This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa
File:                     WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa (raw, json)
Hash identifier:          3kpv91GQxIMTt9nOuI9ap0dnqC2eP0deuZoMlfreTlc=
Subject key identifier:   59:02:B1:F8:C4:D8:0D:F6:59:4C:77:0C:02:DF:18:70:FC:84:F5:21
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019651AB1C59922C2322AFCC04B6D35D09A7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa
Signing time:             Sun 20 Apr 2025 05:28:10 +0000
ROA not before:           Sun 20 Apr 2025 05:28:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     11798
IP address blocks:        185.176.94.0/24 maxlen: 24
                          185.207.135.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ab:1c:59:92:2c:23:22:af:cc:04:b6:d3:5d:09:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Apr 20 05:28:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5902b1f8c4d80df6594c770c02df1870fc84f521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:2e:55:e9:54:ee:ec:8a:cb:32:40:12:5c:
                    45:8e:fd:b2:ee:8b:1a:8b:aa:65:86:f6:46:02:1e:
                    09:41:5c:c6:7a:67:e9:52:67:b5:7b:71:c8:47:cd:
                    e5:f3:97:98:64:ad:56:8a:f3:37:28:54:f2:e3:09:
                    89:7c:42:19:18:07:db:2f:53:c5:dd:2b:96:c6:c7:
                    0b:62:53:8b:7e:75:a1:cf:e8:11:18:0e:e6:41:47:
                    46:f7:f1:23:8e:28:c1:ec:b3:84:1c:3d:43:b5:0c:
                    5e:b8:c4:70:0b:bb:9b:c1:a8:5b:09:4a:c0:b2:64:
                    d2:2f:41:71:fd:f3:3b:c8:ac:11:53:27:8a:ba:63:
                    a1:6a:1b:d0:2b:c1:b8:82:d2:b3:eb:e3:60:f7:08:
                    4c:18:a0:c2:c4:7b:6d:31:1c:a9:e6:b0:11:e5:3a:
                    db:1e:98:fc:fb:e9:6c:12:51:7e:1c:d6:87:2c:e3:
                    4a:ef:55:ca:74:3b:1a:11:78:0a:fe:e0:7a:cd:76:
                    86:de:a3:58:5c:a1:4d:95:65:fc:68:f2:a2:7c:c4:
                    10:29:03:7e:ad:8b:12:b8:92:92:2c:f6:3a:3b:cd:
                    ff:3f:d2:45:6e:b7:5e:ee:1a:ad:b4:24:86:6b:25:
                    73:aa:7b:8d:8f:b3:14:f6:97:a7:f8:a6:72:de:3b:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:B1:F8:C4:D8:0D:F6:59:4C:77:0C:02:DF:18:70:FC:84:F5:21
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.94.0/24
                  185.207.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:d8:36:d4:95:0d:bc:e7:a5:ee:df:5b:dd:b3:e7:78:29:
         e9:e0:7a:65:3e:48:4e:ab:a2:c3:08:3c:d8:74:89:a1:ae:96:
         a6:0e:7c:c3:76:49:bd:1f:a4:e4:6a:35:ee:55:5c:c6:df:8c:
         3c:d0:31:07:34:d6:fe:9d:c2:78:83:5a:51:ad:49:15:7f:bc:
         af:ed:9a:dc:28:a5:44:80:39:4b:84:54:97:09:eb:28:ae:19:
         1d:ac:f4:78:c4:73:b3:ef:5a:d7:b4:aa:74:57:7c:45:46:2e:
         b0:7a:f7:58:42:22:e8:fb:81:bf:3b:69:c6:7b:aa:f0:a5:ed:
         a4:27:cb:47:35:ef:3f:89:14:73:28:6b:f6:22:d0:e7:eb:8f:
         5d:8c:65:3c:b4:d5:26:42:43:d4:de:3f:d5:f0:33:16:4b:80:
         9c:e2:51:dc:e0:e5:bf:3d:61:0b:b0:07:dc:c6:89:44:fc:fd:
         ef:4b:f3:2c:9c:be:31:72:bc:bf:af:61:35:51:1f:22:66:6a:
         00:0d:53:f9:9e:ec:50:ad:ef:9f:8b:0a:aa:9a:cb:87:9b:14:
         ae:91:19:f7:31:e4:6e:aa:91:90:14:fc:4e:75:d6:a5:51:b8:
         40:16:38:68:b6:67:7f:62:d5:b7:fa:28:1b:66:e6:69:84:22:
         75:c0:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:32:59 2025 by rpki-client