This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efPwUhjH2eeszE136HzJCNnYGs4.roa
File:                     efPwUhjH2eeszE136HzJCNnYGs4.roa (raw, json)
Hash identifier:          tJQblIUTfHy87SXAuNRsSresXnOFqEg4QjT3ZgTok8c=
Subject key identifier:   79:F3:F0:52:18:C7:D9:E7:AC:CC:4D:77:E8:7C:C9:08:D9:D8:1A:CE
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0196DB2C39784667544858ECAB42E34A9669
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efPwUhjH2eeszE136HzJCNnYGs4.roa
Signing time:             Fri 16 May 2025 22:17:10 +0000
ROA not before:           Fri 16 May 2025 22:17:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        5.83.150.0/24 maxlen: 24
                          5.231.70.0/24 maxlen: 24
                          5.231.82.0/24 maxlen: 24
                          5.231.96.0/24 maxlen: 24
                          5.231.203.0/24 maxlen: 24
                          5.231.234.0/24 maxlen: 24
                          77.90.22.0/24 maxlen: 24
                          77.90.39.0/24 maxlen: 24
                          77.90.41.0/24 maxlen: 24
                          77.90.52.0/24 maxlen: 24
                          77.90.58.0/24 maxlen: 24
                          85.93.1.0/24 maxlen: 24
                          85.93.6.0/24 maxlen: 24
                          85.93.7.0/24 maxlen: 24
                          85.93.22.0/24 maxlen: 24
                          89.144.14.0/24 maxlen: 24
                          89.144.16.0/24 maxlen: 24
                          89.144.17.0/24 maxlen: 24
                          89.144.18.0/24 maxlen: 24
                          89.144.25.0/24 maxlen: 24
                          89.144.35.0/24 maxlen: 24
                          94.249.153.0/24 maxlen: 24
                          94.249.158.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 17 May 2025 04:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:2c:39:78:46:67:54:48:58:ec:ab:42:e3:4a:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 16 22:17:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79f3f05218c7d9e7accc4d77e87cc908d9d81ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:f1:be:07:58:f7:6d:7a:6e:8b:45:cb:26:
                    50:e5:f3:92:21:f8:96:68:70:d7:4c:6b:08:85:4f:
                    b0:40:c9:e4:0f:ca:ec:d5:46:69:ec:70:e9:e8:1b:
                    a8:ef:cc:c9:84:01:2e:1d:f1:70:30:ca:ec:e9:2e:
                    53:2c:cb:db:76:c4:1b:27:4a:5a:41:e8:1c:b4:7f:
                    30:49:5c:6d:41:23:07:d3:95:47:45:40:32:2f:42:
                    00:6f:27:39:7f:57:39:48:84:62:a0:6a:65:fb:6a:
                    a5:36:39:04:fe:c8:79:79:fa:0d:6e:6a:77:e8:1b:
                    4b:c9:7b:20:13:34:00:da:e4:b6:73:e5:64:06:7e:
                    26:d4:d5:8d:d1:45:33:2f:d2:7a:b9:47:7e:bd:4a:
                    38:a5:e1:9a:ec:eb:dd:14:79:2d:f0:56:3a:2b:25:
                    7b:f8:c7:57:f9:d4:12:64:a3:ba:07:fb:ea:58:61:
                    c6:e3:6a:58:e8:fe:e2:83:1b:cf:dc:6d:41:8a:07:
                    7f:a8:74:6a:cb:6a:1d:32:27:b3:c4:0c:0e:2e:c0:
                    21:cb:11:4c:4e:73:67:26:5a:ad:b8:80:a3:8f:aa:
                    f3:cf:fe:a9:2f:0f:a2:bf:44:0b:58:3f:02:e8:34:
                    91:7f:fb:e4:6d:32:bd:cc:07:c2:83:55:cf:d3:6c:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:F0:52:18:C7:D9:E7:AC:CC:4D:77:E8:7C:C9:08:D9:D8:1A:CE
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efPwUhjH2eeszE136HzJCNnYGs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.150.0/24
                  5.231.70.0/24
                  5.231.82.0/24
                  5.231.96.0/24
                  5.231.203.0/24
                  5.231.234.0/24
                  77.90.22.0/24
                  77.90.39.0/24
                  77.90.41.0/24
                  77.90.52.0/24
                  77.90.58.0/24
                  85.93.1.0/24
                  85.93.6.0/23
                  85.93.22.0/24
                  89.144.14.0/24
                  89.144.16.0-89.144.18.255
                  89.144.25.0/24
                  89.144.35.0/24
                  94.249.153.0/24
                  94.249.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:32:d9:f0:05:b2:81:2b:49:25:eb:1b:13:d6:f0:f9:80:
         3e:69:c1:e6:44:69:4f:f8:31:60:89:34:d2:25:c4:a6:9b:85:
         f1:2e:4b:3c:11:2a:9d:46:bb:54:0d:bf:6a:de:52:1b:5c:1f:
         15:d0:fd:86:a8:5d:93:97:42:b7:77:21:03:a4:82:90:65:d0:
         cc:47:27:d9:56:d6:26:1d:38:e5:f7:bd:70:a0:5a:6d:27:6f:
         7c:55:eb:ff:5f:53:cb:a1:d9:5f:39:f0:56:25:22:a5:41:0a:
         62:77:e8:23:20:5c:17:d7:41:2b:ae:25:16:da:a6:9a:de:77:
         fe:dc:39:ae:87:a8:61:33:43:9a:ad:6f:d5:b7:5f:ce:00:3c:
         5b:ed:02:82:8c:6e:10:09:7f:66:cf:92:25:b2:03:3a:be:25:
         77:67:f7:7f:aa:36:8d:e2:01:2f:25:20:d2:cb:40:08:49:98:
         b9:35:63:79:8c:fa:db:09:73:ce:e2:97:39:2f:1d:8c:b5:eb:
         cb:36:31:74:9a:30:68:17:76:0f:0d:09:ff:a4:8f:d9:19:83:
         98:3c:3a:da:9e:97:1c:64:61:ea:6a:11:93:3d:79:1c:b7:01:
         74:19:21:b2:db:27:8c:9e:c2:5b:16:5d:ae:91:0f:9e:44:51:
         58:fb:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:47:07 2025 by rpki-client