This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa
File:                     Ha4smyNMca6eKeNWC0SBTolBTeo.roa (raw, json)
Hash identifier:          9bkWtR6a87KTb+3bLLiANkRbqCm46qonD9ctTKBKums=
Subject key identifier:   1D:AE:2C:9B:23:4C:71:AE:9E:29:E3:56:0B:44:81:4E:89:41:4D:EA
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01975B066F9391A61421B23EEA80B804B4FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa
Signing time:             Tue 10 Jun 2025 18:07:17 +0000
ROA not before:           Tue 10 Jun 2025 18:07:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.28.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.59.0/24 maxlen: 24
                          163.5.89.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 12 Jun 2025 13:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:06:6f:93:91:a6:14:21:b2:3e:ea:80:b8:04:b4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jun 10 18:07:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1dae2c9b234c71ae9e29e3560b44814e89414dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:90:e5:55:0c:90:c1:d0:2a:db:16:96:a2:
                    d2:a6:df:b7:30:cb:d5:85:ae:dc:52:df:1d:4e:f8:
                    8b:54:32:bd:ca:07:43:0c:4e:14:a3:e7:82:1f:a2:
                    27:b4:0d:fb:ea:00:2d:74:8f:80:6e:28:98:27:8e:
                    bb:ff:c0:3b:e9:d9:2b:43:ea:0b:b6:30:01:7e:67:
                    af:96:a1:68:78:85:c1:d0:38:fc:3b:3e:5b:6f:a6:
                    31:c4:8f:1d:2c:67:ab:31:b7:44:62:9b:3d:87:a8:
                    58:00:c4:54:c3:b9:60:7f:a4:e5:9e:84:48:3c:15:
                    60:97:1f:dc:30:03:fa:8e:71:e1:92:89:25:d3:5e:
                    9d:4b:55:49:5a:43:c0:6f:ff:3b:54:7c:a0:be:5b:
                    0d:d6:03:39:66:3c:9b:5b:1f:33:82:e2:a2:2f:4a:
                    c0:e6:33:e8:9f:23:70:1d:11:c3:c5:27:2c:36:f0:
                    65:d0:a5:9e:48:5e:37:ee:41:f0:e1:27:9e:57:95:
                    70:07:ca:48:e6:1a:65:d4:62:72:e1:63:d9:20:aa:
                    a6:bb:63:b7:c4:56:f0:47:bf:0f:6c:25:04:84:09:
                    02:11:24:76:58:1b:dc:28:df:50:b8:be:98:a7:15:
                    f1:a8:7f:f4:1a:20:d2:af:22:60:bb:71:73:1d:37:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:2C:9B:23:4C:71:AE:9E:29:E3:56:0B:44:81:4E:89:41:4D:EA
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.28.0/24
                  163.5.30.0/23
                  163.5.59.0/24
                  163.5.89.0/24
                  163.5.109.0/24
                  163.5.112.0/24
                  163.5.121.0/24
                  163.5.128.0/23
                  163.5.139.0/24
                  163.5.143.0/24
                  163.5.146.0/24
                  163.5.151.0/24
                  163.5.160.0/24
                  163.5.162.0/24
                  163.5.167.0/24
                  163.5.178.0/24
                  163.5.182.0/24
                  163.5.186.0/24
                  163.5.189.0/24
                  163.5.201.0/24
                  163.5.203.0-163.5.206.255
                  163.5.209.0/24
                  163.5.218.0/24
                  163.5.221.0/24
                  163.5.223.0-163.5.224.255
                  163.5.228.0/24
                  163.5.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:db:2e:04:f6:58:d8:c7:c8:59:9f:c7:31:18:10:84:e2:23:
         9d:eb:96:c3:98:6c:14:8f:43:cf:a4:03:5c:99:02:6b:ee:62:
         46:95:83:58:11:5d:38:95:80:7c:b3:bd:40:48:fc:8e:42:36:
         ee:5a:79:ab:8e:dd:39:08:2e:1e:f9:69:76:f0:07:ba:6d:f5:
         66:8f:56:30:e2:19:ff:aa:68:4b:98:5b:4f:06:7f:e4:d2:ae:
         ce:64:8f:bd:10:00:54:1a:2a:06:54:ef:e3:ed:a1:d6:3d:32:
         b9:d9:d3:34:24:dc:18:f5:d2:03:e6:87:e9:f5:5e:09:45:3b:
         2c:de:03:38:a8:56:f1:64:4f:09:47:ba:b2:ee:fc:68:a7:ca:
         dd:83:e7:5e:2f:95:de:b8:ed:b6:b2:c6:a1:b3:18:3b:c4:29:
         a4:a0:d3:9d:2c:36:8b:40:1e:82:09:54:a6:fc:3f:f0:5d:74:
         19:d7:2d:c1:f9:be:fa:d2:15:c2:3d:0c:52:f4:27:61:9b:ce:
         34:07:20:b8:2a:0d:b6:a3:b6:02:37:67:04:90:db:b7:1b:7b:
         6c:98:a1:b6:52:c9:30:04:f3:85:26:08:bc:a8:a0:43:2c:49:
         fc:27:2d:e8:5d:e6:5e:77:f8:d2:f5:0f:56:92:8f:27:8d:4f:
         b6:90:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:05:57 2025 by rpki-client