This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CwYYgrwCdp_bVpodr3Q-lq17kFk.roa
File:                     CwYYgrwCdp_bVpodr3Q-lq17kFk.roa (raw, json)
Hash identifier:          KHnx+1dZ0MWTxGSqyoNbCeuL8NqI8ofU1MYwkYZSYjU=
Subject key identifier:   0B:06:18:82:BC:02:76:9F:DB:56:9A:1D:AF:74:3E:96:AD:7B:90:59
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01961675F84FDDF7A8390A144B67B3471EC2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CwYYgrwCdp_bVpodr3Q-lq17kFk.roa
Signing time:             Tue 08 Apr 2025 17:32:32 +0000
ROA not before:           Tue 08 Apr 2025 17:32:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12586
IP address blocks:        5.83.128.0/19 maxlen: 32
                          5.83.128.0/20 maxlen: 32
                          5.83.136.0/24 maxlen: 24
                          5.83.151.0/24 maxlen: 32
                          5.83.156.0/24 maxlen: 24
                          5.83.157.0/24 maxlen: 24
                          5.175.128.0/24 maxlen: 32
                          5.175.129.0/24 maxlen: 32
                          5.175.130.0/24 maxlen: 32
                          5.175.131.0/24 maxlen: 32
                          5.175.133.0/24 maxlen: 32
                          5.175.143.0/24 maxlen: 24
                          5.175.218.0/24 maxlen: 32
                          5.175.219.0/24 maxlen: 32
                          5.175.225.0/24 maxlen: 32
                          5.175.226.0/24 maxlen: 32
                          5.175.227.0/24 maxlen: 32
                          5.175.228.0/24 maxlen: 32
                          5.175.229.0/24 maxlen: 32
                          5.175.230.0/24 maxlen: 32
                          5.175.231.0/24 maxlen: 32
                          5.175.232.0/24 maxlen: 32
                          5.175.235.0/24 maxlen: 32
                          5.175.237.0/24 maxlen: 24
                          5.175.239.0/24 maxlen: 24
                          5.175.240.0/24 maxlen: 32
                          5.175.241.0/24 maxlen: 32
                          5.175.242.0/24 maxlen: 32
                          5.175.243.0/24 maxlen: 32
                          5.175.244.0/24 maxlen: 32
                          5.175.251.0/24 maxlen: 32
                          5.175.252.0/24 maxlen: 32
                          5.175.253.0/24 maxlen: 32
                          5.175.254.0/24 maxlen: 32
                          5.175.255.0/24 maxlen: 32
                          5.230.0.0/15 maxlen: 32
                          5.230.6.0/24 maxlen: 32
                          5.230.11.0/24 maxlen: 32
                          5.230.102.0/24 maxlen: 32
                          5.230.224.0/24 maxlen: 32
                          5.231.24.0/24 maxlen: 24
                          5.231.104.0/24 maxlen: 24
                          5.231.232.0/24 maxlen: 24
                          77.90.0.0/18 maxlen: 32
                          77.90.18.0/24 maxlen: 24
                          77.90.21.0/24 maxlen: 24
                          77.90.38.0/24 maxlen: 24
                          83.243.80.0/21 maxlen: 32
                          85.93.0.0/19 maxlen: 32
                          85.93.12.0/24 maxlen: 24
                          85.93.15.0/24 maxlen: 24
                          85.93.20.0/24 maxlen: 32
                          85.118.160.0/21 maxlen: 32
                          85.118.162.0/24 maxlen: 24
                          87.239.128.0/21 maxlen: 32
                          89.106.64.0/19 maxlen: 32
                          89.106.92.0/24 maxlen: 24
                          89.106.93.0/24 maxlen: 24
                          89.106.94.0/24 maxlen: 24
                          89.106.95.0/24 maxlen: 24
                          89.144.0.0/18 maxlen: 32
                          89.144.21.0/24 maxlen: 24
                          89.144.22.0/24 maxlen: 24
                          89.144.38.0/24 maxlen: 24
                          89.144.60.0/24 maxlen: 24
                          94.103.160.0/20 maxlen: 32
                          94.103.163.0/24 maxlen: 24
                          94.103.166.0/24 maxlen: 24
                          94.249.128.0/17 maxlen: 32
                          94.249.212.0/24 maxlen: 24
                          94.249.214.0/24 maxlen: 24
                          95.215.32.0/22 maxlen: 32
                          178.18.144.0/20 maxlen: 32
                          178.18.151.0/24 maxlen: 32
                          185.13.156.0/22 maxlen: 32
                          185.13.159.0/24 maxlen: 24
                          185.47.140.0/24 maxlen: 32
                          185.47.141.0/24 maxlen: 32
                          185.47.142.0/24 maxlen: 24
                          185.47.143.0/24 maxlen: 24
                          185.121.69.0/24 maxlen: 24
                          185.121.71.0/24 maxlen: 32
                          193.28.251.0/24 maxlen: 32
                          195.110.14.0/23 maxlen: 32
                          217.69.160.0/20 maxlen: 32
                          217.69.167.0/24 maxlen: 24
                          217.69.170.0/24 maxlen: 24
                          2a00:12d8::/29 maxlen: 128
                          2a00:19d0::/29 maxlen: 128
                          2a00:cdc0::/32 maxlen: 128
                          2a01:bd40::/29 maxlen: 128
                          2a02:7a0::/29 maxlen: 128
                          2a02:2fc0::/29 maxlen: 128
                          2a02:2fc0::/48 maxlen: 48
                          2a02:2fc0:1::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 08 Apr 2025 21:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:75:f8:4f:dd:f7:a8:39:0a:14:4b:67:b3:47:1e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Apr  8 17:32:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b061882bc02769fdb569a1daf743e96ad7b9059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:fe:5b:3b:0a:6c:eb:69:6d:c3:cb:71:7b:
                    42:ce:3b:c3:ee:63:9a:7b:5c:6d:aa:d5:09:5e:37:
                    d0:80:5c:28:8a:9e:40:1f:d3:b4:24:5f:b3:f5:38:
                    c8:00:ee:32:83:17:b4:ba:2f:86:04:c8:35:0b:12:
                    b2:f8:2e:72:ed:94:be:5f:c0:7e:6c:d9:3b:6d:74:
                    71:33:c0:1c:88:cb:7a:11:07:bd:48:b5:4f:eb:f8:
                    46:8e:87:a3:a5:04:68:a2:d3:5c:eb:85:2d:dd:2a:
                    b7:92:4a:10:d0:73:00:07:52:26:29:aa:c8:86:0a:
                    23:2e:d4:20:21:d1:d9:d8:53:55:67:a0:89:a1:dd:
                    c5:0a:5b:29:b7:10:13:42:20:90:75:e9:6d:7f:54:
                    e1:b4:95:10:5d:fb:ec:06:81:e8:1d:2d:ad:30:b8:
                    dc:f6:b0:b2:e6:fe:bb:f8:33:22:2d:3b:04:28:16:
                    79:c3:5f:a6:6b:4c:15:bc:4a:75:9b:50:69:6f:eb:
                    31:e9:0e:66:72:0e:46:eb:eb:99:47:44:48:42:39:
                    14:28:b6:1d:d0:e7:74:77:6d:f4:3f:67:82:08:a8:
                    d1:28:cb:4e:31:03:f0:f0:a2:b0:8e:e9:c7:b3:26:
                    87:9e:e3:2b:b2:80:c9:01:9f:ee:26:64:32:d8:68:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:18:82:BC:02:76:9F:DB:56:9A:1D:AF:74:3E:96:AD:7B:90:59
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CwYYgrwCdp_bVpodr3Q-lq17kFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/19
                  5.175.128.0/22
                  5.175.133.0/24
                  5.175.143.0/24
                  5.175.218.0/23
                  5.175.225.0-5.175.232.255
                  5.175.235.0/24
                  5.175.237.0/24
                  5.175.239.0-5.175.244.255
                  5.175.251.0-5.175.255.255
                  5.230.0.0/15
                  77.90.0.0/18
                  83.243.80.0/21
                  85.93.0.0/19
                  85.118.160.0/21
                  87.239.128.0/21
                  89.106.64.0/19
                  89.144.0.0/18
                  94.103.160.0/20
                  94.249.128.0/17
                  95.215.32.0/22
                  178.18.144.0/20
                  185.13.156.0/22
                  185.47.140.0/22
                  185.121.69.0/24
                  185.121.71.0/24
                  193.28.251.0/24
                  195.110.14.0/23
                  217.69.160.0/20
                IPv6:
                  2a00:12d8::/29
                  2a00:19d0::/29
                  2a00:cdc0::/32
                  2a01:bd40::/29
                  2a02:7a0::/29
                  2a02:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:73:a6:7c:a8:2d:20:f5:0d:05:98:a8:56:f7:f6:10:9f:
         c8:4d:6b:a5:6d:d9:85:3c:a2:77:10:ff:3c:cb:47:d4:a2:43:
         ad:99:c7:18:b0:c1:d7:ac:bd:94:80:9c:81:a6:be:aa:9d:65:
         cb:b3:4a:2c:50:6e:f3:fa:66:b3:63:23:b9:64:84:2e:80:84:
         e5:58:98:6f:a6:27:b7:50:74:0f:a1:31:0b:56:51:c0:ff:76:
         d2:2b:8f:1c:01:7b:bf:08:3d:85:d1:d8:db:ee:76:bd:a5:e1:
         fa:c5:5c:a5:5d:2f:b3:42:47:ce:74:09:2c:38:8e:5d:9b:65:
         ed:20:c0:4f:b7:67:b6:9d:00:6a:08:f6:7b:c1:8a:2f:31:ee:
         34:a6:b5:d1:61:e7:ed:69:42:81:cb:6b:cf:f3:75:25:81:80:
         df:ce:55:34:df:b6:f5:51:76:1f:03:e2:90:aa:75:22:65:3d:
         c5:bd:b3:4b:53:e9:d3:63:e7:18:c0:a3:fc:4d:ea:5e:90:b5:
         eb:8c:cc:77:97:3b:07:a2:6c:6a:6a:9f:54:2c:0e:eb:60:23:
         8e:14:bf:70:f5:84:d0:3f:ee:63:6a:bc:a1:29:b6:df:d0:59:
         02:5c:b8:bb:0d:84:be:e2:ce:23:8b:39:b2:83:d3:10:e6:98:
         6a:46:20:d9
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAZYWdfhP3feoOQoUS2ezRx7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDA4MTczMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjA2MTg4MmJjMDI3NjlmZGI1NjlhMWRhZjc0M2U5NmFkN2I5MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uj+WzsKbOtpbcPLcXtCzjvD7mOa
e1xtqtUJXjfQgFwoip5AH9O0JF+z9TjIAO4ygxe0ui+GBMg1CxKy+C5y7ZS+X8B+
bNk7bXRxM8AciMt6EQe9SLVP6/hGjoejpQRootNc64Ut3Sq3kkoQ0HMAB1ImKarI
hgojLtQgIdHZ2FNVZ6CJod3FClsptxATQiCQdeltf1ThtJUQXfvsBoHoHS2tMLjc
9rCy5v67+DMiLTsEKBZ5w1+ma0wVvEp1m1Bpb+sx6Q5mcg5G6+uZR0RIQjkUKLYd
0Od0d230P2eCCKjRKMtOMQPw8KKwjunHsyaHnuMrsoDJAZ/uJmQy2GhMlQIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFAsGGIK8Anaf21aaHa90Ppate5BZMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQ3dZWWdyd0NkcF9iVnBvZHIzUS1scTE3a0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBywQCAAEwgcQD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48DBAEFr9owDAMEAAWv4QMEAAWv6AMEAAWv
6wMEAAWv7TAMAwQABa/vAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQCuS+MAwQAuXlFAwQAuXlHAwQAwRz7AwQBw24OAwQE
2UWgMDAEAgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMF
AyoCL8AwDQYJKoZIhvcNAQELBQADggEBAA4gc6Z8qC0g9Q0FmKhW9/YQn8hNa6Vt
2YU8oncQ/zzLR9SiQ62ZxxiwwdesvZSAnIGmvqqdZcuzSixQbvP6ZrNjI7lkhC6A
hOVYmG+mJ7dQdA+hMQtWUcD/dtIrjxwBe78IPYXR2Nvudr2l4frFXKVdL7NCR850
CSw4jl2bZe0gwE+3Z7adAGoI9nvBii8x7jSmtdFh5+1pQoHLa8/zdSWBgN/OVTTf
tvVRdh8D4pCqdSJlPcW9s0tT6dNj5xjAo/xN6l6QteuMzHeXOweibGpqn1QsDutg
I44Uv3D1hNA/7mNqvKEptt/QWQJcuLsNhL7iziOLObKD0xDmmGpGINk=
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:12:43 2025 by rpki-client