This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q7qlFJ-SJMgrWrQZhmqyWlOQRq8.roa
File:                     q7qlFJ-SJMgrWrQZhmqyWlOQRq8.roa (raw, json)
Hash identifier:          96AvVt0l/AhU5qdJi2dMzrQW0Zh/Teicrl4qddBbsac=
Subject key identifier:   AB:BA:A5:14:9F:92:24:C8:2B:5A:B4:19:86:6A:B2:5A:53:90:46:AF
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B25A0C2F223B74F5ED54A3D595CD91B6D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q7qlFJ-SJMgrWrQZhmqyWlOQRq8.roa
Signing time:             Tue 16 Dec 2025 05:27:31 +0000
ROA not before:           Tue 16 Dec 2025 05:27:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205886
IP address blocks:        151.240.152.0/24 maxlen: 24
                          151.240.153.0/24 maxlen: 24
                          151.240.226.0/24 maxlen: 24
                          151.241.11.0/24 maxlen: 24
                          151.241.25.0/24 maxlen: 24
                          151.241.104.0/24 maxlen: 24
                          151.241.149.0/24 maxlen: 24
                          151.242.128.0/24 maxlen: 24
                          151.243.189.0/24 maxlen: 24
                          151.244.12.0/24 maxlen: 24
                          151.245.0.0/17 maxlen: 24
                          151.245.29.0/24 maxlen: 24
                          151.245.182.0/24 maxlen: 24
                          151.245.220.0/24 maxlen: 24
                          151.247.138.0/24 maxlen: 24
                          151.247.145.0/24 maxlen: 24
                          151.247.238.0/24 maxlen: 24
                          151.247.242.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 08:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:a0:c2:f2:23:b7:4f:5e:d5:4a:3d:59:5c:d9:1b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Dec 16 05:27:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abbaa5149f9224c82b5ab419866ab25a539046af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:a3:f0:49:d2:9d:6c:97:2f:62:34:60:79:
                    29:ac:8e:12:58:cc:36:46:e6:fc:75:7f:c3:cf:58:
                    bc:db:40:57:58:1c:8e:c7:30:ff:e9:5a:a1:46:b5:
                    c8:2f:70:df:08:ed:f9:ff:3b:f9:67:42:c3:e6:96:
                    ee:06:32:fe:e2:56:5b:eb:e2:ec:2d:0f:00:45:ea:
                    2f:c4:c7:4f:cd:b4:5d:02:fe:69:e7:57:b3:f9:75:
                    41:8e:c3:4b:93:8c:6a:ef:dd:46:b3:6a:2b:6a:cc:
                    b5:10:03:d9:f0:7e:03:ad:d9:37:5d:ad:21:8a:e5:
                    19:90:b9:39:0f:47:84:d4:df:80:85:4d:eb:40:29:
                    7a:57:93:ba:d1:2c:e4:3a:91:10:cb:cf:f1:63:78:
                    b9:59:a6:f1:7c:60:1b:5e:32:f6:ce:06:4c:ee:7f:
                    5f:d1:77:1d:1e:7a:a4:d5:f1:86:8b:ed:90:52:c0:
                    58:bd:7e:0e:01:84:e0:c9:92:18:fc:b0:7a:d0:3e:
                    f1:64:61:67:c7:a7:5d:3e:cc:ac:c0:a0:83:01:96:
                    8a:7d:48:9b:91:43:8c:52:c4:9f:18:50:b8:ed:8d:
                    56:53:db:46:41:22:2c:79:43:60:d5:72:53:a5:50:
                    26:b0:79:10:f4:62:59:a1:9a:e6:8c:4a:32:c2:83:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:A5:14:9F:92:24:C8:2B:5A:B4:19:86:6A:B2:5A:53:90:46:AF
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/q7qlFJ-SJMgrWrQZhmqyWlOQRq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.240.152.0/23
                  151.240.226.0/24
                  151.241.11.0/24
                  151.241.25.0/24
                  151.241.104.0/24
                  151.241.149.0/24
                  151.242.128.0/24
                  151.243.189.0/24
                  151.244.12.0/24
                  151.245.0.0/17
                  151.245.182.0/24
                  151.245.220.0/24
                  151.247.138.0/24
                  151.247.145.0/24
                  151.247.238.0/24
                  151.247.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:21:17:bc:10:db:0e:3f:0b:26:ea:53:f9:43:88:42:96:
         2c:cb:d4:07:af:73:0b:d7:b2:0e:14:89:aa:8a:7d:87:d7:c5:
         41:f8:6c:4c:03:01:0a:8b:3c:72:59:74:6f:36:59:42:f4:0e:
         3a:46:2e:9e:70:13:c0:52:f4:05:53:6a:b4:a0:85:73:cb:91:
         8a:94:ab:b4:41:23:93:ef:5a:f8:46:1c:f7:40:bf:3f:60:09:
         d3:23:91:35:de:b1:ff:21:9d:b9:0d:ce:d6:3b:95:42:d6:eb:
         ad:78:5a:aa:4b:8c:bd:5f:07:e5:2a:f2:83:02:27:62:2a:a1:
         67:00:88:00:03:1e:4b:b5:e5:cf:d2:9b:be:6a:ac:8e:be:14:
         5f:06:51:00:38:9e:c8:ba:1e:04:18:51:b4:f9:0f:3a:7f:7c:
         1a:25:75:e4:e6:f6:b7:a6:d7:13:fc:c0:99:ca:d5:fa:5a:54:
         91:7b:fb:8e:e3:f3:c1:89:5d:be:46:08:c4:61:a6:ef:b4:ec:
         a9:fe:32:22:c9:9b:a0:10:48:60:02:85:d1:bd:c5:3f:c0:89:
         71:40:e1:e3:77:02:e1:94:17:9c:11:f7:9b:12:a5:6b:e8:85:
         67:7f:0c:03:46:2d:14:22:aa:1c:80:4b:27:f9:b1:f5:a9:5f:
         8a:bc:12:e1
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZsloMLyI7dPXtVKPVlc2RttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMjE2MDUyNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmJhYTUxNDlmOTIyNGM4MmI1YWI0MTk4NjZhYjI1YTUzOTA0NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXmj8EnSnWyXL2I0YHkprI4SWMw2
Rub8dX/Dz1i820BXWByOxzD/6VqhRrXIL3DfCO35/zv5Z0LD5pbuBjL+4lZb6+Ls
LQ8AReovxMdPzbRdAv5p51ez+XVBjsNLk4xq791Gs2orasy1EAPZ8H4Drdk3Xa0h
iuUZkLk5D0eE1N+AhU3rQCl6V5O60SzkOpEQy8/xY3i5WabxfGAbXjL2zgZM7n9f
0XcdHnqk1fGGi+2QUsBYvX4OAYTgyZIY/LB60D7xZGFnx6ddPsyswKCDAZaKfUib
kUOMUsSfGFC47Y1WU9tGQSIseUNg1XJTpVAmsHkQ9GJZoZrmjEoywoPBAwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFKu6pRSfkiTIK1q0GYZqslpTkEavMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcTdxbEZKLVNKTWdyV3JRWmhtcXlXbE9RUnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBl/CYAwQA
l/DiAwQAl/ELAwQAl/EZAwQAl/FoAwQAl/GVAwQAl/KAAwQAl/O9AwQAl/QMAwQH
l/UAAwQAl/W2AwQAl/XcAwQAl/eKAwQAl/eRAwQAl/fuAwQAl/fyMA0GCSqGSIb3
DQEBCwUAA4IBAQA6KSEXvBDbDj8LJupT+UOIQpYsy9QHr3ML17IOFImqin2H18VB
+GxMAwEKizxyWXRvNllC9A46Ri6ecBPAUvQFU2q0oIVzy5GKlKu0QSOT71r4Rhz3
QL8/YAnTI5E13rH/IZ25Dc7WO5VC1uuteFqqS4y9XwflKvKDAidiKqFnAIgAAx5L
teXP0pu+aqyOvhRfBlEAOJ7Iuh4EGFG0+Q86f3waJXXk5va3ptcT/MCZytX6WlSR
e/uO4/PBiV2+RgjEYabvtOyp/jIiyZugEEhgAoXRvcU/wIlxQOHjdwLhlBecEfeb
EqVr6IVnfwwDRi0UIqocgEsn+bH1qV+KvBLh
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:34:34 2025 by rpki-client