This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OwYcYqdAvnYP9vES5IimIo7FO1w.roa
File:                     OwYcYqdAvnYP9vES5IimIo7FO1w.roa (raw, json)
Hash identifier:          HN4d9B/SEDDXSeLBPInNagttaz3Lx8778GU0s64Wmwc=
Subject key identifier:   3B:06:1C:62:A7:40:BE:76:0F:F6:F1:12:E4:88:A6:22:8E:C5:3B:5C
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01971298D6FEB408D0EBE547217E8EFB839B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OwYcYqdAvnYP9vES5IimIo7FO1w.roa
Signing time:             Tue 27 May 2025 16:34:55 +0000
ROA not before:           Tue 27 May 2025 16:34:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205544
IP address blocks:        2a09:17c0:b19a::/48 maxlen: 48
                          2a0e:1a83:88::/48 maxlen: 48
                          2a0f:1206:77::/48 maxlen: 48
                          2a0f:e1c0:3::/48 maxlen: 48
                          2a0f:e1c7:100::/48 maxlen: 48
                          2a0f:e200:5::/48 maxlen: 48
                          2a0f:e202:97::/48 maxlen: 48
                          2a0f:e440::/29 maxlen: 29
                          2a0f:ea40:8::/48 maxlen: 48
                          2a0f:ea44:88::/48 maxlen: 48
                          2a0f:ea47:ff49::/48 maxlen: 48
                          2a12:ecc0:3::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 24 Jun 2025 18:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:12:98:d6:fe:b4:08:d0:eb:e5:47:21:7e:8e:fb:83:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 27 16:34:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b061c62a740be760ff6f112e488a6228ec53b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:08:92:70:a1:44:ac:62:bd:79:f9:0d:1c:
                    10:15:03:38:d5:79:8a:5d:bd:39:22:7c:88:6e:a0:
                    67:58:81:55:e3:cd:ff:a1:f9:9d:c9:e6:3d:4a:8f:
                    97:27:c3:9d:f4:cc:50:54:85:53:ff:5c:d4:14:14:
                    8a:ce:60:52:48:a4:c8:a1:f7:25:0d:ce:ab:8d:23:
                    44:60:75:6d:de:68:f9:ab:f6:b3:f0:5c:42:34:a7:
                    96:14:1c:5f:bf:09:7a:47:02:ef:39:22:f3:10:44:
                    f6:05:53:5c:6c:e2:94:79:a8:79:29:07:e2:c0:de:
                    c2:e5:83:47:d5:f7:2a:b8:cd:e9:d5:51:ef:f7:c8:
                    21:d6:b0:1e:46:e0:1d:8a:8e:46:b2:a2:69:d5:ff:
                    68:e0:dc:6d:3c:81:46:e9:6e:72:4e:82:d0:39:40:
                    f2:8c:79:ec:a8:22:14:bc:57:78:16:ab:46:00:16:
                    45:08:9c:45:70:98:13:53:22:ad:27:0d:00:3a:3c:
                    59:00:e7:ef:bf:d4:57:9b:5a:47:01:6b:e6:28:d5:
                    d6:63:94:23:6e:9d:45:fd:c2:4f:aa:dd:41:3f:d2:
                    e2:83:58:03:a0:a6:07:05:8e:03:0e:97:4e:88:b8:
                    24:37:7e:2f:15:60:68:7a:6a:1d:38:d2:1b:0a:93:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:1C:62:A7:40:BE:76:0F:F6:F1:12:E4:88:A6:22:8E:C5:3B:5C
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OwYcYqdAvnYP9vES5IimIo7FO1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:17c0:b19a::/48
                  2a0e:1a83:88::/48
                  2a0f:1206:77::/48
                  2a0f:e1c0:3::/48
                  2a0f:e1c7:100::/48
                  2a0f:e200:5::/48
                  2a0f:e202:97::/48
                  2a0f:e440::/29
                  2a0f:ea40:8::/48
                  2a0f:ea44:88::/48
                  2a0f:ea47:ff49::/48
                  2a12:ecc0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:c7:9f:10:31:a8:12:0d:4d:2a:e7:bb:1d:02:fa:ff:2e:
         65:93:9e:78:0f:fc:7c:1c:d6:93:92:a8:02:bd:fd:bc:43:53:
         92:62:d4:f0:bf:9c:7c:d5:79:ed:bf:d8:3f:04:24:4f:1e:9c:
         46:55:18:8e:54:dc:c6:36:30:f8:22:d7:a5:35:79:f7:84:e1:
         d1:ba:db:47:8a:d4:12:17:e6:4b:6d:09:db:be:eb:a3:78:8e:
         e7:6d:b5:56:67:2f:34:95:69:4e:f8:e5:6f:5d:d1:6a:a7:b5:
         5a:b2:60:46:84:b1:c6:3a:99:f9:60:61:44:c1:af:aa:c3:47:
         d0:16:94:8c:ee:b4:32:21:bb:ed:56:9a:d1:5a:ce:a6:da:0d:
         43:16:de:97:fd:6b:34:8e:26:e1:32:3f:de:b8:92:cc:33:3b:
         72:54:b6:de:ac:9a:7f:ab:6c:ea:93:27:56:68:39:17:9e:d4:
         0e:d3:3f:d5:c6:f9:dd:02:81:54:da:15:e8:dd:03:27:d9:a5:
         32:3e:f0:ba:63:17:67:02:f7:72:5c:66:6d:84:e4:32:30:f8:
         14:cf:a2:4b:47:8f:79:03:96:81:87:09:db:ed:20:cf:c8:cc:
         42:7b:a9:c2:9c:75:f4:5d:36:f5:5e:03:a9:db:f2:7c:e4:02:
         80:83:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----