This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/INQW3fsslwztCxUGm9z4XGmFsFg.roa
File:                     INQW3fsslwztCxUGm9z4XGmFsFg.roa (raw, json)
Hash identifier:          zimTTmFxF4X5wmIXzQghfm1/CzdzZvFnVtCPq1Ku9sc=
Subject key identifier:   20:D4:16:DD:FB:2C:97:0C:ED:0B:15:06:9B:DC:F8:5C:69:85:B0:58
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       01958E911D81F8D0828B801C53E6227354ED
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/INQW3fsslwztCxUGm9z4XGmFsFg.roa
Signing time:             Thu 13 Mar 2025 08:13:49 +0000
ROA not before:           Thu 13 Mar 2025 08:13:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34309
IP address blocks:        80.86.192.0/24 maxlen: 24
                          80.86.193.0/24 maxlen: 24
                          81.221.250.0/24 maxlen: 24
                          81.221.252.0/24 maxlen: 24
                          81.221.254.0/24 maxlen: 24
                          194.191.16.0/24 maxlen: 24
                          194.191.17.0/24 maxlen: 24
                          194.191.18.0/24 maxlen: 24
                          194.191.19.0/24 maxlen: 24
                          194.191.20.0/24 maxlen: 24
                          194.191.24.0/24 maxlen: 24
                          194.191.25.0/24 maxlen: 24
                          194.191.26.0/24 maxlen: 24
                          194.191.28.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 08:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:91:1d:81:f8:d0:82:8b:80:1c:53:e6:22:73:54:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Mar 13 08:13:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20d416ddfb2c970ced0b15069bdcf85c6985b058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:ee:79:79:b8:76:f8:e3:53:8b:eb:92:1a:
                    26:11:4e:2c:d0:f9:52:97:e1:6e:c5:21:de:5f:38:
                    ae:98:8c:17:37:b3:17:5b:a9:98:7f:10:07:a7:ae:
                    59:a1:9c:a1:62:c0:c3:34:a8:1c:36:dd:ca:51:d1:
                    0e:d6:7d:14:bd:e7:a5:0d:28:8b:45:8a:a8:97:b1:
                    aa:88:27:1b:fa:81:9a:5d:ce:b8:15:d9:7b:93:78:
                    0c:7c:1e:a3:29:da:24:3b:e9:a6:40:93:11:ef:f5:
                    7a:c5:5a:bd:b8:bf:2e:9f:57:15:df:ba:e9:c4:dd:
                    a5:3a:c5:f3:bb:89:94:e2:59:6a:b8:36:56:e9:80:
                    be:63:5f:a0:00:15:ef:97:e2:85:a5:9f:51:63:bf:
                    d8:20:6b:7e:65:44:14:75:9a:f2:ca:1b:46:4b:27:
                    8c:7c:5d:56:4d:5c:fa:ab:5f:ee:77:84:d7:15:e5:
                    a8:2b:4f:72:15:5b:38:bf:49:01:ca:3e:a6:8d:c7:
                    58:b3:5a:76:64:5e:10:af:d2:42:d6:47:3b:dd:0f:
                    81:71:06:4a:79:a3:20:cd:25:41:d5:04:a1:c8:78:
                    e1:b5:71:38:3d:06:4f:83:26:52:eb:3b:d0:1c:f8:
                    b2:c2:5a:65:1a:f1:63:9f:d6:5c:27:dc:44:95:c3:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:16:DD:FB:2C:97:0C:ED:0B:15:06:9B:DC:F8:5C:69:85:B0:58
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/INQW3fsslwztCxUGm9z4XGmFsFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.192.0/23
                  81.221.250.0/24
                  81.221.252.0/24
                  81.221.254.0/24
                  194.191.16.0-194.191.20.255
                  194.191.24.0-194.191.26.255
                  194.191.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:60:5d:03:20:00:43:e9:d8:a8:fb:5b:00:96:f1:fd:01:ef:
         69:4a:ce:e5:b4:a3:74:5b:ae:af:28:00:a3:de:51:08:61:47:
         dd:db:91:39:17:bc:db:0e:34:a3:a4:79:b5:c2:07:7a:15:a6:
         c9:7c:07:6e:01:d0:0a:c0:d5:ee:d0:ec:d8:8d:aa:02:ba:79:
         cc:bc:8a:9f:d0:63:ec:4e:9a:21:81:0c:11:62:0e:c3:f3:97:
         89:51:14:c4:5e:ac:cb:e8:ad:99:27:1f:98:0c:8c:ff:9b:c6:
         0e:40:b4:00:08:2a:0f:f7:5f:bc:03:43:05:d2:df:76:6f:7e:
         eb:f6:b2:47:86:40:f5:f6:a6:5a:a5:d5:b2:98:7d:2d:5a:c1:
         87:d2:11:e7:e0:1b:4d:3d:af:66:3e:35:19:1b:f8:7b:3f:9f:
         5a:87:e4:78:92:00:4d:9a:8b:13:dc:6d:d6:b5:d8:31:3b:23:
         19:08:ed:90:51:25:b9:84:8e:37:a0:7b:95:c5:da:89:19:01:
         37:06:a0:55:1f:3f:4e:70:9c:15:8b:4b:ab:7f:e8:50:cd:e7:
         f6:ee:8d:c6:47:62:15:75:c3:c9:35:2d:5b:22:6c:6f:71:b5:
         f6:b3:86:5b:78:a1:c0:33:13:a2:69:af:46:01:e5:10:3a:2d:
         63:9f:f4:eb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZWOkR2B+NCCi4AcU+Yic1TtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5
MmJhNjIwHhcNMjUwMzEzMDgxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGQ0MTZkZGZiMmM5NzBjZWQwYjE1MDY5YmRjZjg1YzY5ODViMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8zueXm4dvjjU4vrkhomEU4s0PlS
l+FuxSHeXziumIwXN7MXW6mYfxAHp65ZoZyhYsDDNKgcNt3KUdEO1n0UveelDSiL
RYqol7GqiCcb+oGaXc64Fdl7k3gMfB6jKdokO+mmQJMR7/V6xVq9uL8un1cV37rp
xN2lOsXzu4mU4llquDZW6YC+Y1+gABXvl+KFpZ9RY7/YIGt+ZUQUdZryyhtGSyeM
fF1WTVz6q1/ud4TXFeWoK09yFVs4v0kByj6mjcdYs1p2ZF4Qr9JC1kc73Q+BcQZK
eaMgzSVB1QShyHjhtXE4PQZPgyZS6zvQHPiywlplGvFjn9ZcJ9xElcM5ywIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFCDUFt37LJcM7QsVBpvc+FxphbBYMB8GA1UdIwQY
MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt
YWE3ODhhNDIwYWVjLzEvSU5RVzNmc3Nsd3p0Q3hVR205ejRYR21Gc0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj
LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBUFbAAwQA
Ud36AwQAUd38AwQAUd3+MAwDBATCvxADBADCvxQwDAMEA8K/GAMEAMK/GgMEAMK/
HDANBgkqhkiG9w0BAQsFAAOCAQEAu2BdAyAAQ+nYqPtbAJbx/QHvaUrO5bSjdFuu
rygAo95RCGFH3duRORe82w40o6R5tcIHehWmyXwHbgHQCsDV7tDs2I2qArp5zLyK
n9Bj7E6aIYEMEWIOw/OXiVEUxF6sy+itmScfmAyM/5vGDkC0AAgqD/dfvANDBdLf
dm9+6/ayR4ZA9famWqXVsph9LVrBh9IR5+AbTT2vZj41GRv4ez+fWofkeJIATZqL
E9xt1rXYMTsjGQjtkFEluYSON6B7lcXaiRkBNwagVR8/TnCcFYtLq3/oUM3n9u6N
xkdiFXXDyTUtWyJsb3G19rOGW3ihwDMTommvRgHlEDotY5/06w==
-----END CERTIFICATE-----
Generated at Wed Dec 24 11:25:52 2025 by rpki-client