CT
N6QFv5HS1VIrsOqV7NTxtxlXEUMxVBLZj50gdl7+FwA0GYFs3i5E7HIUtDJfIIyh
1s3yXi80ddif900YjMC3QENpc9DfHOcxuKENitZPsFoPgOc8TiebNKW+UKch/nED
gWKmk+Pbi+u7DembxWWQtO4Hpxj2Dx8eLsgn2uZMrGNrJ5XP6Wgs
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:49:30 2025 by rpki-client