This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa
File:                     OjXJK805RlESND_xHMWM0hjcZ8Q.roa (raw, json)
Hash identifier:          GrX5M7B0VeRj8hatddQAYwuqIxe1JVfFA40lk92wdlw=
Subject key identifier:   3A:35:C9:2B:CD:39:46:51:12:34:3F:F1:1C:C5:8C:D2:18:DC:67:C4
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019C41C98AA1DB6B2567D2C2E0B103EF634C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa
Signing time:             Mon 09 Feb 2026 09:44:13 +0000
ROA not before:           Mon 09 Feb 2026 09:44:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58232
IP address blocks:        195.254.165.0/24 maxlen: 24
                          2a05:9080:5::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 09 Feb 2026 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:c9:8a:a1:db:6b:25:67:d2:c2:e0:b1:03:ef:63:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Feb  9 09:44:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3a35c92bcd39465112343ff11cc58cd218dc67c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:52:77:08:76:45:1f:8f:7a:ab:27:5b:e4:
                    ea:8d:87:e8:d3:61:a5:cb:02:31:08:57:0d:44:78:
                    c7:5f:ec:2c:15:44:c2:e5:7f:07:a4:55:b1:18:e1:
                    3b:b7:c8:6f:e9:3a:d3:b5:c1:ba:65:2e:dc:3e:22:
                    3d:45:ea:9a:51:41:65:40:32:60:a5:e3:25:29:0e:
                    71:79:b9:ef:95:ab:13:e4:5f:c2:22:ef:29:df:bf:
                    8a:77:59:9a:7b:b0:d6:6a:c9:ad:57:fc:f7:64:5b:
                    5b:99:15:19:30:b9:24:43:1e:d0:46:66:b8:1f:48:
                    07:24:8a:37:1e:70:08:1f:61:1c:c9:ce:e0:d6:ad:
                    5b:0f:21:51:29:fc:87:ea:2e:56:13:cd:5a:61:7b:
                    7b:7a:22:61:b9:0f:5e:66:49:20:18:eb:4c:d7:16:
                    4c:39:f0:6c:7b:aa:de:83:8e:22:62:18:11:51:ad:
                    d1:da:91:ab:55:1c:7e:e2:13:4d:98:6c:a1:7d:3f:
                    ff:78:6a:36:cb:a3:9a:d7:4d:0b:d4:4f:4f:79:c9:
                    f9:d1:98:93:86:33:88:2c:d8:93:a4:e0:22:8f:92:
                    f5:be:59:b8:9e:48:12:5e:85:73:e1:7a:9f:b9:14:
                    17:b6:9a:00:09:98:88:a8:ba:8c:ea:ab:cd:ba:81:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:C9:2B:CD:39:46:51:12:34:3F:F1:1C:C5:8C:D2:18:DC:67:C4
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.254.165.0/24
                IPv6:
                  2a05:9080:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:2f:6f:4f:ab:11:92:eb:56:22:b9:20:af:25:8b:f1:c6:34:
         9c:b2:e3:ec:87:b6:6e:d9:c9:3c:25:57:41:b4:a1:56:85:c1:
         0f:99:7c:33:64:c6:a3:4b:b9:fc:0d:db:bc:f2:43:62:0e:29:
         7e:36:f0:80:4b:43:87:7a:36:e1:8e:5f:b4:61:86:ea:49:77:
         c4:24:72:9d:41:de:65:b3:d4:2c:c2:fc:0d:d5:06:4d:c9:42:
         18:f5:40:e4:0a:8a:47:84:fd:bf:ed:d1:0e:45:38:65:e1:93:
         65:a3:e7:48:b8:28:0f:d3:76:b3:3a:ea:29:ad:d7:57:a3:db:
         4a:ff:a2:c8:79:a5:4f:d1:c8:7e:2f:84:3a:7e:de:a0:ba:0f:
         33:13:4a:83:04:b4:a7:47:fc:34:cf:cb:6d:e0:ac:cf:07:4d:
         30:46:a8:91:e0:80:cb:91:e1:65:66:f0:8f:8c:dc:fe:26:82:
         4b:8c:07:54:0e:4e:38:fb:45:1a:26:44:22:a6:5b:1f:d7:69:
         46:d9:9b:47:12:89:3e:29:0d:9e:ca:bb:c2:c7:16:83:90:67:
         b9:dd:81:56:f0:cf:92:cb:1d:50:f9:b1:d4:c5:e2:f9:9a:e7:
         18:d3:b3:11:29:bc:dc:9c:25:d7:e0:9b:92:38:86:f4:99:2e:
         2f:5c:79:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZxByYqh22slZ9LC4LED72NMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMjA5MDk0NDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTM1YzkyYmNkMzk0NjUxMTIzNDNmZjExY2M1OGNkMjE4ZGM2N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubpSdwh2RR+PeqsnW+TqjYfo02Gl
ywIxCFcNRHjHX+wsFUTC5X8HpFWxGOE7t8hv6TrTtcG6ZS7cPiI9ReqaUUFlQDJg
peMlKQ5xebnvlasT5F/CIu8p37+Kd1mae7DWasmtV/z3ZFtbmRUZMLkkQx7QRma4
H0gHJIo3HnAIH2Ecyc7g1q1bDyFRKfyH6i5WE81aYXt7eiJhuQ9eZkkgGOtM1xZM
OfBse6reg44iYhgRUa3R2pGrVRx+4hNNmGyhfT//eGo2y6Oa100L1E9Pecn50ZiT
hjOILNiTpOAij5L1vlm4nkgSXoVz4XqfuRQXtpoACZiIqLqM6qvNuoG/hQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDo1ySvNOUZREjQ/8RzFjNIY3GfEMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvT2pYSks4MDVSbEVTTkRfeEhNV00waGpjWjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw/6lMA8E
AgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAKQvb0+rEZLrViK5IK8l
i/HGNJyy4+yHtm7ZyTwlV0G0oVaFwQ+ZfDNkxqNLufwN27zyQ2IOKX428IBLQ4d6
NuGOX7RhhupJd8Qkcp1B3mWz1CzC/A3VBk3JQhj1QOQKikeE/b/t0Q5FOGXhk2Wj
50i4KA/TdrM66imt11ej20r/osh5pU/RyH4vhDp+3qC6DzMTSoMEtKdH/DTPy23g
rM8HTTBGqJHggMuR4WVm8I+M3P4mgkuMB1QOTjj7RRomRCKmWx/XaUbZm0cSiT4p
DZ7Ku8LHFoOQZ7ndgVbwz5LLHVD5sdTF4vma5xjTsxEpvNycJdfgm5I4hvSZLi9c
eRw=
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:31:53 2026 by rpki-client