This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/ke7aZcRYBK7rfkburKSvSCrgWIs.roa
File:                     ke7aZcRYBK7rfkburKSvSCrgWIs.roa (raw, json)
Hash identifier:          Y1dU+Eqq4rKLM73bc7DCgfOgRgrag220LKmJaZAS+VY=
Subject key identifier:   91:EE:DA:65:C4:58:04:AE:EB:7E:46:EE:AC:A4:AF:48:2A:E0:58:8B
Certificate issuer:       /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial:       0196D0888717CE71246C9F490083180D937B
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/ke7aZcRYBK7rfkburKSvSCrgWIs.roa
Signing time:             Wed 14 May 2025 20:42:10 +0000
ROA not before:           Wed 14 May 2025 20:42:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214991
IP address blocks:        194.180.243.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 01 Jun 2025 11:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:88:87:17:ce:71:24:6c:9f:49:00:83:18:0d:93:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
        Validity
            Not Before: May 14 20:42:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91eeda65c45804aeeb7e46eeaca4af482ae0588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9d:e5:84:d6:6f:52:f4:21:67:98:78:b1:6d:
                    72:e5:e5:39:b2:26:16:f9:5d:33:4e:f5:48:e6:1a:
                    3f:65:06:93:26:ef:f9:ac:c9:0b:73:1c:b7:cb:4e:
                    af:dd:37:ba:28:ef:90:08:32:2a:7a:65:59:0e:61:
                    2a:d4:ba:1b:37:eb:97:9a:d8:a1:5c:17:69:db:f9:
                    fd:11:48:61:63:f1:7e:bb:03:ea:f0:00:96:c0:bd:
                    cb:29:57:ab:48:21:01:08:7f:de:89:13:0c:6b:71:
                    77:16:ac:77:be:d6:d4:34:0f:2e:b3:9f:85:14:2d:
                    43:91:96:3a:c4:66:aa:43:2e:4c:12:9d:c0:96:8b:
                    b8:8b:5b:fd:ec:ee:d9:2b:00:e1:3d:3f:b1:c0:83:
                    b8:38:64:84:80:1a:f9:ee:eb:7c:25:5b:2f:a5:ff:
                    52:7c:eb:81:9b:69:83:9c:b3:52:51:6d:0b:cd:80:
                    43:40:58:97:3b:56:83:38:71:a7:29:55:0d:7b:58:
                    91:5c:c2:15:bf:ad:02:fa:41:f7:51:bb:8d:c1:1d:
                    47:54:b7:d3:24:a0:53:98:d7:83:22:05:78:e1:3f:
                    c9:d3:59:2d:4a:e0:dc:27:fd:82:d7:5b:2a:2a:1b:
                    44:59:99:3d:b6:2c:03:0f:90:97:79:c7:43:cf:41:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EE:DA:65:C4:58:04:AE:EB:7E:46:EE:AC:A4:AF:48:2A:E0:58:8B
            X509v3 Authority Key Identifier:
                keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/ke7aZcRYBK7rfkburKSvSCrgWIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:cb:20:be:02:f8:62:31:fa:97:cc:2d:bd:4f:94:5d:24:
         bf:93:3a:30:1a:91:0f:44:1f:d4:2a:f0:58:09:48:09:3d:7b:
         37:e2:7d:16:c0:04:75:8e:b2:3d:aa:40:56:d6:c8:8f:1f:2f:
         8e:3f:31:2e:b8:f9:bf:29:cb:a6:31:72:58:ce:2a:15:f0:93:
         ad:5d:ba:11:a7:98:7b:08:99:0b:20:8a:a9:53:b6:2f:d5:b8:
         63:15:16:e3:b7:c2:cf:66:95:db:da:de:b7:ef:81:a7:b8:f9:
         ba:d1:e4:f2:da:fb:9a:30:f6:cc:00:ed:f5:45:4f:61:34:9a:
         33:6d:bd:7f:06:ba:2d:61:a6:ce:79:54:55:c6:24:38:76:dc:
         d8:1e:f9:2d:35:c1:e5:05:d9:b9:2f:b4:6c:25:81:9f:2d:d2:
         58:58:b8:b7:51:cb:5b:1d:c5:42:b5:14:4c:4c:45:0f:b1:23:
         b4:64:21:53:81:2a:b9:55:40:e6:80:4d:a4:11:1f:4a:46:70:
         4c:6c:e3:15:87:85:ca:ac:3b:19:14:e9:97:e6:15:44:2d:93:
         71:05:de:8c:60:d1:f9:94:a2:94:8e:9c:a2:6f:ec:04:d9:ba:
         82:a1:df:69:06:74:d0:bd:26:87:41:42:95:5a:e2:a4:7e:04:
         60:c6:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:12:42 2025 by rpki-client