This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wvNF8GGDAevHrn9S7Xycbnkporo.roa
File:                     wvNF8GGDAevHrn9S7Xycbnkporo.roa (raw, json)
Hash identifier:          VH9p8R+E5VFRHie9cO7NfmxifbHBbyc3LKnVz95/SWU=
Subject key identifier:   C2:F3:45:F0:61:83:01:EB:C7:AE:7F:52:ED:7C:9C:6E:79:29:A2:BA
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0196DCE92B442B08D9A174C229E016F86244
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wvNF8GGDAevHrn9S7Xycbnkporo.roa
Signing time:             Sat 17 May 2025 06:23:10 +0000
ROA not before:           Sat 17 May 2025 06:23:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211301
IP address blocks:        5.175.249.0/24 maxlen: 24
                          77.90.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 21 May 2025 04:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:e9:2b:44:2b:08:d9:a1:74:c2:29:e0:16:f8:62:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 17 06:23:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2f345f0618301ebc7ae7f52ed7c9c6e7929a2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:31:0e:57:fa:99:5c:2d:15:22:9c:f4:de:
                    d8:59:50:74:83:69:01:3c:63:93:53:27:af:7a:b0:
                    3a:36:67:ea:73:3e:d9:c2:6c:b7:83:e7:e1:c0:a9:
                    8f:a3:e4:82:06:34:14:13:9f:b0:91:c8:21:e4:23:
                    42:79:46:93:37:42:71:52:f2:52:b8:04:9a:65:8f:
                    d1:83:3a:8c:82:51:2a:ba:93:77:ec:ce:55:5f:11:
                    3c:36:2c:6c:bd:b3:58:ac:fa:ca:3f:72:b6:cb:5f:
                    28:e1:3b:04:2e:d9:4c:64:d7:00:15:a2:4a:24:fb:
                    77:59:d9:fd:56:ad:79:83:04:87:a3:24:87:94:9b:
                    33:4a:43:c8:5c:32:9b:7a:54:73:8b:e2:aa:74:d5:
                    63:e7:2d:15:80:14:52:15:97:0f:69:2b:ad:7d:93:
                    16:72:7b:03:9e:22:0e:bc:a6:03:09:b7:ce:f5:96:
                    d7:94:60:79:b9:d6:a4:1f:b0:17:7e:06:dd:00:ab:
                    29:cc:56:f0:87:63:62:55:75:91:1f:d6:68:4a:cd:
                    ee:ce:a2:8b:0f:57:e3:8c:9e:2c:9b:fb:30:f9:1b:
                    df:b0:14:a6:e2:e6:d2:3a:f7:3b:2c:5b:1f:ba:ab:
                    c9:cc:bb:ab:05:12:36:7f:de:43:c7:3d:3a:3a:b0:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:45:F0:61:83:01:EB:C7:AE:7F:52:ED:7C:9C:6E:79:29:A2:BA
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wvNF8GGDAevHrn9S7Xycbnkporo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.249.0/24
                  77.90.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:71:92:c1:c2:46:85:5b:e4:76:e9:5a:20:40:f6:db:7f:
         05:fe:e1:8d:70:91:0d:28:ea:1a:77:29:84:ef:77:83:43:10:
         8a:53:20:49:fa:e1:5e:2b:c7:66:9b:57:00:63:e3:d5:c8:21:
         f9:c6:e2:c9:9b:81:c6:59:f7:f1:4c:9b:4b:90:cc:c8:82:09:
         6f:14:95:8c:28:e0:b9:54:fe:ac:57:bb:f9:7f:d8:6e:55:35:
         68:9c:8c:05:89:c9:96:88:3a:c2:94:2b:41:01:7e:3f:89:57:
         62:7f:1d:98:fb:bc:08:46:ca:37:3b:82:6b:f8:fb:43:15:b1:
         cc:77:f4:5b:e2:48:18:1a:c0:a3:02:df:55:e2:b6:85:fa:cb:
         ab:b9:cb:a1:96:15:ed:a0:9a:bb:36:98:e1:b2:61:35:9b:fa:
         db:f3:37:6c:8c:38:ea:bb:cd:1a:61:3d:f5:a7:2a:6c:dc:3c:
         06:44:bc:2f:b0:f0:61:86:b0:4c:d0:82:a8:18:b8:a2:57:2b:
         eb:12:4e:90:f2:67:24:60:35:47:ca:51:db:c7:77:df:ef:5b:
         cc:9f:83:ea:29:7b:7f:d6:54:db:c8:97:0f:98:bd:29:82:e2:
         d7:d2:ff:28:5f:dd:89:78:e1:b6:5b:62:0a:e9:45:c0:1b:9d:
         8b:67:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:16:43 2025 by rpki-client