This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SebEc_qA6Lz-125GSy8vm35NLKo.roa
File:                     SebEc_qA6Lz-125GSy8vm35NLKo.roa (raw, json)
Hash identifier:          IiIKdS4L8Q4pJHEvr4tAo/Ya7hZXh8rOtroKb99J/vE=
Subject key identifier:   49:E6:C4:73:FA:80:E8:BC:FE:D7:6E:46:4B:2F:2F:9B:7E:4D:2C:AA
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0194F02956C6228E49A0F47195DBDE1BDAA1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SebEc_qA6Lz-125GSy8vm35NLKo.roa
Signing time:             Mon 10 Feb 2025 14:00:28 +0000
ROA not before:           Mon 10 Feb 2025 14:00:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43260
IP address blocks:        5.83.129.0/24 maxlen: 24
                          5.175.138.0/24 maxlen: 24
                          77.90.54.0/24 maxlen: 24
                          87.239.131.0/24 maxlen: 24
                          89.106.69.0/24 maxlen: 24
                          94.103.163.0/24 maxlen: 24
                          94.249.153.0/24 maxlen: 24
                          94.249.158.0/24 maxlen: 24
                          94.249.195.0/24 maxlen: 24
                          94.249.214.0/24 maxlen: 24
                          94.249.215.0/24 maxlen: 24
                          94.249.237.0/24 maxlen: 24
                          95.215.32.0/24 maxlen: 24
                          95.215.34.0/24 maxlen: 24
                          178.18.144.0/24 maxlen: 24
                          185.13.156.0/24 maxlen: 24
                          185.13.159.0/24 maxlen: 24
                          185.47.143.0/24 maxlen: 24
                          217.69.166.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 05:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f0:29:56:c6:22:8e:49:a0:f4:71:95:db:de:1b:da:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Feb 10 14:00:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=49e6c473fa80e8bcfed76e464b2f2f9b7e4d2caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:d3:fb:31:24:42:d7:1c:b4:ba:d6:cb:d8:
                    7f:c1:23:9d:66:1d:f0:b2:00:57:53:bc:e2:89:57:
                    d1:d2:76:1e:9a:d6:74:dc:ce:07:d5:ab:4a:86:cc:
                    97:67:d0:4e:b2:e9:2f:ee:93:25:ae:d7:0f:e3:c6:
                    4d:69:1d:81:3e:04:c6:13:1a:86:f8:fc:10:0d:46:
                    4d:a3:b5:e6:c9:37:50:61:1c:07:8a:af:7d:17:6b:
                    af:05:ab:d7:d6:fa:eb:3f:a3:d8:71:1a:a3:62:a5:
                    33:de:c6:fa:fd:ef:e7:ae:e2:88:6c:ed:e8:43:22:
                    0a:af:a4:89:10:46:1a:d5:cd:85:da:0c:a1:e9:dd:
                    27:99:ac:e7:83:f1:4c:ce:23:c2:9d:90:1a:b3:de:
                    fb:ab:99:74:d7:a8:d7:86:9b:cd:38:d7:e7:0a:25:
                    4a:9c:be:d9:19:43:3c:a5:be:f5:37:f8:af:4d:44:
                    9d:a0:ed:e6:f1:33:bd:e4:ba:a9:a2:cf:57:df:e3:
                    38:75:9c:6a:16:7d:b8:43:5f:24:b3:87:f0:b7:2c:
                    49:c2:d8:56:df:83:c3:6a:57:b7:55:15:ba:81:f2:
                    fc:ee:eb:b3:2c:c6:19:42:68:63:60:53:64:a1:df:
                    e3:91:8d:55:be:6f:83:71:b7:c1:70:e8:8f:77:32:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:C4:73:FA:80:E8:BC:FE:D7:6E:46:4B:2F:2F:9B:7E:4D:2C:AA
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SebEc_qA6Lz-125GSy8vm35NLKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.129.0/24
                  5.175.138.0/24
                  77.90.54.0/24
                  87.239.131.0/24
                  89.106.69.0/24
                  94.103.163.0/24
                  94.249.153.0/24
                  94.249.158.0/24
                  94.249.195.0/24
                  94.249.214.0/23
                  94.249.237.0/24
                  95.215.32.0/24
                  95.215.34.0/24
                  178.18.144.0/24
                  185.13.156.0/24
                  185.13.159.0/24
                  185.47.143.0/24
                  217.69.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:a3:26:7f:9e:47:b3:fc:27:3e:59:20:a4:ee:70:db:25:
         97:de:a8:01:9a:62:a3:89:29:47:68:3b:0b:eb:2d:28:60:9a:
         56:68:4c:ba:21:71:f8:1d:8f:6c:14:a3:ac:f3:9d:bd:ca:7c:
         82:2c:ea:c9:bd:c6:6f:ed:42:4e:55:f4:d8:ab:94:3c:e8:b8:
         c9:91:ec:d3:13:ff:c0:e2:31:42:77:45:eb:af:36:73:c7:a4:
         c6:ef:f6:a8:d3:df:9a:26:3a:d9:76:3d:5e:98:42:16:d8:7d:
         0d:e6:7c:28:06:60:1b:d9:2d:0e:40:b6:66:d3:88:df:c1:c5:
         71:30:7f:56:9b:f4:53:5a:75:f4:d0:4e:f1:60:ed:01:71:50:
         d2:3e:43:5b:70:80:91:db:19:03:b2:ff:56:b6:72:68:4f:dc:
         eb:10:7d:71:b0:85:cd:3e:4b:54:5a:11:b1:e9:7e:48:e7:15:
         d3:54:4a:47:94:43:76:88:a5:23:6d:ed:eb:b8:34:15:53:f3:
         3b:da:c2:e2:28:33:5e:e6:a7:a7:93:11:b9:6d:b4:29:f0:a1:
         4a:03:95:6a:34:52:7d:c4:e1:2f:9a:a1:02:3f:c4:fa:d4:d7:
         5f:0d:b6:26:15:bf:f2:3f:ee:76:67:ab:1a:4f:15:51:be:90:
         85:a9:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:57:17 2025 by rpki-client