This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa
File:                     AS26262.roa (raw, json)
Hash identifier:          mgybxWFtZyVENx+3lYmsMF7gIbKLrKPEPRqIxYMr0bs=
Subject key identifier:   42:FB:F6:F3:A4:BB:E8:F6:9C:2D:F7:99:A5:87:A9:FF:B9:22:D2:C3
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       6F707A2343B88FF888800586E2B5EAFEE4E94DDE
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa
Signing time:             Wed 08 Oct 2025 10:59:35 +0000
ROA not before:           Wed 08 Oct 2025 10:54:35 +0000
ROA not after:            Wed 07 Oct 2026 10:59:35 +0000
asID:                     26262
IP address blocks:        147.78.68.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 11:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:7a:23:43:b8:8f:f8:88:80:05:86:e2:b5:ea:fe:e4:e9:4d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Oct  8 10:54:35 2025 GMT
            Not After : Oct  7 10:59:35 2026 GMT
        Subject: CN=42FBF6F3A4BBE8F69C2DF799A587A9FFB922D2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:82:1b:36:48:7d:1d:7b:7f:22:77:b3:f4:
                    3d:ad:d5:14:dd:0f:21:ac:b7:4a:7d:11:a9:28:25:
                    03:ef:6f:09:ab:2c:98:c7:86:36:43:e8:16:c2:bc:
                    7b:aa:89:27:38:c6:2c:96:12:47:e6:77:1a:1b:ea:
                    cf:78:93:7e:54:ba:31:b7:03:16:c4:0e:45:54:5e:
                    d7:42:d2:2d:73:3d:c6:f0:2b:c5:c6:f7:aa:82:1e:
                    59:24:32:73:57:09:be:b2:72:54:69:b1:50:d2:81:
                    ee:76:b1:9e:1f:58:75:36:4a:33:54:f2:cb:51:1e:
                    58:1c:d7:2b:f3:90:ac:71:cc:7b:b0:60:9f:e3:41:
                    8c:18:19:2d:37:2e:81:02:e9:66:e3:c4:be:26:a8:
                    5c:d8:07:9d:f4:e5:74:d9:cb:7e:c7:a2:be:09:31:
                    e6:b1:6a:13:93:44:81:ab:d2:52:0e:b5:5f:79:8d:
                    2f:a7:2f:65:cb:5c:13:65:88:62:eb:59:d7:c5:65:
                    64:e8:a6:ab:21:05:12:64:e3:06:12:f4:fe:51:63:
                    18:f9:7b:9c:b8:2b:46:36:1d:ea:b7:57:ff:54:9b:
                    93:e9:00:2e:47:3c:cd:74:5c:54:ac:be:32:99:9a:
                    93:80:6d:a9:1c:ac:bd:89:18:42:ec:18:f9:3c:8a:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:F6:F3:A4:BB:E8:F6:9C:2D:F7:99:A5:87:A9:FF:B9:22:D2:C3
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:c6:4e:9b:16:50:3f:0f:f6:b1:f8:8e:b1:10:df:ac:e8:fd:
         72:2e:74:b7:d4:cb:c5:db:a1:f3:9f:e9:d5:e4:4a:92:dc:56:
         bf:35:b7:11:82:3d:0f:ec:17:6f:58:fb:97:a2:10:6c:47:74:
         b9:36:cd:90:ae:d2:23:32:19:de:83:5c:6b:c8:99:9c:6f:74:
         6c:91:c3:5e:8d:94:87:3f:42:34:62:dc:e5:60:32:ae:b1:f3:
         16:ab:24:32:d4:a5:e0:38:b3:a4:7d:be:0b:86:1d:54:1f:80:
         d1:d7:c8:8e:9c:56:84:89:a7:cc:69:62:bb:14:63:15:97:8a:
         10:69:13:65:a3:4a:87:bd:86:f4:7b:b5:20:31:be:e2:08:c8:
         8b:3b:6d:24:1e:02:b0:22:a3:b3:c1:c0:dc:f7:1f:66:3b:db:
         b8:47:35:b1:c1:09:e5:9e:33:0a:1a:66:d5:83:e4:6d:35:9f:
         3f:b0:fe:e8:8b:20:c0:6e:1d:01:62:02:db:db:d8:c8:4b:8d:
         90:fd:ee:9a:2c:66:49:11:2a:c8:28:4b:7a:76:2b:73:de:47:
         be:09:91:f2:3a:4d:e3:33:be:b4:22:4e:18:7c:1d:6a:0f:0a:
         fd:aa:9d:32:c8:a4:ff:94:ae:ad:2c:73:cb:c4:e8:f7:f8:c4:
         f7:a2:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:44:27 2025 by rpki-client