This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/MERJS2HdiR3N37GANTOBPddPSiU.roa
File:                     MERJS2HdiR3N37GANTOBPddPSiU.roa (raw, json)
Hash identifier:          ESu/9HlYlb1/vK6tGkwNWK8PqHWjqcSTUB6uxXRYvQU=
Subject key identifier:   30:44:49:4B:61:DD:89:1D:CD:DF:B1:80:35:33:81:3D:D7:4F:4A:25
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       0196AA5FD9D48E8E7E7F66FB9F158898ABE2
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/MERJS2HdiR3N37GANTOBPddPSiU.roa
Signing time:             Wed 07 May 2025 10:52:10 +0000
ROA not before:           Wed 07 May 2025 10:52:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42337
IP address blocks:        46.148.46.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 May 2025 10:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:5f:d9:d4:8e:8e:7e:7f:66:fb:9f:15:88:98:ab:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: May  7 10:52:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3044494b61dd891dcddfb1803533813dd74f4a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:ee:9a:bb:66:df:c7:a4:05:23:58:a9:c7:
                    05:96:dd:0e:2d:51:58:17:c1:9a:9b:c8:e1:e5:96:
                    27:9d:7e:9b:e3:4a:f4:d8:0a:4e:76:bb:55:6e:cf:
                    30:11:a1:03:1b:e4:3a:fe:bc:2c:e1:dd:d5:c4:ab:
                    4a:c1:83:e5:d9:62:a3:76:dc:41:ec:a0:04:89:30:
                    5b:a7:32:99:c9:a7:54:60:d8:4f:5b:f3:65:b5:bc:
                    1d:46:16:8c:9a:2a:1b:15:22:7f:2e:5a:42:af:e2:
                    cb:f1:13:49:cb:07:2d:80:bc:cf:df:48:44:36:92:
                    44:fe:a4:0c:da:16:4a:a5:d4:99:b4:35:40:8e:bf:
                    de:22:7e:d5:08:cb:7e:06:fc:73:b4:1e:d4:18:dc:
                    75:60:91:df:8a:0b:de:42:9f:d4:73:24:10:b2:d0:
                    2e:0b:72:18:c3:41:07:02:1e:e3:fa:4e:d7:26:26:
                    75:54:75:f4:ee:c2:62:54:64:d4:3e:ff:d7:89:88:
                    93:44:ab:2c:d5:cf:dc:55:b8:41:e7:08:a7:e0:01:
                    21:32:ee:3b:ef:0b:c2:2c:93:ce:69:26:69:5c:af:
                    55:09:c7:22:f7:1b:61:29:36:81:cd:fc:15:cb:e9:
                    7a:34:66:33:d2:5c:10:28:41:49:0b:ff:c9:59:58:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:49:4B:61:DD:89:1D:CD:DF:B1:80:35:33:81:3D:D7:4F:4A:25
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/MERJS2HdiR3N37GANTOBPddPSiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:46:9c:cf:5c:17:0e:b5:ae:5d:23:a9:ab:22:22:8e:96:
         22:81:d3:bb:4f:39:56:83:0c:cb:90:af:db:5f:8b:f1:0a:4c:
         bc:1a:f9:6e:de:1c:92:81:5c:ff:6c:43:4a:02:a8:48:58:63:
         50:49:27:4c:a5:59:4b:45:d3:05:d2:a7:be:be:ae:d9:a4:94:
         0a:49:c3:46:08:85:82:fa:7d:fe:1d:2a:cd:66:5c:f6:30:d6:
         e3:16:8f:c3:f8:ca:07:2e:42:c8:07:b7:9d:91:d7:b8:09:a5:
         cd:5e:66:e9:8a:6c:b8:9a:84:2a:ce:ef:18:b2:b4:0a:03:e8:
         d5:f6:51:8a:6b:82:2e:dc:08:b8:d3:ef:cc:c4:1c:ec:1a:05:
         10:c1:4d:89:f6:0d:02:87:c5:01:e0:43:f9:37:af:03:81:4b:
         5e:5b:32:61:98:8b:12:d2:30:ff:50:d3:07:20:00:d6:9b:44:
         b1:c3:47:7e:53:a7:71:ce:bf:f1:12:21:66:e7:a2:06:05:3f:
         ae:5c:94:71:b9:0f:3c:a2:7b:1a:72:b7:1f:4b:94:91:31:da:
         e0:71:e9:60:28:c3:3f:04:96:64:ea:b1:15:76:ae:84:92:26:
         1f:12:b4:3d:aa:29:d6:40:ca:10:ea:a0:e2:24:8d:7b:a1:5e:
         96:c6:7e:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaqX9nUjo5+f2b7nxWImKviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjUwNTA3MTA1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQ0NDk0YjYxZGQ4OTFkY2RkZmIxODAzNTMzODEzZGQ3NGY0YTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHumrtm38ekBSNYqccFlt0OLVFY
F8Gam8jh5ZYnnX6b40r02ApOdrtVbs8wEaEDG+Q6/rws4d3VxKtKwYPl2WKjdtxB
7KAEiTBbpzKZyadUYNhPW/NltbwdRhaMmiobFSJ/LlpCr+LL8RNJywctgLzP30hE
NpJE/qQM2hZKpdSZtDVAjr/eIn7VCMt+BvxztB7UGNx1YJHfigveQp/UcyQQstAu
C3IYw0EHAh7j+k7XJiZ1VHX07sJiVGTUPv/XiYiTRKss1c/cVbhB5win4AEhMu47
7wvCLJPOaSZpXK9VCcci9xthKTaBzfwVy+l6NGYz0lwQKEFJC//JWVgagQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBESUth3Ykdzd+xgDUzgT3XT0olMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEvTUVSSlMySGRpUjNOMzdHQU5UT0JQZGRQU2lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpQuMA0G
CSqGSIb3DQEBCwUAA4IBAQA+V0acz1wXDrWuXSOpqyIijpYigdO7TzlWgwzLkK/b
X4vxCky8Gvlu3hySgVz/bENKAqhIWGNQSSdMpVlLRdMF0qe+vq7ZpJQKScNGCIWC
+n3+HSrNZlz2MNbjFo/D+MoHLkLIB7edkde4CaXNXmbpimy4moQqzu8YsrQKA+jV
9lGKa4Iu3Ai40+/MxBzsGgUQwU2J9g0Ch8UB4EP5N68DgUteWzJhmIsS0jD/UNMH
IADWm0Sxw0d+U6dxzr/xEiFm56IGBT+uXJRxuQ88onsacrcfS5SRMdrgcelgKMM/
BJZk6rEVdq6EkiYfErQ9qinWQMoQ6qDiJI17oV6Wxn4o
-----END CERTIFICATE-----
Generated at Thu Dec 18 06:56:42 2025 by rpki-client