This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aXJ7B-XkTHihV_HWS29oZtIWZyQ.roa
File:                     aXJ7B-XkTHihV_HWS29oZtIWZyQ.roa (raw, json)
Hash identifier:          8kAZifUIG5EUElaYSRvxalow42LM4V/1k7XatMncywA=
Subject key identifier:   69:72:7B:07:E5:E4:4C:78:A1:57:F1:D6:4B:6F:68:66:D2:16:67:24
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       01976126BCA4BDB68FE0EEBA3780FA747391
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aXJ7B-XkTHihV_HWS29oZtIWZyQ.roa
Signing time:             Wed 11 Jun 2025 22:40:17 +0000
ROA not before:           Wed 11 Jun 2025 22:40:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42821
IP address blocks:        77.90.128.0/24 maxlen: 24
                          77.90.129.0/24 maxlen: 24
                          77.90.130.0/24 maxlen: 24
                          77.90.132.0/24 maxlen: 24
                          77.90.133.0/24 maxlen: 24
                          77.90.134.0/24 maxlen: 24
                          77.90.136.0/24 maxlen: 24
                          77.90.137.0/24 maxlen: 24
                          77.90.139.0/24 maxlen: 24
                          77.90.140.0/24 maxlen: 24
                          77.90.142.0/24 maxlen: 24
                          77.90.143.0/24 maxlen: 24
                          77.90.144.0/24 maxlen: 24
                          77.90.146.0/24 maxlen: 24
                          77.90.147.0/24 maxlen: 24
                          213.209.138.0/24 maxlen: 24
                          2a04:29c2::/32 maxlen: 32
                          2a04:29c7::/32 maxlen: 32
                          2a04:29c7:1280:24::/64 maxlen: 64
                          2a04:29c7:1280:27::/64 maxlen: 64
                          2a04:29c7:1290:24::/64 maxlen: 64
                          2a04:29c7:1300:24::/64 maxlen: 64
                          2a04:29c7:1371:6027::/64 maxlen: 64
                          2a04:29c7:1420::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 12 Jun 2025 14:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:26:bc:a4:bd:b6:8f:e0:ee:ba:37:80:fa:74:73:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jun 11 22:40:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69727b07e5e44c78a157f1d64b6f6866d2166724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:20:77:d2:56:6b:4f:a2:3d:c2:4c:f1:30:
                    3c:e3:2b:b5:4f:66:ae:f5:49:3a:25:d9:9f:c8:e3:
                    98:c9:ad:7e:f3:fc:6a:3b:cc:30:b3:a8:8e:b7:39:
                    78:c8:8f:63:59:b4:7d:37:f4:a1:4c:53:0c:bc:e7:
                    24:4d:27:84:6f:c7:77:a8:8a:b5:6e:07:ee:f7:4b:
                    d8:33:99:3a:58:79:39:ff:07:98:a9:9e:ab:3f:89:
                    68:be:2b:dd:29:43:48:95:88:c3:3e:49:9f:8f:06:
                    a0:9b:80:87:39:62:31:b3:d6:75:b5:19:17:32:51:
                    74:f6:44:f6:71:76:85:d1:0f:00:ca:80:1a:30:5e:
                    b2:5d:94:6a:de:fb:15:7b:ba:15:72:8e:fa:ea:1d:
                    08:9b:8c:02:15:ac:4e:8c:80:7f:c3:30:45:c1:a4:
                    2f:ad:b8:19:20:d2:9d:05:5b:67:87:95:7a:10:83:
                    d2:e3:8a:14:7c:88:1c:e7:dd:0d:79:6c:c4:e2:37:
                    f6:a8:01:e0:ff:9a:cc:b0:79:f8:3d:6f:4d:ce:96:
                    3f:9f:52:30:48:69:e7:6f:05:dd:82:24:f4:c8:2d:
                    74:44:87:48:e1:87:65:ce:c8:7b:46:f7:d7:b2:4c:
                    da:74:95:fa:86:c8:40:17:78:07:5c:bb:c0:37:09:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:72:7B:07:E5:E4:4C:78:A1:57:F1:D6:4B:6F:68:66:D2:16:67:24
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aXJ7B-XkTHihV_HWS29oZtIWZyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.128.0-77.90.130.255
                  77.90.132.0-77.90.134.255
                  77.90.136.0/23
                  77.90.139.0-77.90.140.255
                  77.90.142.0-77.90.144.255
                  77.90.146.0/23
                  213.209.138.0/24
                IPv6:
                  2a04:29c2::/32
                  2a04:29c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:8a:54:8d:f3:28:5c:f6:f5:3d:07:62:23:96:b0:00:c6:
         59:7d:8d:b4:96:0c:15:21:cd:62:a8:75:b4:7b:4f:50:25:84:
         64:fd:7d:a2:11:3a:29:d2:02:f2:0c:1e:de:0e:54:12:2f:2d:
         75:05:4f:37:b0:d0:f0:38:45:40:b8:ad:22:fa:c1:62:5f:ec:
         b5:1b:9e:27:0f:cd:8a:ad:64:8c:bc:e8:1c:f9:c9:b1:66:3c:
         b5:3b:60:a5:78:71:a0:2b:e6:d8:05:21:e7:cd:bb:fb:59:af:
         0f:71:69:e3:50:66:90:bc:53:48:c0:db:3c:d6:41:58:1a:96:
         68:43:e2:8c:0c:d6:e4:8d:62:5c:0b:5f:39:06:cd:70:03:ff:
         d7:cf:2a:4b:c2:65:c8:dc:c3:96:6f:7e:49:6f:9c:0a:93:c0:
         2d:23:7d:b6:af:23:d1:11:e0:e5:1c:83:df:8a:de:d4:fe:a9:
         a1:a8:82:5c:cd:64:0e:8a:e9:79:a1:35:6c:b5:e4:ed:52:d1:
         cd:64:43:ff:76:e1:56:b1:e7:73:78:77:d2:6a:1c:b7:71:c4:
         8b:05:0c:4d:de:eb:52:7a:2c:b1:ea:0f:da:4c:a1:f6:d8:50:
         d1:fc:ea:f5:ed:99:62:8e:12:a4:3e:09:1f:16:3c:28:aa:50:
         54:c8:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:16:37 2025 by rpki-client