This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/cj2h94K7N_7vVeO8KSmGLZPuoYY.roa
File:                     cj2h94K7N_7vVeO8KSmGLZPuoYY.roa (raw, json)
Hash identifier:          twtzQM7qEtD2kLPfMxmbb2D790Vkb8Wg6WIdhyQEy90=
Subject key identifier:   72:3D:A1:F7:82:BB:37:FE:EF:55:E3:BC:29:29:86:2D:93:EE:A1:86
Certificate issuer:       /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial:       019461C73069BDF90F02CA61C71C47698ACA
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/cj2h94K7N_7vVeO8KSmGLZPuoYY.roa
Signing time:             Mon 13 Jan 2025 22:27:11 +0000
ROA not before:           Mon 13 Jan 2025 22:27:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216244
IP address blocks:        185.85.72.0/24 maxlen: 24
                          185.85.73.0/24 maxlen: 24
                          185.85.74.0/24 maxlen: 24
                          185.85.75.0/24 maxlen: 24
                          185.160.28.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 13 Jan 2025 23:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:61:c7:30:69:bd:f9:0f:02:ca:61:c7:1c:47:69:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
        Validity
            Not Before: Jan 13 22:27:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=723da1f782bb37feef55e3bc2929862d93eea186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:66:b9:a8:94:3d:f6:45:ce:10:27:c2:24:
                    81:88:9b:48:80:08:41:92:14:98:9a:45:dc:e6:f4:
                    4c:79:08:0d:ac:85:c1:09:49:ad:f7:74:20:23:4a:
                    c6:b7:82:c4:20:26:45:e8:1c:2e:76:d9:36:d3:f4:
                    0b:0f:76:67:50:66:29:35:14:da:c9:08:03:01:3b:
                    2b:e3:73:e7:ee:67:e5:53:0c:94:48:73:66:84:bc:
                    5e:1a:9a:d3:30:d6:aa:28:a3:6d:93:32:37:bb:ad:
                    cd:b5:82:26:b9:a8:69:25:59:e7:fd:d8:9e:14:7d:
                    5f:f7:69:06:82:3b:45:c7:1f:1f:45:64:fc:7e:15:
                    20:0e:95:64:23:d8:a2:7f:c9:21:b8:96:16:8b:48:
                    66:b1:e7:a3:2c:8f:3a:3f:b7:8e:3d:49:2b:c8:19:
                    4b:b1:85:69:9e:1d:6c:91:09:a3:24:31:b2:94:75:
                    11:1f:8e:09:0d:0e:44:fc:0f:1a:ba:ee:d4:45:01:
                    21:fd:22:bd:2d:cf:6c:46:d8:44:a9:12:9f:ba:42:
                    10:ec:84:6d:33:7d:74:f4:b7:25:ad:2f:01:9a:91:
                    4b:9f:bf:60:c3:48:fa:d0:66:da:f0:22:93:52:73:
                    99:46:dc:0a:30:30:ed:c4:e1:23:62:b1:03:74:94:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3D:A1:F7:82:BB:37:FE:EF:55:E3:BC:29:29:86:2D:93:EE:A1:86
            X509v3 Authority Key Identifier:
                keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/cj2h94K7N_7vVeO8KSmGLZPuoYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.72.0/22
                  185.160.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:45:9d:5a:88:46:17:eb:cd:24:3a:a0:5b:2c:ab:e6:87:
         83:6f:0e:0f:3a:fb:e5:52:f4:5e:1e:52:6b:9f:a4:4e:04:4d:
         46:a7:d1:fc:34:a5:92:ed:f3:ca:98:59:a2:d9:36:bc:ad:90:
         6a:61:9c:ac:9e:8c:3a:4b:fd:2d:c5:24:60:0e:66:ae:40:ed:
         a1:c3:4b:e1:c6:43:7e:e3:56:29:1f:22:e3:52:31:0b:15:72:
         55:6e:43:2c:4a:3e:51:e7:d8:ab:4d:54:40:da:82:32:62:be:
         b8:71:e0:c8:00:4e:44:ad:ee:3d:a7:f2:09:d3:42:27:1f:11:
         22:78:4b:e7:8d:60:79:70:4c:8a:8a:35:51:d3:70:03:b2:91:
         5f:18:9f:00:e7:01:ee:4a:59:24:fa:88:e8:bc:2e:cf:6f:2f:
         1c:3a:3a:d4:55:8e:29:92:42:30:52:1d:0d:7e:0f:53:2a:16:
         41:d2:ff:97:e9:31:48:3f:00:40:7e:5d:9e:df:5f:07:90:41:
         d9:c1:19:84:48:00:16:87:92:19:f1:9c:32:b4:bb:e8:06:2d:
         a6:9a:40:2f:dc:9b:0d:93:69:40:aa:73:94:0e:0a:b4:aa:06:
         54:28:e9:eb:61:7e:02:d5:9a:fb:38:7a:c6:8a:e8:e9:d8:54:
         48:83:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:21:44 2025 by rpki-client