This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHduursEaEXq-_OCi_t-fFNyEMc.roa
File:                     bHduursEaEXq-_OCi_t-fFNyEMc.roa (raw, json)
Hash identifier:          8NN1BQxodc/773hG8Wszxy3EO8LNNhhTv4vD4rF0VM0=
Subject key identifier:   6C:77:6E:BA:BB:04:68:45:EA:FB:F3:82:8B:FB:7E:7C:53:72:10:C7
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01970C2E5F4AA8016E12B97ABFC5FECFBF7A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHduursEaEXq-_OCi_t-fFNyEMc.roa
Signing time:             Mon 26 May 2025 10:40:55 +0000
ROA not before:           Mon 26 May 2025 10:40:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        5.83.150.0/24 maxlen: 24
                          5.231.70.0/24 maxlen: 24
                          5.231.82.0/24 maxlen: 24
                          5.231.96.0/24 maxlen: 24
                          5.231.203.0/24 maxlen: 24
                          5.231.234.0/24 maxlen: 24
                          77.90.22.0/24 maxlen: 24
                          77.90.39.0/24 maxlen: 24
                          77.90.41.0/24 maxlen: 24
                          77.90.52.0/24 maxlen: 24
                          77.90.58.0/24 maxlen: 24
                          85.93.1.0/24 maxlen: 24
                          85.93.6.0/24 maxlen: 24
                          85.93.22.0/24 maxlen: 24
                          89.144.14.0/24 maxlen: 24
                          89.144.16.0/24 maxlen: 24
                          89.144.17.0/24 maxlen: 24
                          89.144.18.0/24 maxlen: 24
                          89.144.25.0/24 maxlen: 24
                          89.144.35.0/24 maxlen: 24
                          94.103.168.0/24 maxlen: 24
                          94.249.153.0/24 maxlen: 24
                          94.249.158.0/24 maxlen: 24
                          178.18.147.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 31 May 2025 12:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:0c:2e:5f:4a:a8:01:6e:12:b9:7a:bf:c5:fe:cf:bf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 26 10:40:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6c776ebabb046845eafbf3828bfb7e7c537210c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:40:1c:10:22:e0:b3:f1:e1:24:e1:45:0f:
                    f5:fd:35:82:18:ac:4f:71:fe:a5:27:51:09:c1:57:
                    de:b1:dc:97:bd:b2:b6:9a:31:f8:a0:20:93:89:23:
                    0a:30:d8:05:ed:fb:0c:e8:8f:a7:fc:80:c9:c1:11:
                    d2:03:5c:84:0f:8f:f2:7a:a1:31:6e:a4:0f:59:2b:
                    02:42:8e:72:78:b1:18:a8:7f:56:c1:e0:a4:52:01:
                    31:fc:d4:9f:0b:08:71:e9:ac:cf:4b:5a:cc:6a:60:
                    9f:6b:ef:50:9c:02:01:f4:a6:30:f8:f9:86:10:21:
                    31:48:0b:87:c6:c2:c1:94:1c:66:7a:7a:3b:76:1d:
                    1c:7d:4b:2f:cb:22:da:f5:f1:c2:f2:4a:07:27:91:
                    f8:80:68:a2:73:21:a3:8b:e3:5d:e5:0e:2b:22:a8:
                    02:d1:73:2b:1c:b7:92:ec:1e:4a:85:35:9e:43:71:
                    5c:52:08:6d:2f:d4:98:da:8a:06:10:93:d0:27:6c:
                    80:c1:cd:26:22:09:60:07:9c:a6:be:52:ab:b8:f2:
                    65:9b:28:c5:a8:de:b8:4b:b3:7e:42:85:53:62:7c:
                    02:c6:56:ff:48:28:87:e8:53:8a:37:7b:f5:ba:52:
                    7e:e0:93:e3:95:7e:b0:44:e3:50:c6:da:93:90:68:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:6E:BA:BB:04:68:45:EA:FB:F3:82:8B:FB:7E:7C:53:72:10:C7
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHduursEaEXq-_OCi_t-fFNyEMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.150.0/24
                  5.231.70.0/24
                  5.231.82.0/24
                  5.231.96.0/24
                  5.231.203.0/24
                  5.231.234.0/24
                  77.90.22.0/24
                  77.90.39.0/24
                  77.90.41.0/24
                  77.90.52.0/24
                  77.90.58.0/24
                  85.93.1.0/24
                  85.93.6.0/24
                  85.93.22.0/24
                  89.144.14.0/24
                  89.144.16.0-89.144.18.255
                  89.144.25.0/24
                  89.144.35.0/24
                  94.103.168.0/24
                  94.249.153.0/24
                  94.249.158.0/24
                  178.18.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:01:37:2f:a3:34:f0:8a:55:10:b1:28:be:86:14:38:b1:70:
         27:42:3b:2b:52:0f:a3:8c:ef:20:73:d4:d4:c1:43:10:a1:d9:
         65:25:89:a5:2f:4f:4d:5b:b9:21:0d:2e:6e:d4:39:ff:a4:f8:
         78:a8:97:20:a1:80:b3:5b:40:c9:3f:3e:d0:4c:fa:98:83:fc:
         8e:ca:5e:6e:9c:48:9d:ea:f7:85:71:cd:09:32:51:9f:a3:55:
         38:98:7f:22:b0:4c:70:09:3d:6b:b1:2a:17:51:08:26:6c:e9:
         29:43:a7:76:31:77:56:73:af:17:45:49:8a:ff:fe:c2:fc:7c:
         1d:4a:bf:2e:ea:93:d8:ec:8c:3b:4a:3b:84:32:36:f7:8e:02:
         1f:4b:47:7a:93:13:9d:d9:29:2e:d7:be:73:9f:c6:46:86:77:
         ad:89:de:26:d1:90:3f:a5:ab:91:db:a3:26:f3:8a:ef:40:42:
         1a:bd:d8:7c:b9:84:1d:e3:cc:f0:72:39:aa:38:36:d3:db:3a:
         ed:23:25:5b:16:a5:b3:d5:32:61:1b:99:1a:d3:3b:d7:4c:93:
         9f:62:41:98:bb:f1:a7:35:7a:b9:e7:0a:21:47:d5:07:be:7b:
         f5:4b:1d:e8:6e:5b:2c:ec:f0:3a:b7:cb:00:4d:ca:1a:7d:6c:
         9b:bd:c3:0f
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZcMLl9KqAFuErl6v8X+z796MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTI2MTA0MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzc3NmViYWJiMDQ2ODQ1ZWFmYmYzODI4YmZiN2U3YzUzNzIxMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRpAHBAi4LPx4SThRQ/1/TWCGKxP
cf6lJ1EJwVfesdyXvbK2mjH4oCCTiSMKMNgF7fsM6I+n/IDJwRHSA1yED4/yeqEx
bqQPWSsCQo5yeLEYqH9WweCkUgEx/NSfCwhx6azPS1rMamCfa+9QnAIB9KYw+PmG
ECExSAuHxsLBlBxmeno7dh0cfUsvyyLa9fHC8koHJ5H4gGiicyGji+Nd5Q4rIqgC
0XMrHLeS7B5KhTWeQ3FcUghtL9SY2ooGEJPQJ2yAwc0mIglgB5ymvlKruPJlmyjF
qN64S7N+QoVTYnwCxlb/SCiH6FOKN3v1ulJ+4JPjlX6wRONQxtqTkGg6JwIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFGx3brq7BGhF6vvzgov7fnxTchDHMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYkhkdXVyc0VhRVhxLV9PQ2lfdC1mRk55RU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAF
U5YDBAAF50YDBAAF51IDBAAF52ADBAAF58sDBAAF5+oDBABNWhYDBABNWicDBABN
WikDBABNWjQDBABNWjoDBABVXQEDBABVXQYDBABVXRYDBABZkA4wDAMEBFmQEAME
AFmQEgMEAFmQGQMEAFmQIwMEAF5nqAMEAF75mQMEAF75ngMEALISkzANBgkqhkiG
9w0BAQsFAAOCAQEABAE3L6M08IpVELEovoYUOLFwJ0I7K1IPo4zvIHPU1MFDEKHZ
ZSWJpS9PTVu5IQ0ubtQ5/6T4eKiXIKGAs1tAyT8+0Ez6mIP8jspebpxIner3hXHN
CTJRn6NVOJh/IrBMcAk9a7EqF1EIJmzpKUOndjF3VnOvF0VJiv/+wvx8HUq/LuqT
2OyMO0o7hDI2944CH0tHepMTndkpLte+c5/GRoZ3rYneJtGQP6WrkdujJvOK70BC
Gr3YfLmEHePM8HI5qjg209s67SMlWxals9UyYRuZGtM710yTn2JBmLvxpzV6uecK
IUfVB7579Usd6G5bLOzwOrfLAE3KGn1sm73DDw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:33:29 2025 by rpki-client