This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zq7UehZ7UNzmntNZLpXIeLfdXH0.roa
File:                     zq7UehZ7UNzmntNZLpXIeLfdXH0.roa (raw, json)
Hash identifier:          pX/9U4sRwY8K56ljIMlluyYqmV0eem/g/aRRO3a7pBo=
Subject key identifier:   CE:AE:D4:7A:16:7B:50:DC:E6:9E:D3:59:2E:95:C8:78:B7:DD:5C:7D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       01976F6E716BECC56270229E3A1CE00EFCE0
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zq7UehZ7UNzmntNZLpXIeLfdXH0.roa
Signing time:             Sat 14 Jun 2025 17:13:18 +0000
ROA not before:           Sat 14 Jun 2025 17:13:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        212.116.226.0/23 maxlen: 24
                          212.116.228.0/22 maxlen: 24
                          212.116.228.0/24 maxlen: 24
                          212.116.229.0/24 maxlen: 24
                          212.116.236.0/24 maxlen: 24
                          212.116.238.0/23 maxlen: 24
                          212.116.244.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 21 Jun 2025 19:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:6e:71:6b:ec:c5:62:70:22:9e:3a:1c:e0:0e:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jun 14 17:13:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ceaed47a167b50dce69ed3592e95c878b7dd5c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:52:43:74:55:e3:71:8c:53:40:10:cd:4d:
                    fa:9a:cd:ca:16:6b:94:66:11:d0:d6:d3:ec:d9:e9:
                    f6:7f:7b:e5:93:61:2d:1b:62:70:3e:64:f4:b0:37:
                    7c:6d:b6:3c:fe:77:15:c2:38:ce:7f:d0:00:9c:90:
                    85:b3:2c:e5:0d:06:2b:e9:77:9d:a6:ce:88:4a:7a:
                    18:98:6b:a7:ac:96:cc:4e:34:09:24:bd:85:96:f2:
                    57:7e:49:4e:b1:fe:03:3d:7f:dd:01:89:4c:0d:45:
                    8f:7c:83:5a:fa:e0:ff:b0:e1:03:b7:1a:ee:98:fd:
                    fa:f9:fe:9a:d8:a5:93:71:cb:c9:de:fc:aa:d2:ef:
                    4a:53:65:a1:86:f1:35:7f:53:7a:af:6e:59:b1:b4:
                    b5:9e:36:81:26:fd:42:da:55:a0:98:4f:28:40:5f:
                    2a:68:2b:36:dd:f3:71:25:ca:e6:3d:e8:b2:de:00:
                    fd:2b:8f:9f:7b:ef:a3:30:a0:86:55:b5:1e:88:ab:
                    12:cc:b2:e4:2b:04:51:cb:da:c7:b7:51:3f:50:4f:
                    6d:2e:62:65:ef:0c:05:16:1d:8e:1b:27:73:65:88:
                    af:91:31:47:56:5b:e1:17:09:ac:ef:9b:27:3d:c4:
                    5c:f3:87:47:f6:3e:fa:ce:93:ce:01:01:f2:8b:99:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AE:D4:7A:16:7B:50:DC:E6:9E:D3:59:2E:95:C8:78:B7:DD:5C:7D
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zq7UehZ7UNzmntNZLpXIeLfdXH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.116.226.0-212.116.231.255
                  212.116.236.0/24
                  212.116.238.0/23
                  212.116.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:13:88:50:02:58:4c:c8:03:f3:73:fc:4e:54:f3:f9:28:
         67:e3:94:49:7d:6a:82:04:25:36:2c:6b:ca:ed:45:77:01:6e:
         be:ae:79:5b:f8:38:c1:3e:18:d8:e4:8f:d4:aa:b4:13:c7:2f:
         de:a4:2b:f2:e2:35:14:44:fc:70:9a:56:63:8e:e8:9e:08:f2:
         c4:25:7c:2b:db:ed:cc:0f:24:55:20:c9:01:62:f4:91:68:6e:
         26:a6:7a:a2:34:c1:b7:55:1b:92:e4:63:31:e7:cd:c6:2d:1e:
         a7:07:5e:a9:b3:9c:9b:f9:7e:fd:9c:4a:6b:39:b8:48:d5:eb:
         88:be:3b:c8:74:33:15:b8:88:01:15:45:49:cb:ef:f9:f4:37:
         4c:78:be:4b:ee:40:4f:e2:df:63:5f:ef:da:ca:82:46:f3:88:
         af:c4:d8:d2:0e:b3:79:ad:c8:ea:f8:e1:ec:d7:51:35:0c:73:
         df:2c:3d:8c:47:49:f9:45:e5:37:91:f1:69:13:b5:b9:e4:3c:
         31:b9:ed:1e:ae:b9:f7:5c:39:7c:33:06:25:08:a4:a5:bf:36:
         41:13:a9:7c:21:cd:1f:7c:6d:75:bf:a9:b6:35:c5:ad:88:65:
         2d:65:3f:dd:3e:d0:39:27:e7:71:cf:84:08:20:c4:62:0b:dc:
         72:45:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:18:33 2025 by rpki-client