This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa
File:                     g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa (raw, json)
Hash identifier:          cCsbxJn1kuXwBFR424p3Oksv32Sv4ObeGj7WrOyvMhY=
Subject key identifier:   83:92:A8:E4:C9:78:DC:E3:47:02:2F:1D:29:F3:B0:85:11:C3:BD:34
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019B79EC67832D438AD080BBC0316AC1F9B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa
Signing time:             Thu 01 Jan 2026 14:18:14 +0000
ROA not before:           Thu 01 Jan 2026 14:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199785
IP address blocks:        37.46.16.0/24 maxlen: 24
                          37.46.17.0/24 maxlen: 24
                          37.46.18.0/24 maxlen: 24
                          37.46.19.0/24 maxlen: 24
                          64.188.99.0/24 maxlen: 24
                          77.239.106.0/24 maxlen: 24
                          144.31.80.0/23 maxlen: 24
                          144.31.194.0/23 maxlen: 24
                          150.241.76.0/23 maxlen: 24
                          150.241.113.0/24 maxlen: 24
                          150.241.114.0/24 maxlen: 24
                          150.241.115.0/24 maxlen: 24
                          150.241.116.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 24 Jan 2026 23:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:67:83:2d:43:8a:d0:80:bb:c0:31:6a:c1:f9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jan  1 14:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8392a8e4c978dce347022f1d29f3b08511c3bd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:6a:93:45:9f:d3:61:14:bd:ce:92:2a:75:
                    c8:99:53:a9:c6:2a:fe:47:41:2f:97:31:45:38:ba:
                    92:59:3b:d4:b1:70:96:fe:77:79:11:dc:6b:29:f7:
                    fd:49:4d:a8:cd:82:f3:be:ca:1f:d5:8e:15:31:8a:
                    41:f5:a7:45:64:4d:a4:51:09:ea:13:31:fa:fe:3e:
                    69:2b:3d:2a:30:74:94:8a:f9:52:93:dc:80:71:16:
                    6c:5e:17:3f:bb:5e:c3:d3:88:11:7d:36:80:7a:f1:
                    fa:b3:20:6d:9c:77:13:07:0a:b1:dd:77:d4:1b:d5:
                    9a:a8:e8:f3:79:89:ac:f0:d8:d0:d2:c0:ef:e4:7c:
                    c4:60:db:77:45:3e:10:31:bc:19:a8:34:c6:38:6b:
                    a9:78:09:07:94:89:1c:41:dd:b4:55:ab:8e:4a:1c:
                    47:04:7c:49:9a:c4:ef:a7:c1:db:89:26:42:30:7c:
                    3f:d9:10:46:49:54:88:62:f5:f1:8c:9b:95:5b:94:
                    0c:52:2e:41:03:34:89:0b:62:01:92:3f:fa:09:4b:
                    8b:00:7e:61:0e:12:7e:e9:84:77:cb:f5:14:65:76:
                    5e:be:47:eb:ee:9e:9f:5d:53:45:94:94:42:5f:59:
                    ca:fe:21:c4:2a:ae:24:41:27:40:a4:bf:43:14:d4:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:A8:E4:C9:78:DC:E3:47:02:2F:1D:29:F3:B0:85:11:C3:BD:34
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.16.0/22
                  64.188.99.0/24
                  77.239.106.0/24
                  144.31.80.0/23
                  144.31.194.0/23
                  150.241.76.0/23
                  150.241.113.0-150.241.116.255

    Signature Algorithm: sha256WithRSAEncryption
         43:21:f3:e7:d5:10:9f:92:70:85:e5:b8:28:db:d1:14:72:ee:
         0b:04:fa:33:6c:5d:50:e5:59:15:83:ce:c8:bc:bd:83:96:ad:
         d5:e9:a9:b4:a8:8b:f7:25:2b:e4:9a:84:58:d8:f8:29:70:ec:
         55:cc:7f:23:3a:f1:c2:3d:96:26:e2:ed:26:38:25:11:ca:79:
         f7:7d:11:95:b6:20:6e:64:09:15:49:10:6c:65:a6:ba:09:ef:
         d8:ab:51:95:e4:54:d0:ec:a5:fc:2b:54:8f:8c:4d:dc:b1:d9:
         f4:55:5a:44:22:de:77:d8:11:4f:c2:49:93:07:05:c7:e5:14:
         d7:43:bc:61:65:0c:92:9d:c4:4e:0c:0a:20:f9:8b:75:f7:49:
         59:31:90:32:d4:63:35:77:89:9d:12:a1:ea:61:8b:1d:6a:61:
         f2:cd:80:b2:0d:4d:7b:c1:b6:5f:0e:8c:d2:69:24:7e:04:d8:
         5e:93:d0:bf:ca:5f:b5:5f:ba:30:b7:ae:39:77:ff:17:1a:9b:
         8c:91:01:bb:45:05:6a:f3:0d:6b:9c:c5:33:5b:19:a4:65:11:
         34:b8:eb:e2:a1:5c:10:e2:e0:be:9a:64:3f:4d:03:76:94:0a:
         bb:0f:ab:22:5e:af:27:b8:1c:98:f3:c9:15:60:02:16:b6:f0:
         01:39:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 19:47:08 2026 by rpki-client