This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa
File:                     3134312e39382e34302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          f+7iYINaROoxTHjh3gY+AFQc+4XAWVAofcO6f4kIxj4=
Subject key identifier:   AB:B1:A8:8A:56:6B:90:1C:A2:A7:01:90:BD:4E:94:01:05:C3:1B:07
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       0E64F919D6515B5812C48715C84BA8AA73B20B1F
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa
Signing time:             Sat 08 Nov 2025 08:39:25 +0000
ROA not before:           Sat 08 Nov 2025 08:34:25 +0000
ROA not after:            Sat 07 Nov 2026 08:39:25 +0000
asID:                     834
IP address blocks:        141.98.40.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 17 Nov 2025 09:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:f9:19:d6:51:5b:58:12:c4:87:15:c8:4b:a8:aa:73:b2:0b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: Nov  8 08:34:25 2025 GMT
            Not After : Nov  7 08:39:25 2026 GMT
        Subject: CN=ABB1A88A566B901CA2A70190BD4E940105C31B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8e:e4:19:de:51:db:d1:e3:ca:9c:56:72:fd:
                    55:8e:ee:10:d3:6c:84:60:bf:ad:5c:07:2e:34:66:
                    6e:db:1c:39:d0:9d:d9:0e:79:1b:97:33:17:16:eb:
                    d6:57:96:42:c5:b9:8b:88:79:c1:1b:d2:b7:0a:d2:
                    b5:11:28:d0:81:ea:e0:a3:b2:f6:01:3a:27:9e:f8:
                    22:75:62:db:0e:f5:20:8c:49:2e:e5:b0:6d:53:66:
                    6e:c7:72:1e:34:70:31:c0:10:7a:5b:35:16:ee:39:
                    26:ce:10:c5:4e:2a:ec:fc:2c:de:e6:64:c8:d0:e4:
                    a5:3c:ff:9f:d0:ed:dc:63:03:42:a2:5d:06:c3:c8:
                    fc:04:95:3a:56:b5:76:fc:91:14:d1:2f:4f:09:61:
                    97:50:52:8f:c5:40:57:0c:3b:a2:5b:f5:dc:ff:89:
                    62:02:92:a5:90:e8:1a:c4:a9:4a:27:4a:23:96:55:
                    b3:ad:cf:d2:5d:ce:f3:26:da:3f:2b:ee:33:66:72:
                    8e:20:71:71:8b:31:db:99:22:d1:b7:b9:e1:02:cf:
                    08:4a:3b:8f:b4:21:0e:ce:3a:c7:9e:8a:1f:23:f2:
                    c4:40:5c:6e:69:66:1a:fd:b7:fe:b5:86:fe:cc:39:
                    b5:f0:c1:65:ac:10:f9:c1:09:56:f9:28:99:51:3f:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:A8:8A:56:6B:90:1C:A2:A7:01:90:BD:4E:94:01:05:C3:1B:07
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:19:a7:33:18:54:22:f0:8f:d0:f4:80:dc:38:e8:b3:48:b8:
         76:70:a8:0a:75:32:b7:82:8d:7a:a6:91:72:4e:8f:ce:5c:ae:
         0c:ed:f8:3e:47:9d:86:b4:e6:62:15:7f:2e:4b:6e:48:3c:a5:
         4d:27:51:dc:6e:36:7d:7a:10:a1:db:82:4f:43:45:40:40:39:
         2f:e5:43:5d:0c:06:a7:23:9c:16:a6:aa:83:b9:b7:10:06:00:
         66:20:13:2f:b0:42:24:c8:50:25:45:c9:c7:da:89:33:93:e9:
         45:3b:c8:ea:95:7e:25:2f:32:eb:fa:5c:28:fc:ab:9e:5c:39:
         d8:06:d9:1c:3d:d9:9f:5f:bc:84:c0:91:c7:93:1a:b8:be:ac:
         b5:7a:49:f9:f6:8f:c5:b6:ac:22:e5:e4:f9:2c:dc:d8:b8:82:
         cf:cc:a9:ce:87:e6:56:99:ed:0f:56:f8:14:40:01:c9:c4:b4:
         c9:57:07:8f:7a:dc:13:95:c9:51:95:2b:c7:4f:89:85:44:2e:
         52:9a:bf:24:1e:15:0b:81:96:23:0b:fd:27:7b:35:3f:6c:47:
         04:d0:b3:ec:6a:0e:4d:94:78:c6:e4:fe:72:c2:45:a8:89:57:
         74:75:a8:f5:73:ab:b4:1e:77:90:4b:22:94:ea:24:28:70:13:
         c1:6f:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:38:50 2025 by rpki-client