This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z4Yi6VYW1aS_wn1NGfAeh7hNMc4.roa
File:                     z4Yi6VYW1aS_wn1NGfAeh7hNMc4.roa (raw, json)
Hash identifier:          WSbQdNY0pSjrCRPQ1z2w2CG+IK5fU4PoTz5z4l+yEnw=
Subject key identifier:   CF:86:22:E9:56:16:D5:A4:BF:C2:7D:4D:19:F0:1E:87:B8:4D:31:CE
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01975904D42903879068C07A977FB11C2BEF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z4Yi6VYW1aS_wn1NGfAeh7hNMc4.roa
Signing time:             Tue 10 Jun 2025 08:46:18 +0000
ROA not before:           Tue 10 Jun 2025 08:46:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211780
IP address blocks:        5.231.26.0/24 maxlen: 24
                          5.231.57.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 11:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:04:d4:29:03:87:90:68:c0:7a:97:7f:b1:1c:2b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun 10 08:46:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cf8622e95616d5a4bfc27d4d19f01e87b84d31ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:77:44:f8:13:89:9c:fa:1e:15:82:09:a4:
                    46:32:9b:18:10:a0:f6:69:b1:8d:9a:0c:81:5f:4b:
                    f0:55:0f:50:73:a1:09:a5:0f:2b:bb:d1:f8:0e:1d:
                    4d:93:07:d8:cc:e4:89:49:bc:45:5c:4b:51:cf:49:
                    d9:b5:7b:a0:1d:f8:76:9c:20:e4:5a:0e:66:30:a3:
                    24:d8:c9:35:7b:7c:ab:ca:5d:a0:8a:4d:9b:6b:54:
                    82:1f:98:08:d3:4b:d6:d1:7c:ee:2a:5b:24:60:3f:
                    53:c2:db:ab:6c:c6:e8:a9:08:be:47:54:26:d0:90:
                    37:7f:de:e6:45:62:aa:c4:e1:51:21:04:64:39:c3:
                    16:d6:48:2e:97:84:ae:88:28:27:a8:58:87:9b:c1:
                    9b:95:bf:63:7d:10:77:54:84:a4:0f:66:2a:0d:35:
                    2b:a5:0c:ce:ee:20:1e:f5:5e:7e:6e:03:b0:ff:7a:
                    ef:47:b8:3c:c7:50:1c:3e:cb:96:c8:3e:2b:ec:a8:
                    5d:b0:be:cf:9f:7c:04:75:49:16:34:b1:c5:b2:e4:
                    2f:11:21:18:31:20:50:6f:f8:0a:45:10:3f:8a:00:
                    16:01:82:a3:f8:36:13:12:2a:6a:40:72:33:03:60:
                    8b:5a:e9:26:08:83:d8:bf:67:fd:78:7b:71:84:f2:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:86:22:E9:56:16:D5:A4:BF:C2:7D:4D:19:F0:1E:87:B8:4D:31:CE
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z4Yi6VYW1aS_wn1NGfAeh7hNMc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.26.0/24
                  5.231.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:a5:d4:58:e3:06:cb:37:bc:10:9c:df:f8:c2:50:ad:28:
         d8:81:8a:3c:f5:9c:28:69:b0:68:56:16:cd:a8:b8:53:6d:e0:
         ec:52:ee:10:0f:bf:cc:74:48:af:fe:b7:86:ac:94:b4:3e:7a:
         62:25:c3:d4:9e:af:66:49:b8:13:7c:8a:8c:db:bc:39:7a:69:
         d5:94:e7:74:c8:d1:d9:18:c4:65:52:13:03:a9:cc:38:c9:63:
         5d:9b:46:2a:b7:df:99:31:be:52:c4:5b:da:9e:51:7e:94:e0:
         ef:d2:e9:d3:ae:0a:61:79:8e:1a:5f:72:ad:0a:3e:63:63:38:
         96:95:98:3c:d8:b6:65:4e:f7:15:68:8b:3e:a4:26:d8:81:95:
         f7:1c:54:c1:7e:13:bd:32:a3:6d:77:fd:26:c9:7c:40:77:7b:
         c0:ff:90:b2:b8:84:8b:11:b7:8c:16:4c:3a:d5:f8:b1:18:53:
         1a:3d:d7:0d:cd:90:40:ea:b1:e2:09:a5:86:c5:86:26:db:0e:
         e7:a0:9e:68:58:79:9c:1d:c6:9c:cc:7f:8d:f3:c0:14:f5:fd:
         87:18:e1:b4:45:49:da:28:68:da:1e:22:c4:03:13:67:32:c7:
         b1:2b:c5:9d:57:5f:de:a7:b2:35:63:21:32:d7:49:af:12:54:
         0b:a0:fa:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdZBNQpA4eQaMB6l3+xHCvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjEwMDg0NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjg2MjJlOTU2MTZkNWE0YmZjMjdkNGQxOWYwMWU4N2I4NGQzMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vZ3RPgTiZz6HhWCCaRGMpsYEKD2
abGNmgyBX0vwVQ9Qc6EJpQ8ru9H4Dh1NkwfYzOSJSbxFXEtRz0nZtXugHfh2nCDk
Wg5mMKMk2Mk1e3yryl2gik2ba1SCH5gI00vW0XzuKlskYD9TwturbMboqQi+R1Qm
0JA3f97mRWKqxOFRIQRkOcMW1kgul4SuiCgnqFiHm8Gblb9jfRB3VISkD2YqDTUr
pQzO7iAe9V5+bgOw/3rvR7g8x1AcPsuWyD4r7KhdsL7Pn3wEdUkWNLHFsuQvESEY
MSBQb/gKRRA/igAWAYKj+DYTEipqQHIzA2CLWukmCIPYv2f9eHtxhPLe2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM+GIulWFtWkv8J9TRnwHoe4TTHOMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvejRZaTZWWVcxYVNfd24xTkdmQWVoN2hOTWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecaAwQA
Bec5MA0GCSqGSIb3DQEBCwUAA4IBAQA9AKXUWOMGyze8EJzf+MJQrSjYgYo89Zwo
abBoVhbNqLhTbeDsUu4QD7/MdEiv/reGrJS0PnpiJcPUnq9mSbgTfIqM27w5emnV
lOd0yNHZGMRlUhMDqcw4yWNdm0Yqt9+ZMb5SxFvanlF+lODv0unTrgpheY4aX3Kt
Cj5jYziWlZg82LZlTvcVaIs+pCbYgZX3HFTBfhO9MqNtd/0myXxAd3vA/5CyuISL
EbeMFkw61fixGFMaPdcNzZBA6rHiCaWGxYYm2w7noJ5oWHmcHcaczH+N88AU9f2H
GOG0RUnaKGjaHiLEAxNnMsexK8WdV1/ep7I1YyEy10mvElQLoPq2
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:38:57 2025 by rpki-client