This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa
File:                     Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa (raw, json)
Hash identifier:          nIaDXJ1+KIFZzRY0qjGXg+nHB0jxD5aXxqg1Ds+DqXg=
Subject key identifier:   67:28:B6:DD:9C:D3:4F:0E:2F:7A:BE:D5:9B:C7:26:D9:A1:CC:CF:CD
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       019758F2C1530FD91FE5B83DB6D8C042E484
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa
Signing time:             Tue 10 Jun 2025 08:26:33 +0000
ROA not before:           Tue 10 Jun 2025 08:26:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        193.124.7.0/24 maxlen: 24
                          193.124.206.0/24 maxlen: 24
                          194.58.155.0/24 maxlen: 24
                          194.87.53.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.169.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.228.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          195.133.24.0/23 maxlen: 23
                          195.133.29.0/24 maxlen: 24
                          195.133.40.0/23 maxlen: 23
                          195.133.50.0/23 maxlen: 23
                          195.133.92.0/23 maxlen: 23
                          195.133.195.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          212.193.0.0/24 maxlen: 24
                          212.193.26.0/23 maxlen: 23
                          2a01:57c0::/29 maxlen: 29
                          2a0c:ff40::/29 maxlen: 29
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 12:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:f2:c1:53:0f:d9:1f:e5:b8:3d:b6:d8:c0:42:e4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun 10 08:26:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6728b6dd9cd34f0e2f7abed59bc726d9a1cccfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:87:bd:2a:12:26:2f:18:28:13:2d:1e:f6:
                    03:ad:14:72:cf:78:32:d8:1f:45:f4:5f:46:1e:5c:
                    fe:e0:7a:d3:ea:b8:0d:44:16:22:05:6b:bd:db:14:
                    a9:ac:16:32:a1:b1:38:3e:c0:a6:6a:e4:a8:f4:c1:
                    63:5b:76:45:1d:92:4f:21:66:03:c1:86:ae:42:c7:
                    f0:20:98:b2:f5:f2:70:69:b4:5c:e5:c0:ee:3c:39:
                    e7:b4:2e:35:d4:f0:cc:4a:1e:60:01:9d:e3:4d:ea:
                    1d:f3:60:b5:e6:8b:20:54:37:5c:00:66:56:aa:71:
                    fb:3a:86:a5:c1:2d:90:66:dc:b1:a8:e5:61:5b:e1:
                    ee:9e:16:a2:6b:8d:27:74:d0:98:db:2e:a9:46:9a:
                    a3:02:94:42:f2:38:21:71:38:b9:dc:c5:5d:c1:75:
                    c3:15:a1:02:88:47:32:a7:d4:34:4b:ec:e5:bb:03:
                    50:43:38:26:6e:f7:29:f3:f2:dd:37:21:7b:07:94:
                    2c:35:2c:39:f0:bd:6f:79:5d:d8:76:a8:78:ce:bc:
                    ae:f1:7a:00:31:60:41:60:35:6e:90:5f:76:c7:7d:
                    05:81:83:d0:f4:b7:81:1b:cb:d3:dc:76:33:25:23:
                    d4:8a:f0:7d:2c:6e:c2:9b:9f:68:ea:b6:3d:33:a5:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:28:B6:DD:9C:D3:4F:0E:2F:7A:BE:D5:9B:C7:26:D9:A1:CC:CF:CD
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.7.0/24
                  193.124.206.0/24
                  194.58.155.0/24
                  194.87.53.0/24
                  194.87.119.0/24
                  194.87.169.0/24
                  194.87.179.0/24
                  194.87.228.0/24
                  194.135.24.0/24
                  195.133.24.0/23
                  195.133.29.0/24
                  195.133.40.0/23
                  195.133.50.0/23
                  195.133.92.0/23
                  195.133.195.0/24
                  212.192.241.0/24
                  212.193.0.0/24
                  212.193.26.0/23
                IPv6:
                  2a01:57c0::/29
                  2a0c:ff40::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:7c:8e:48:9d:b0:54:af:4b:6d:81:b8:71:1d:88:83:06:
         1b:56:20:ee:db:30:a6:dd:a1:3a:27:40:28:6e:20:15:8d:8d:
         a9:b5:02:a9:0a:d6:7d:47:69:96:be:e1:ca:1d:64:f7:cf:e1:
         e5:7a:fd:99:4c:b4:4c:f5:a2:fb:79:a7:ff:09:6f:f5:4d:8f:
         0d:b0:3a:ca:18:2c:43:e3:1c:c0:1b:a6:cc:e2:64:a2:60:65:
         1c:b4:0b:ad:07:29:3c:3b:ce:0e:f1:70:f3:d1:8f:2c:be:74:
         7e:89:b8:11:43:f2:76:b6:43:6d:cc:e4:0d:e1:dd:23:9e:76:
         f4:43:89:50:2f:cb:5f:76:68:f1:cc:bb:79:10:a1:1d:68:75:
         62:01:f3:ef:e8:36:9d:8b:1d:55:ce:e1:d0:86:db:7d:8f:33:
         c6:b0:c9:e0:38:4c:d9:44:6f:6e:d2:87:30:57:f7:1e:d9:24:
         5f:36:96:aa:65:eb:09:de:47:ad:34:96:e5:d3:8c:b0:94:f3:
         55:de:aa:df:b0:d6:9e:43:95:ba:f0:00:33:5e:56:0e:8e:09:
         1c:ba:35:d0:be:f8:d0:a2:26:5b:2c:1f:76:0f:df:6e:09:d6:
         9b:1f:45:11:84:5d:26:81:ae:15:c8:3a:cf:82:9e:ec:ae:4c:
         b2:c9:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 10:30:02 2025 by rpki-client