This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa
File:                     3139342e302e3230312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          CghLCg+nFvbVw2D59RICEpJ9N3aVBRYbUjIRAXprD6g=
Subject key identifier:   F6:D2:3D:33:26:D8:25:E0:85:0A:07:89:B2:40:87:E6:A1:E9:88:08
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       378B6BCEC4BD3657A32855DBB769C4216D70C6E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 07 Nov 2025 23:22:04 +0000
ROA not before:           Fri 07 Nov 2025 23:17:04 +0000
ROA not after:            Fri 06 Nov 2026 23:22:04 +0000
asID:                     834
IP address blocks:        194.0.201.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 08 Nov 2025 23:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8b:6b:ce:c4:bd:36:57:a3:28:55:db:b7:69:c4:21:6d:70:c6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Nov  7 23:17:04 2025 GMT
            Not After : Nov  6 23:22:04 2026 GMT
        Subject: CN=F6D23D3326D825E0850A0789B24087E6A1E98808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:ab:a9:02:db:d4:d8:5b:7a:2e:e1:f7:e9:
                    95:78:62:29:49:fe:c9:0f:21:c1:d1:fd:42:43:a4:
                    49:50:d1:ee:db:4c:95:e2:35:bf:0b:21:b9:f0:32:
                    a1:cd:1b:d9:35:98:af:8d:7d:67:11:04:89:fc:d1:
                    0a:5a:1a:04:2d:a9:f6:d3:77:16:90:db:1a:6e:e0:
                    b6:77:ab:fc:d9:56:22:ba:d6:ef:de:7b:b4:5a:88:
                    be:52:a7:38:60:d9:ea:48:50:3a:5d:67:3f:be:4d:
                    17:7f:a1:c1:c5:90:b9:04:21:09:a1:7a:e7:b7:8c:
                    fb:83:64:a9:df:0f:c0:18:9d:28:af:05:1d:34:11:
                    10:3b:6c:a2:d7:9c:c9:82:4f:d7:5a:44:d2:e4:01:
                    22:44:70:55:c7:76:b3:f0:9c:71:47:ef:60:49:e1:
                    97:0b:c6:1b:3b:13:3b:1e:2c:07:61:52:1f:de:01:
                    a0:0e:20:af:31:a5:a4:6a:3b:05:13:fd:93:d1:8e:
                    df:5c:38:b3:c0:83:95:ee:eb:15:fe:95:b7:ad:33:
                    99:61:21:b5:1c:3b:bd:c6:40:2d:5c:0b:a1:f0:14:
                    59:5f:fa:96:3d:66:22:e7:bd:d4:ec:8c:af:8a:81:
                    73:1b:ba:bd:d8:b7:95:a5:e7:a4:e2:eb:01:76:e0:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D2:3D:33:26:D8:25:E0:85:0A:07:89:B2:40:87:E6:A1:E9:88:08
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:ab:97:b9:c7:ca:b5:41:6e:b2:5c:e4:18:5f:5f:34:d1:
         4b:8e:90:a5:8a:9b:4b:d6:7d:2f:2b:01:bd:40:09:67:11:a8:
         0f:41:5c:9c:5b:53:3f:a0:60:42:81:7c:27:2b:9b:5f:70:13:
         b4:0f:93:3f:e2:b6:c0:da:b1:37:9e:08:15:60:4a:3b:80:76:
         e9:9e:da:41:cd:70:79:24:b4:69:93:86:19:84:81:96:ce:ac:
         84:7c:ca:9e:ff:ff:56:88:4b:e3:01:1f:cc:ed:ce:69:bd:7d:
         dc:03:29:4b:de:67:b5:9f:01:d9:af:c1:9d:aa:34:a9:09:d9:
         5f:3f:af:55:aa:ed:69:6e:b1:41:60:ea:7f:10:c8:b6:57:0f:
         57:a8:43:bc:2b:4d:30:03:c4:b5:64:f6:3c:02:13:42:1c:33:
         61:44:67:a1:51:f3:98:81:2d:1f:90:a4:96:9d:22:dc:a7:94:
         7f:4e:52:ca:e1:d3:5f:a5:4f:98:b3:bf:d2:93:78:83:0a:12:
         e1:12:03:88:f4:0e:1f:df:5e:2c:56:e6:d8:4d:e3:0c:ba:c6:
         47:4c:a8:76:65:a3:74:25:21:d4:43:90:11:b2:f8:07:51:77:
         63:c6:8b:d6:b3:3d:f1:ad:70:26:e1:30:01:2f:4c:e8:c4:69:
         ab:68:06:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:41:28 2025 by rpki-client