This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JnoBxveWtzDptbN-ipdKJGRy21w.roa
File:                     JnoBxveWtzDptbN-ipdKJGRy21w.roa (raw, json)
Hash identifier:          060tmvUysj8kQp+IjXcIMmUfnlkol7dw6fDDR1Y9mrI=
Subject key identifier:   26:7A:01:C6:F7:96:B7:30:E9:B5:B3:7E:8A:97:4A:24:64:72:DB:5C
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0196AA7055E27701D6A1E5AFDD4E82B728E1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JnoBxveWtzDptbN-ipdKJGRy21w.roa
Signing time:             Wed 07 May 2025 11:10:10 +0000
ROA not before:           Wed 07 May 2025 11:10:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     36352
IP address blocks:        5.83.139.0/24 maxlen: 24
                          77.90.7.0/24 maxlen: 24
                          89.144.3.0/24 maxlen: 24
                          94.103.168.0/24 maxlen: 24
                          94.249.232.0/24 maxlen: 24
                          95.215.33.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 08 May 2025 04:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:70:55:e2:77:01:d6:a1:e5:af:dd:4e:82:b7:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May  7 11:10:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=267a01c6f796b730e9b5b37e8a974a246472db5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:bd:a9:52:9f:77:0c:7d:34:12:5e:d8:1a:
                    ce:3a:55:46:ca:4b:a6:f7:7d:66:bc:6b:68:61:a1:
                    24:46:ff:a8:db:7a:b2:c2:01:14:8e:c0:ba:d7:fa:
                    33:0a:f6:58:84:59:e2:91:01:53:f6:55:45:1d:fc:
                    29:d3:0f:1e:ca:ee:10:e4:c4:0f:fe:4d:83:5e:3a:
                    52:40:57:16:1b:b4:a6:bb:a0:07:f8:2d:2c:91:b4:
                    d7:cb:5d:26:64:c8:09:e9:be:b0:89:21:c3:fa:24:
                    79:2a:98:3d:36:20:37:c9:0f:3c:33:30:5e:e2:c4:
                    ba:4b:fd:58:be:be:33:34:b9:86:db:b7:1c:e6:b4:
                    4d:05:60:71:3f:5f:10:fc:aa:54:5d:01:6e:1a:ec:
                    2c:8d:3f:91:7e:24:4e:71:c1:b2:ae:4e:a6:ee:8e:
                    da:28:ec:fd:12:62:e5:21:e8:bb:ce:52:5b:43:74:
                    c4:3f:3e:bf:3e:92:e2:7a:36:59:82:36:9f:b9:7f:
                    43:1f:d5:04:f2:66:97:e3:64:e0:c7:16:56:f1:3e:
                    fc:01:db:26:89:da:31:c9:c4:c8:10:c6:ee:20:64:
                    02:cf:ae:b6:4a:b7:0e:9a:6a:44:59:48:ae:95:bf:
                    c7:52:73:08:ca:1f:79:c2:fb:2e:91:7b:fb:d6:6d:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:01:C6:F7:96:B7:30:E9:B5:B3:7E:8A:97:4A:24:64:72:DB:5C
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JnoBxveWtzDptbN-ipdKJGRy21w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.139.0/24
                  77.90.7.0/24
                  89.144.3.0/24
                  94.103.168.0/24
                  94.249.232.0/24
                  95.215.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:35:86:29:c7:fa:12:09:95:12:8f:66:a4:2f:41:e1:45:
         16:75:19:6d:94:c3:4a:54:31:6a:91:0f:10:dc:4f:89:e5:6e:
         3d:c2:58:bb:ea:7b:d4:d1:f6:7c:92:74:ec:58:fc:1e:a5:00:
         8f:30:7f:94:44:fd:14:67:7b:04:f5:91:12:67:f2:4d:99:19:
         7c:4a:f8:22:39:da:d8:6f:cb:00:05:25:a1:e5:27:81:cf:84:
         36:77:ab:dc:bd:41:ee:e6:ef:d0:d1:64:fc:9c:ca:ad:e2:8f:
         a8:d6:01:10:fc:6c:62:c9:55:09:1c:5d:47:63:44:0f:32:d5:
         53:54:18:3e:c2:36:9f:0a:b2:37:95:3a:fe:6c:62:43:c3:eb:
         8a:4e:90:27:4e:9e:4d:47:7c:57:cc:04:d6:52:6e:5c:31:50:
         fd:82:a0:b8:ce:8e:30:9b:38:8c:f2:c3:54:60:b6:ab:0f:55:
         6d:0e:4d:10:6a:77:12:3c:3e:28:db:29:de:79:40:f5:30:9a:
         70:57:43:d4:2a:bb:27:2b:3d:25:30:40:1b:56:8c:04:44:79:
         d3:e7:f2:25:22:a3:6b:8b:fe:f0:87:18:7f:14:4c:2f:f0:e5:
         7b:e7:ff:80:58:0b:80:24:56:32:71:ec:e0:3d:6b:ba:38:e7:
         3d:e0:95:19
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZaqcFXidwHWoeWv3U6CtyjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTA3MTExMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdhMDFjNmY3OTZiNzMwZTliNWIzN2U4YTk3NGEyNDY0NzJkYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+9qVKfdwx9NBJe2BrOOlVGykum
931mvGtoYaEkRv+o23qywgEUjsC61/ozCvZYhFnikQFT9lVFHfwp0w8eyu4Q5MQP
/k2DXjpSQFcWG7Smu6AH+C0skbTXy10mZMgJ6b6wiSHD+iR5Kpg9NiA3yQ88MzBe
4sS6S/1Yvr4zNLmG27cc5rRNBWBxP18Q/KpUXQFuGuwsjT+RfiROccGyrk6m7o7a
KOz9EmLlIei7zlJbQ3TEPz6/PpLiejZZgjafuX9DH9UE8maX42TgxxZW8T78Adsm
idoxycTIEMbuIGQCz662SrcOmmpEWUiulb/HUnMIyh95wvsukXv71m3tswIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCZ6Acb3lrcw6bWzfoqXSiRkcttcMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSm5vQnh2ZVd0ekRwdGJOLWlwZEtKR1J5MjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABVOLAwQA
TVoHAwQAWZADAwQAXmeoAwQAXvnoAwQAX9chMA0GCSqGSIb3DQEBCwUAA4IBAQAo
PTWGKcf6EgmVEo9mpC9B4UUWdRltlMNKVDFqkQ8Q3E+J5W49wli76nvU0fZ8knTs
WPwepQCPMH+URP0UZ3sE9ZESZ/JNmRl8SvgiOdrYb8sABSWh5SeBz4Q2d6vcvUHu
5u/Q0WT8nMqt4o+o1gEQ/GxiyVUJHF1HY0QPMtVTVBg+wjafCrI3lTr+bGJDw+uK
TpAnTp5NR3xXzATWUm5cMVD9gqC4zo4wmziM8sNUYLarD1VtDk0QancSPD4o2yne
eUD1MJpwV0PUKrsnKz0lMEAbVowERHnT5/IlIqNri/7whxh/FEwv8OV75/+AWAuA
JFYycezgPWu6OOc94JUZ
-----END CERTIFICATE-----
Generated at Sat Dec 27 15:50:05 2025 by rpki-client