This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-jQNHqg42Qj2WA1t_Fh-JjDa9ts.roa
File:                     1-jQNHqg42Qj2WA1t_Fh-JjDa9ts.roa (raw, json)
Hash identifier:          bTAKcWyL6Hrgml+NwMCJIt+S7WxKdlFL+UoekUrAEKY=
Subject key identifier:   FA:34:0D:1E:A8:38:D9:08:F6:58:0D:6D:FC:58:7E:26:30:DA:F6:DB
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019A53851A039F18A3EDA2990CF29FBA7829
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-jQNHqg42Qj2WA1t_Fh-JjDa9ts.roa
Signing time:             Wed 05 Nov 2025 10:17:03 +0000
ROA not before:           Wed 05 Nov 2025 10:17:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        213.145.71.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Nov 2025 10:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:85:1a:03:9f:18:a3:ed:a2:99:0c:f2:9f:ba:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Nov  5 10:17:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa340d1ea838d908f6580d6dfc587e2630daf6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:53:77:b1:8b:77:df:62:20:6a:61:08:df:
                    f3:ed:c4:42:c0:0b:f1:e7:2d:88:36:63:6c:a2:e1:
                    50:c9:1b:5c:5a:4e:dc:4e:a8:a6:e5:73:a4:95:26:
                    ea:fb:42:64:db:28:e9:92:5b:4a:97:69:93:50:be:
                    07:b8:02:e7:cb:a7:d3:c9:f1:30:26:a6:a9:57:65:
                    ac:3e:87:2f:b2:fa:36:7e:2f:49:fc:11:7e:bf:73:
                    76:5e:45:ce:25:de:99:5e:80:6b:61:47:4b:d3:a6:
                    be:5e:d2:1d:3f:00:6d:64:eb:f3:29:3b:cf:f2:0c:
                    ae:4b:95:a9:76:05:c0:dd:57:09:56:0d:8a:e9:3d:
                    64:06:c7:bb:f5:b7:74:ef:14:53:5b:97:a7:c3:0c:
                    8b:4d:65:0f:f7:22:a8:5a:56:ef:26:d7:37:d9:b8:
                    7a:a8:96:25:ad:1c:52:56:85:a8:07:a4:1f:57:ee:
                    9f:85:a9:87:6f:1e:69:90:b1:00:b4:66:76:e3:1d:
                    df:fc:eb:21:5d:43:6a:76:aa:ce:1b:eb:12:ff:cd:
                    10:13:08:8b:83:7c:44:8e:b5:28:0e:ff:33:ae:18:
                    8c:9b:dc:74:b3:c2:37:da:1d:2b:93:ca:88:18:82:
                    70:4d:30:ba:52:cb:19:b1:ea:c0:e3:5f:09:29:1f:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:34:0D:1E:A8:38:D9:08:F6:58:0D:6D:FC:58:7E:26:30:DA:F6:DB
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-jQNHqg42Qj2WA1t_Fh-JjDa9ts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f3:5b:30:ec:f2:f9:10:06:d4:22:d9:91:a0:89:1b:7d:c4:
         b8:20:91:a9:81:5c:09:01:18:4b:c2:d0:ac:c7:0b:d4:42:41:
         aa:e9:43:88:86:88:81:32:5d:08:d0:fd:1c:e5:47:27:1c:dc:
         45:d5:80:a1:fb:4c:6e:32:d7:0e:0f:a5:40:f2:8d:6b:84:34:
         62:5c:8c:47:eb:81:a3:f4:4f:fa:5c:a1:97:86:61:8c:c6:e6:
         24:15:2f:c1:65:83:9f:35:c0:e6:7b:af:6f:6d:e6:71:a9:3e:
         46:94:fd:c7:8c:2a:e4:95:04:37:1b:37:4c:0f:a7:39:f8:af:
         e4:ba:36:81:a1:98:69:45:29:4e:d0:61:fe:79:0c:ac:51:12:
         66:ef:e6:3c:eb:a6:09:02:4b:ae:9c:a2:48:db:a2:8b:93:04:
         f8:01:e3:dd:1d:c8:cb:39:df:df:a2:76:08:66:35:bb:b9:a2:
         6f:51:91:66:bc:ed:61:35:98:49:29:91:0a:bb:d2:c6:8e:2f:
         2a:08:32:ef:fd:80:6a:9b:f6:48:8f:99:19:a0:18:4f:87:d7:
         c3:56:73:91:28:bc:7f:80:4a:b4:d3:75:32:e9:42:04:a9:12:
         87:e8:7e:5f:b3:85:6c:69:3a:a0:3b:1e:1a:d5:4f:38:80:21:
         8a:f0:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:25:03 2025 by rpki-client