This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa
File:                     dJP3ddRRfMvQZzflD2t5J7IonaA.roa (raw, json)
Hash identifier:          i2mT5iHzRXj/M1170fJUg+4lrnvzmyBsZxYXD65Vz6U=
Subject key identifier:   74:93:F7:75:D4:51:7C:CB:D0:67:37:E5:0F:6B:79:27:B2:28:9D:A0
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       019B7C13659484D0B28EE45E494D2EA7ECAE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa
Signing time:             Fri 02 Jan 2026 00:20:04 +0000
ROA not before:           Fri 02 Jan 2026 00:20:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        185.227.144.0/24 maxlen: 24
                          194.76.172.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 02 Jan 2026 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:65:94:84:d0:b2:8e:e4:5e:49:4d:2e:a7:ec:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 00:20:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7493f775d4517ccbd06737e50f6b7927b2289da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:68:2e:00:30:c3:7a:ef:0f:ef:45:75:cd:
                    59:fe:25:cb:9b:a0:08:c4:d8:4a:93:ca:a9:92:59:
                    7b:3e:f2:f0:33:b0:e8:36:66:11:9e:fc:95:0e:b9:
                    85:43:3f:aa:b4:14:43:fc:f4:64:95:77:b3:37:95:
                    fa:ac:36:0a:f5:ba:75:fd:8c:5b:e1:a4:b1:cf:20:
                    f8:2d:4c:0c:09:5f:76:41:93:21:04:8d:12:94:c1:
                    49:c3:f1:cf:07:c5:04:d0:e6:4f:eb:9a:44:82:ab:
                    6b:7b:fd:9e:13:80:d1:0e:fb:31:87:8b:b4:f3:09:
                    88:2c:18:22:07:f0:2d:1e:db:b0:db:61:68:0c:6d:
                    73:7d:0e:6c:6c:68:87:ef:b7:e8:71:e6:09:88:ed:
                    30:23:af:4a:d7:1d:c8:9c:4a:22:6d:bb:28:26:ae:
                    b7:8e:da:59:58:5d:3a:9f:80:08:1a:a6:63:2d:a4:
                    4a:21:1b:c8:a5:08:aa:62:4e:f3:6a:80:d0:a8:2e:
                    50:28:a0:b7:59:3e:62:21:c9:4a:be:ac:42:fb:6e:
                    0d:69:d9:75:15:2f:7f:ca:d9:1c:68:c5:45:88:8f:
                    16:9f:e6:d9:5f:d8:3f:0c:49:67:6f:ac:60:63:8c:
                    21:8f:f4:85:b7:9e:af:21:f4:77:d1:bb:14:06:38:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:F7:75:D4:51:7C:CB:D0:67:37:E5:0F:6B:79:27:B2:28:9D:A0
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.144.0/24
                  194.76.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:99:fe:84:14:71:ef:e7:72:01:1d:28:93:47:dd:40:c0:
         ec:05:99:ff:5c:b1:d5:0f:c7:2c:d5:4d:9a:3f:a8:96:d5:14:
         9c:ab:dc:58:21:34:3b:fb:b5:39:55:aa:f8:66:80:4f:b1:a3:
         d5:f2:d8:b8:5c:ef:8d:26:aa:7c:5d:59:8c:b8:2c:fc:27:a1:
         94:06:3d:d1:93:4a:89:06:6a:73:25:16:e6:f5:a9:df:0e:3d:
         5a:1e:18:33:7c:e7:47:65:fb:03:cf:8a:0f:a4:59:2c:09:99:
         89:7b:4a:e7:ad:a3:49:ba:b4:25:60:2f:a3:8f:95:1f:a4:f7:
         f5:56:f0:07:ee:b5:bf:78:eb:e2:9b:ff:50:e0:18:07:d7:73:
         71:e7:40:9e:e6:ef:cb:0d:78:cb:42:6a:eb:2f:e2:44:ec:5a:
         3f:52:ce:b8:4b:d5:e4:5c:d0:fb:e7:a5:11:ba:78:e6:26:50:
         45:62:36:74:9c:d0:39:86:60:6a:26:0e:4c:69:5f:72:0b:d1:
         45:c2:1b:b1:4a:ea:d0:cc:1c:91:df:78:d1:10:79:c1:d8:ee:
         4c:47:10:14:5b:96:54:81:11:bc:49:44:4b:55:6e:af:60:47:
         15:98:39:7a:f4:5d:20:d8:00:13:9d:ed:9a:d9:68:c4:41:66:
         f0:1f:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:48:19 2026 by rpki-client