This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WyHGrBBtXq4oIfEx9RYP6XPNI6w.roa
File:                     WyHGrBBtXq4oIfEx9RYP6XPNI6w.roa (raw, json)
Hash identifier:          y1ENmjiEqqf0U8GriIKGjsTgkN4si+I9MuJE7Otj5l0=
Subject key identifier:   5B:21:C6:AC:10:6D:5E:AE:28:21:F1:31:F5:16:0F:E9:73:CD:23:AC
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01970083016CA51119D7F0EBE26A4EC29ADE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WyHGrBBtXq4oIfEx9RYP6XPNI6w.roa
Signing time:             Sat 24 May 2025 04:17:54 +0000
ROA not before:           Sat 24 May 2025 04:17:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43260
IP address blocks:        5.231.30.0/24 maxlen: 24
                          5.231.105.0/24 maxlen: 24
                          5.231.115.0/24 maxlen: 24
                          77.90.54.0/24 maxlen: 24
                          94.249.172.0/24 maxlen: 24
                          94.249.173.0/24 maxlen: 24
                          94.249.194.0/24 maxlen: 24
                          94.249.195.0/24 maxlen: 24
                          94.249.233.0/24 maxlen: 24
                          94.249.238.0/24 maxlen: 24
                          94.249.239.0/24 maxlen: 24
                          95.215.32.0/24 maxlen: 24
                          95.215.34.0/24 maxlen: 24
                          178.18.144.0/24 maxlen: 24
                          217.69.166.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 24 May 2025 10:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:00:83:01:6c:a5:11:19:d7:f0:eb:e2:6a:4e:c2:9a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 24 04:17:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b21c6ac106d5eae2821f131f5160fe973cd23ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:59:12:78:af:5a:e3:4a:6c:e2:ae:43:bd:
                    b2:55:a0:00:1f:69:1b:f2:c9:45:25:c5:fc:6e:50:
                    fc:6c:7d:0a:75:90:2d:fa:fd:38:ec:78:6a:73:e4:
                    dc:ac:d7:0e:eb:13:6a:e4:64:a0:bf:28:b2:6d:e2:
                    3b:c4:bd:da:ac:b6:b7:82:bd:72:53:b5:7b:d9:55:
                    ea:c4:32:d8:07:b6:27:19:21:d2:05:cf:53:4f:93:
                    33:61:14:1f:44:f4:a1:23:d5:5e:3e:49:6a:a5:45:
                    6e:9a:7a:3f:c9:00:46:c5:21:f3:1d:06:a6:b8:ce:
                    7d:6d:24:e5:87:a4:cd:c8:8e:07:00:70:21:5e:6e:
                    ef:5c:11:93:92:5c:c2:cd:39:98:81:33:cb:7d:96:
                    f1:28:a0:55:94:17:f8:93:e7:22:8b:c9:d7:54:1d:
                    c0:0f:54:4f:60:20:78:83:c3:a4:40:4f:1f:93:e6:
                    9d:c4:a7:32:2e:49:8f:e3:12:c0:dc:97:a1:29:d7:
                    08:48:d4:e9:5e:e9:0e:ac:73:2a:75:43:79:88:6b:
                    fb:ef:24:b8:28:b5:9b:ae:4d:8f:68:d0:59:c0:90:
                    b4:82:46:60:7f:50:98:96:af:c1:9d:f8:c0:2b:49:
                    7c:90:16:29:b3:87:39:6f:dc:b2:5b:d4:df:17:d6:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:21:C6:AC:10:6D:5E:AE:28:21:F1:31:F5:16:0F:E9:73:CD:23:AC
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WyHGrBBtXq4oIfEx9RYP6XPNI6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.30.0/24
                  5.231.105.0/24
                  5.231.115.0/24
                  77.90.54.0/24
                  94.249.172.0/23
                  94.249.194.0/23
                  94.249.233.0/24
                  94.249.238.0/23
                  95.215.32.0/24
                  95.215.34.0/24
                  178.18.144.0/24
                  217.69.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:5b:7a:ca:77:8e:c1:1e:2e:68:63:e9:24:db:b2:ae:9c:5e:
         57:8f:9c:bb:92:04:dc:4a:e6:4f:dc:ac:94:1c:ce:ba:35:fb:
         ca:a8:a7:1b:57:e0:75:b6:18:eb:3d:28:6a:07:09:27:51:64:
         ee:b4:e1:eb:bd:98:c9:36:fe:6b:f3:dc:0c:5a:8e:2b:0f:e1:
         58:42:de:e6:bc:85:96:64:43:09:f0:d3:95:ac:57:26:fe:80:
         a3:6b:94:16:b1:8c:c0:35:cf:aa:42:62:33:49:7c:24:c3:8c:
         47:3a:07:f9:a0:80:52:67:f6:c2:68:5f:f9:e4:99:f3:69:18:
         33:23:59:b5:22:84:04:3a:e5:c4:da:5a:db:f4:6e:b3:4b:52:
         73:73:d7:ab:e2:49:64:67:e4:cf:82:78:b8:d2:7d:38:06:b7:
         b8:53:0c:88:c0:ff:2b:75:ec:a8:be:7b:89:15:eb:7f:81:33:
         f6:85:e7:19:45:39:52:06:37:f8:70:1f:73:5e:c4:cb:a7:b9:
         15:f0:ab:ee:0a:38:d4:aa:ff:26:fc:16:95:a3:86:3d:04:57:
         67:a1:62:8e:9e:74:c7:41:ed:f8:7b:79:ef:e9:e0:2b:85:47:
         48:9a:71:25:e2:e4:09:d1:5c:95:3d:0b:f7:cd:6d:bd:b9:cf:
         17:4f:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:38:57 2025 by rpki-client