This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6ypwAunm60xi87BK4fedBbUD4sI.roa
File:                     6ypwAunm60xi87BK4fedBbUD4sI.roa (raw, json)
Hash identifier:          ivQ3aUMXtoCcwr+P2Unrvx152VLizyA47V3uJK9ARuw=
Subject key identifier:   EB:2A:70:02:E9:E6:EB:4C:62:F3:B0:4A:E1:F7:9D:05:B5:03:E2:C2
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019B287FE8B5A19CC3F75572CBA229F25CB9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6ypwAunm60xi87BK4fedBbUD4sI.roa
Signing time:             Tue 16 Dec 2025 18:50:29 +0000
ROA not before:           Tue 16 Dec 2025 18:50:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     401152
IP address blocks:        77.239.100.0/22 maxlen: 24
                          77.239.112.0/22 maxlen: 24
                          144.31.8.0/23 maxlen: 24
                          144.31.11.0/24 maxlen: 24
                          144.31.13.0/24 maxlen: 24
                          144.31.15.0/24 maxlen: 24
                          144.31.32.0/19 maxlen: 19
                          144.31.91.0/24 maxlen: 24
                          144.31.96.0/22 maxlen: 24
                          144.31.109.0/24 maxlen: 24
                          144.31.110.0/24 maxlen: 24
                          144.31.111.0/24 maxlen: 24
                          144.31.112.0/23 maxlen: 24
                          144.31.128.0/21 maxlen: 24
                          144.31.144.0/20 maxlen: 24
                          144.31.160.0/22 maxlen: 24
                          144.31.224.0/22 maxlen: 24
                          144.31.228.0/23 maxlen: 24
                          144.31.230.0/23 maxlen: 24
                          144.31.248.0/24 maxlen: 24
                          144.31.249.0/24 maxlen: 24
                          150.241.64.0/24 maxlen: 24
                          150.241.80.0/23 maxlen: 24
                          193.23.192.0/24 maxlen: 24
                          193.23.198.0/24 maxlen: 24
                          193.23.204.0/22 maxlen: 22
                          193.23.212.0/22 maxlen: 24
                          193.23.222.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:7f:e8:b5:a1:9c:c3:f7:55:72:cb:a2:29:f2:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Dec 16 18:50:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb2a7002e9e6eb4c62f3b04ae1f79d05b503e2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:60:a9:41:a5:e6:9a:93:67:12:da:87:a0:ba:
                    57:59:00:c1:c8:34:b1:4c:ec:ce:66:96:4f:ed:2f:
                    dc:f9:8d:1d:22:5c:6b:e7:af:19:70:1f:df:76:79:
                    d8:68:43:ad:0e:2e:bd:df:c9:a7:3e:a9:16:e4:d9:
                    d6:49:e9:89:23:c0:41:29:1e:d5:86:64:af:99:c0:
                    e8:98:78:19:17:61:c5:c5:c9:8e:02:83:15:36:e9:
                    0b:0a:a3:3e:8b:d3:11:d7:b0:02:0b:1e:53:13:4d:
                    3c:a9:24:80:f0:c1:a7:8e:7d:24:8e:6c:5a:d7:bc:
                    11:67:05:60:68:fa:16:fd:6b:d6:d5:7d:11:78:4d:
                    4c:db:e5:49:13:18:3d:2e:f8:94:1e:1c:63:61:41:
                    62:53:3f:15:f0:77:89:23:ba:c2:cf:f2:04:b2:09:
                    26:a6:e9:e3:ff:7e:4f:0a:23:12:5f:7c:3c:a9:5c:
                    6e:ed:99:1b:08:35:de:ba:c8:00:15:66:9c:37:af:
                    89:f3:78:74:39:16:d8:14:10:a6:be:3d:0c:2f:95:
                    d4:7b:98:d3:03:de:bf:2c:50:ca:74:72:dc:a0:41:
                    e2:42:2c:a5:17:7c:34:9c:85:c6:f0:fd:c3:fb:ad:
                    dd:d5:3f:0a:bc:2a:1e:37:58:ac:48:a0:f0:9f:38:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2A:70:02:E9:E6:EB:4C:62:F3:B0:4A:E1:F7:9D:05:B5:03:E2:C2
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6ypwAunm60xi87BK4fedBbUD4sI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.239.100.0/22
                  77.239.112.0/22
                  144.31.8.0/23
                  144.31.11.0/24
                  144.31.13.0/24
                  144.31.15.0/24
                  144.31.32.0/19
                  144.31.91.0/24
                  144.31.96.0/22
                  144.31.109.0-144.31.113.255
                  144.31.128.0/21
                  144.31.144.0-144.31.163.255
                  144.31.224.0/21
                  144.31.248.0/23
                  150.241.64.0/24
                  150.241.80.0/23
                  193.23.192.0/24
                  193.23.198.0/24
                  193.23.204.0/22
                  193.23.212.0/22
                  193.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:43:13:4f:0e:2b:b6:23:b9:61:cf:85:be:4b:81:a6:5c:cd:
         a1:74:42:70:64:1b:58:64:08:2f:1d:9e:af:2f:51:71:a1:fa:
         98:e8:d5:8a:c0:61:9b:09:ef:e8:f6:a7:c3:a8:3d:4c:3d:f5:
         02:16:08:10:60:ec:9e:49:40:58:32:e6:c9:84:de:5a:de:2e:
         4f:d8:44:4c:f9:eb:bd:4a:56:ab:29:ca:4f:80:13:dd:c0:0d:
         04:4b:11:11:5f:fc:4f:1f:49:15:5f:d2:48:08:74:a2:9d:bb:
         10:5a:c2:42:ad:37:86:b7:3c:45:d9:b4:9a:f2:c7:a6:7c:0e:
         46:fc:8c:50:fc:df:0e:bd:92:c4:21:b8:b1:bf:94:d1:25:ba:
         88:46:c5:0f:a9:4f:8e:21:25:12:34:12:38:ce:62:54:cc:f3:
         85:9a:cc:3c:ca:03:e2:c7:02:e4:49:8c:c9:e4:aa:fd:2f:98:
         92:a5:bd:30:06:ea:5c:1c:2b:c0:e7:65:ca:dc:94:b7:10:cb:
         9f:7d:4f:60:77:01:66:da:7b:d2:a0:be:6b:3b:bd:89:54:fc:
         4c:0f:0b:ed:cf:a1:fa:ae:9a:83:50:36:80:9f:41:b4:83:35:
         b3:ac:e4:e5:eb:13:86:19:bb:87:60:6d:93:89:7d:84:45:c4:
         05:90:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:18:10 2025 by rpki-client