This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ia2sc9qRGgwYTS909rs9H8eMsFQ.roa
File:                     ia2sc9qRGgwYTS909rs9H8eMsFQ.roa (raw, json)
Hash identifier:          2f/58auIPXFqdyKhHKIO3HPV2uInJccZ9bzIGFtMSXY=
Subject key identifier:   89:AD:AC:73:DA:91:1A:0C:18:4D:2F:74:F6:BB:3D:1F:C7:8C:B0:54
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01970FF8D634F6AA3CAAFD6269BF7DEDF99E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ia2sc9qRGgwYTS909rs9H8eMsFQ.roa
Signing time:             Tue 27 May 2025 04:20:55 +0000
ROA not before:           Tue 27 May 2025 04:20:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215828
IP address blocks:        77.90.25.0/24 maxlen: 24
                          94.249.138.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 27 May 2025 14:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:0f:f8:d6:34:f6:aa:3c:aa:fd:62:69:bf:7d:ed:f9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 27 04:20:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89adac73da911a0c184d2f74f6bb3d1fc78cb054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:79:e6:91:32:ca:b6:44:fe:e3:00:00:ac:
                    25:e8:bb:15:41:15:36:09:b1:f7:98:c9:67:8a:07:
                    83:5a:53:c9:e1:bb:88:d7:1b:05:57:5d:bf:04:5f:
                    b5:69:c6:8e:66:06:13:b9:d5:46:b2:24:a9:eb:45:
                    f7:6f:5c:e9:44:21:7d:69:2c:0c:e0:e8:6e:2a:eb:
                    0c:2e:a9:3c:b6:a9:ce:28:de:b1:47:ad:b5:9c:86:
                    1f:73:02:f3:95:65:ec:86:e5:21:1c:3a:8e:3c:fe:
                    6b:10:95:82:9d:09:72:98:cf:85:16:fd:34:58:40:
                    a5:0a:7c:80:d3:8f:90:f7:4d:50:fd:13:9a:24:a7:
                    5a:e4:b0:fb:6d:f2:b4:f3:a0:2b:98:9d:65:1f:cc:
                    6f:ec:d7:ed:76:46:c6:d5:12:9c:60:37:e7:13:2a:
                    1c:fa:c0:eb:55:82:fc:51:94:23:1a:05:0f:52:d7:
                    a1:25:13:cb:4b:5d:37:57:a9:7f:40:f4:ed:94:30:
                    aa:93:c1:86:0e:f9:27:de:98:5e:70:ea:7a:a1:80:
                    ae:ba:80:f4:f1:8b:7a:cc:70:0c:50:f3:c2:35:a6:
                    96:fd:af:78:b1:dc:1e:c2:c0:c8:97:6d:da:52:f9:
                    49:52:42:64:e5:c7:97:12:13:29:04:d0:5d:41:65:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:AC:73:DA:91:1A:0C:18:4D:2F:74:F6:BB:3D:1F:C7:8C:B0:54
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ia2sc9qRGgwYTS909rs9H8eMsFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.25.0/24
                  94.249.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:18:a8:f7:d7:8f:53:62:6f:5a:f0:62:b3:14:03:3f:b1:53:
         4c:ae:5e:23:2f:aa:0c:2c:ff:bc:1e:0a:88:68:ce:62:bf:ff:
         35:54:e8:65:9a:f9:0b:e0:3d:26:43:98:a1:67:35:36:a7:ba:
         82:3f:f7:9d:73:0d:cb:fb:cf:73:ef:65:3e:fd:71:e0:19:7f:
         ad:6b:20:b0:8f:39:77:15:e7:af:ad:81:c3:f5:06:78:01:e0:
         a5:e8:5b:33:8f:1e:2f:a8:98:c8:2b:c6:0e:8b:d8:cb:fa:31:
         15:e2:af:b2:75:40:d2:a3:f6:18:42:3d:16:a9:0a:ce:9f:fa:
         36:de:76:8a:64:24:50:0e:3c:07:04:f5:55:29:02:ae:3e:b6:
         b1:60:1e:3d:db:55:bd:a5:ff:c6:ed:73:43:52:1d:b9:0e:f3:
         53:fa:b3:ae:7e:f9:6c:28:8a:5a:7a:1e:bf:24:ab:af:53:a0:
         99:9e:a6:30:dc:22:1e:97:00:f2:61:be:b7:88:ca:21:24:df:
         c3:a7:f4:eb:e5:cf:ea:74:64:12:ae:f4:97:5c:bb:d0:0d:b6:
         45:0c:36:19:ec:7c:09:00:8b:32:66:ad:f0:a8:9f:c6:a5:1d:
         9c:a0:a1:79:d4:c0:30:c8:2d:98:17:39:df:4f:30:72:07:15:
         81:01:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:21:01 2025 by rpki-client