This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ck6dIa17iWTtaHJK2I1F1qXb5T8.roa
File:                     ck6dIa17iWTtaHJK2I1F1qXb5T8.roa (raw, json)
Hash identifier:          OgWwDuRtVLJDDCL+wvs4Pz7vE24yV/S+nftu4P6rG1A=
Subject key identifier:   72:4E:9D:21:AD:7B:89:64:ED:68:72:4A:D8:8D:45:D6:A5:DB:E5:3F
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019706557C0477C33C33381D6CDE0F58590A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ck6dIa17iWTtaHJK2I1F1qXb5T8.roa
Signing time:             Sun 25 May 2025 07:25:54 +0000
ROA not before:           Sun 25 May 2025 07:25:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209858
IP address blocks:        2a0f:ea45::/32 maxlen: 32
                          2a13:9f00::/29 maxlen: 29
Validation:               Failed, certificate revoked on Mon 26 May 2025 14:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:06:55:7c:04:77:c3:3c:33:38:1d:6c:de:0f:58:59:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 25 07:25:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=724e9d21ad7b8964ed68724ad88d45d6a5dbe53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:5a:96:b3:49:ba:8d:cc:e1:67:48:c0:09:
                    e4:59:c8:d7:98:a1:02:74:73:7d:9c:3f:10:65:fb:
                    e1:c0:6b:d7:5b:c6:1a:e2:71:19:da:2f:11:00:20:
                    04:98:6e:cc:8c:e9:25:8e:98:07:66:d3:c7:0f:2e:
                    01:80:97:dd:57:45:39:eb:25:f1:da:ce:91:96:c4:
                    e4:af:e0:c9:9b:62:7f:26:24:fb:55:a7:19:38:15:
                    ea:8c:b1:0b:ff:c3:e3:6b:66:99:b0:77:44:b8:5d:
                    e1:80:85:5a:fe:de:98:fd:15:1a:b4:f1:24:05:f3:
                    a1:e4:d0:cc:d7:4a:f7:2a:94:19:fc:b1:51:51:9a:
                    ac:15:2f:61:c6:53:72:ef:80:0f:ef:6f:35:7f:ae:
                    32:4e:45:43:29:bc:dd:dc:d2:ed:72:d3:48:4e:4f:
                    8f:a6:f5:05:2b:97:80:aa:06:d6:40:98:ab:47:b1:
                    ad:b7:a9:14:89:dd:e3:1a:20:b3:2d:7d:81:17:9d:
                    ea:b1:b4:c4:7d:d2:d2:20:90:2f:a0:2d:e0:1d:7d:
                    d6:e9:51:d3:6b:56:61:17:cd:13:6b:eb:7e:e2:ee:
                    6d:1f:96:3b:cf:19:39:8a:12:98:b5:ca:47:da:62:
                    eb:7a:3c:35:2d:35:65:b4:f3:14:a9:fe:d1:2c:d7:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:9D:21:AD:7B:89:64:ED:68:72:4A:D8:8D:45:D6:A5:DB:E5:3F
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ck6dIa17iWTtaHJK2I1F1qXb5T8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:ea45::/32
                  2a13:9f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:a7:48:59:98:28:98:e9:9d:2a:63:57:6d:59:7f:8c:06:
         dc:d7:9e:de:c2:f4:61:0e:f7:94:00:62:67:71:37:c3:0b:c9:
         60:9f:56:55:4a:49:0b:cc:fa:0b:cb:41:50:0f:0c:1f:43:a8:
         c0:f2:fa:e9:1c:3d:30:a1:c1:4c:ed:c8:5e:d4:ed:18:f5:6b:
         fb:ac:0e:1c:60:3c:15:e2:a2:8a:5b:a0:d9:ce:f3:0a:40:55:
         c6:ef:eb:b3:f8:9a:dd:67:d7:5c:5a:97:59:bc:f7:df:03:b1:
         24:03:d7:c4:81:25:74:72:6a:b7:ea:6d:2c:2a:ac:2a:e3:d5:
         0e:c7:92:20:ce:53:f2:c8:46:87:a9:f6:6b:9a:6e:3c:b1:9c:
         2f:1a:2d:f0:e2:30:32:7c:e7:64:44:19:69:f7:a8:8a:56:59:
         b1:06:30:96:a9:78:04:6b:14:be:12:49:0e:52:19:fc:9a:14:
         ee:bc:7e:2b:c6:90:f4:1b:72:f3:63:9f:e4:ee:dd:d4:45:e4:
         30:64:ea:62:1d:39:41:5d:39:ca:f2:f8:35:88:54:89:8f:fc:
         a1:d0:77:8b:b0:6c:1b:ec:89:e9:e5:bc:24:96:e4:31:f2:45:
         41:ec:83:f5:9e:6a:9a:98:a5:8d:78:58:e7:df:1b:8c:88:05:
         81:f1:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:06:14 2025 by rpki-client