This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcC3d3SzjMlAAZJUuMTrI3jsGIM.roa
File:                     BcC3d3SzjMlAAZJUuMTrI3jsGIM.roa (raw, json)
Hash identifier:          tgbh4wPtF2wX0gX1o9scvlHocaShxeFWXWttZYKG534=
Subject key identifier:   05:C0:B7:77:74:B3:8C:C9:40:01:92:54:B8:C4:EB:23:78:EC:18:83
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01976A472AFFD12FAF67FB88D1CA1EEDDEB5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcC3d3SzjMlAAZJUuMTrI3jsGIM.roa
Signing time:             Fri 13 Jun 2025 17:12:18 +0000
ROA not before:           Fri 13 Jun 2025 17:12:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48314
IP address blocks:        5.175.233.0/24 maxlen: 24
                          77.90.0.0/24 maxlen: 24
                          77.90.2.0/24 maxlen: 24
                          77.90.8.0/24 maxlen: 24
                          77.90.13.0/24 maxlen: 24
                          77.90.18.0/24 maxlen: 24
                          77.90.51.0/24 maxlen: 24
                          94.249.193.0/24 maxlen: 24
                          94.249.214.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 19 Jun 2025 04:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:47:2a:ff:d1:2f:af:67:fb:88:d1:ca:1e:ed:de:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun 13 17:12:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05c0b77774b38cc940019254b8c4eb2378ec1883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:86:a0:7a:2b:5c:2c:49:81:b3:75:71:b0:
                    1e:c7:7d:fa:c9:80:07:4f:7e:3f:51:ca:42:72:ed:
                    39:77:77:cd:0c:bb:21:22:67:68:2b:cd:0e:3e:e8:
                    6f:ce:62:d3:3f:38:f6:e1:03:87:83:97:d1:6f:f5:
                    00:a6:1c:ce:92:1e:f5:9f:a2:90:60:83:80:64:fd:
                    d8:25:ef:b5:a7:51:aa:b1:e5:99:cd:e5:fb:75:1c:
                    bc:18:e3:94:0d:42:13:bd:98:84:74:2c:96:27:ea:
                    33:0e:b8:c0:9d:ff:01:9e:f1:65:9e:5e:03:af:cb:
                    b6:ad:bd:ea:29:c8:42:cd:b1:f5:4e:4b:a7:3c:78:
                    18:a3:e4:53:46:86:7c:32:03:28:bd:2e:f2:51:a8:
                    a6:10:56:9d:c7:6b:a2:d1:03:90:71:e7:34:10:3e:
                    bc:2b:f0:2a:5a:99:5d:bb:b4:f6:fa:fa:cb:98:1c:
                    18:ce:1d:f3:5e:57:a9:61:3a:81:49:d8:ad:a3:fb:
                    e6:3e:fc:8e:2b:db:4c:09:59:3f:ab:a1:31:75:d5:
                    c2:22:90:4d:de:75:d6:1b:5b:09:e2:67:f0:f8:d1:
                    f5:fb:79:d3:70:0e:50:7e:0e:53:7a:95:7b:2b:78:
                    9f:c9:9e:8d:24:46:b2:b8:a2:4c:5f:b7:32:01:3d:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:B7:77:74:B3:8C:C9:40:01:92:54:B8:C4:EB:23:78:EC:18:83
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcC3d3SzjMlAAZJUuMTrI3jsGIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.233.0/24
                  77.90.0.0/24
                  77.90.2.0/24
                  77.90.8.0/24
                  77.90.13.0/24
                  77.90.18.0/24
                  77.90.51.0/24
                  94.249.193.0/24
                  94.249.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:be:4e:1a:8e:1f:21:a1:83:76:99:99:e4:02:7d:e5:29:d7:
         7e:c3:78:ca:2c:bb:2f:5c:6e:49:8a:9a:23:4f:11:00:b7:d4:
         49:c4:fe:c1:19:2b:6d:22:df:d2:2a:f8:28:05:08:35:1c:d6:
         b1:e6:f2:a8:d7:41:22:c1:16:fd:5a:02:87:73:cf:b5:56:5f:
         8b:2e:56:ac:83:ce:69:48:d3:36:2d:b6:bb:ec:9b:72:33:04:
         f6:8b:32:a6:ce:c8:13:2f:6e:cb:66:c9:26:93:35:58:1d:3d:
         9b:83:f6:e8:56:01:84:22:82:2d:7f:c0:49:05:c7:c4:d0:8a:
         d3:55:cc:76:6d:11:15:4e:16:91:fb:58:be:2d:8e:78:81:64:
         3e:70:9d:e3:81:05:e1:b4:9b:fb:08:0f:70:fa:80:62:7e:08:
         9e:fc:2f:42:64:a3:64:81:30:42:5a:a6:7d:a3:21:d2:b6:ad:
         76:c0:bb:8b:a3:aa:06:b8:a7:33:12:04:0a:ee:79:ea:c5:88:
         70:bb:64:c7:6b:cb:28:2e:d1:04:0a:eb:b9:bd:63:59:5f:a6:
         c5:5b:f4:ac:81:6a:5f:66:29:6d:5e:0a:a7:54:66:ab:ac:70:
         02:23:3a:f1:4d:f3:41:77:f5:c1:cc:7d:25:e2:5e:c2:c4:a7:
         51:6e:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:40:01 2025 by rpki-client