This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa
File:                     pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa (raw, json)
Hash identifier:          FWL9JSz8rc89Q2N5frLmfTO0lVOtKQa+sX6xNjIrxMg=
Subject key identifier:   A4:A6:94:55:6B:36:39:28:8E:64:D5:F5:15:F9:15:B3:D6:7E:BE:AB
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019763937750E110BE9A02CAD4ECBB418562
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa
Signing time:             Thu 12 Jun 2025 09:58:18 +0000
ROA not before:           Thu 12 Jun 2025 09:58:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204868
IP address blocks:        2001:3186::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 12 Jun 2025 12:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:93:77:50:e1:10:be:9a:02:ca:d4:ec:bb:41:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jun 12 09:58:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a4a694556b3639288e64d5f515f915b3d67ebeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:3f:36:6c:30:2e:c2:aa:af:cd:25:ec:6d:
                    b3:65:77:0c:68:59:a6:f1:f3:1e:b9:a9:df:70:a8:
                    38:14:84:c9:2a:b1:ac:3c:2d:ea:9a:fc:34:29:00:
                    75:3c:20:73:af:6f:84:5b:69:4a:40:40:49:6a:f9:
                    cb:ab:4d:97:47:26:76:56:76:6b:c7:2b:28:78:b0:
                    6d:a4:a3:f2:a6:92:47:24:cd:43:bf:b0:72:17:3c:
                    f7:7b:c8:01:13:0c:e6:52:d0:ee:f6:4e:e5:74:0b:
                    dc:47:46:30:f1:0c:92:3b:14:db:b2:b9:4f:57:5b:
                    e7:5f:c8:03:0d:ad:4d:d0:ff:49:d0:ec:ec:57:18:
                    eb:78:4e:97:90:5e:84:42:d3:8c:63:42:2e:22:5a:
                    75:3d:f5:0d:7c:19:c2:42:98:3a:9b:c8:62:8a:50:
                    f5:46:99:38:59:7b:04:dc:c7:74:8e:a9:cb:f4:03:
                    71:89:eb:a5:56:01:68:04:fc:64:7e:35:db:98:80:
                    9a:87:cf:15:a5:f2:f7:10:55:58:69:70:1d:e6:c4:
                    7c:2a:7e:35:c3:d6:5a:8f:22:cb:f4:9b:42:dc:b6:
                    33:d7:b3:9c:3b:0e:00:0a:54:ea:06:ad:c8:64:7c:
                    81:12:61:f2:00:f7:e5:fe:3c:00:13:83:70:6a:86:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:94:55:6B:36:39:28:8E:64:D5:F5:15:F9:15:B3:D6:7E:BE:AB
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3186::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:22:b3:e4:d6:04:84:03:b8:55:29:a5:08:20:c3:ab:6e:ff:
         0f:f1:6e:a5:bc:7c:11:4d:01:52:e5:ad:81:4f:49:74:4f:97:
         7e:b9:34:ac:42:9c:bb:cc:b4:e1:67:c9:ae:13:04:88:6e:53:
         95:b5:2f:ba:e9:11:dd:a2:94:ba:72:6b:bf:18:8b:a0:33:d5:
         2b:6f:9d:55:0a:81:7c:36:6c:93:be:ce:f2:0c:56:20:4e:31:
         6f:b0:5d:d1:9e:20:48:c1:b2:e5:cc:8f:77:66:d4:bb:1a:d4:
         40:34:b4:48:85:51:fb:f1:f0:f3:c5:ef:5c:37:61:7c:ed:50:
         ed:ed:e1:00:f6:c6:89:ec:c2:5b:62:7a:5f:4b:23:d4:f9:70:
         f2:e8:96:e1:2d:1a:a7:9b:d5:17:a6:2f:07:6b:73:19:fa:74:
         04:c3:a2:76:02:79:b6:31:8f:ce:c9:e9:21:63:b2:45:57:87:
         24:54:e7:95:7d:e1:f8:00:b4:de:40:bc:7e:8a:dc:1f:9e:8c:
         9a:03:d6:2d:41:9c:73:a4:ed:78:73:24:e0:b8:25:50:26:d3:
         80:ae:ab:3a:6c:cb:cb:ff:8e:bc:d6:ff:36:14:10:40:29:38:
         e3:1a:bb:1d:0e:8b:97:b7:29:fe:a0:6a:fb:58:9d:51:79:bc:
         76:e0:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:46:48 2025 by rpki-client