This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/TeSJNywIXorEBmp5KfuzUkAo37c.roa
File:                     TeSJNywIXorEBmp5KfuzUkAo37c.roa (raw, json)
Hash identifier:          z0+6lfRhCHpf1+xoQuV99IU9wYJj8+xBQMCYqLKxI6k=
Subject key identifier:   4D:E4:89:37:2C:08:5E:8A:C4:06:6A:79:29:FB:B3:52:40:28:DF:B7
Certificate issuer:       /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial:       019661F1AD30BD650295FA14660EDB5653C5
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/TeSJNywIXorEBmp5KfuzUkAo37c.roa
Signing time:             Wed 23 Apr 2025 09:19:10 +0000
ROA not before:           Wed 23 Apr 2025 09:19:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213531
IP address blocks:        78.41.62.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 23 Apr 2025 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:61:f1:ad:30:bd:65:02:95:fa:14:66:0e:db:56:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
        Validity
            Not Before: Apr 23 09:19:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4de489372c085e8ac4066a7929fbb3524028dfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:64:3e:c3:43:72:50:0a:5b:e8:68:64:b8:
                    ee:a9:df:4b:b8:02:50:d8:ef:0f:d4:cf:75:6b:00:
                    7a:07:df:b5:76:99:82:b2:84:ab:d9:9f:73:2f:a3:
                    70:46:aa:ef:c3:d0:32:ed:e6:0d:2c:f1:70:01:61:
                    b3:54:e3:88:a4:80:4f:74:0b:ac:f9:5d:f2:90:5d:
                    34:45:a9:65:e9:4f:1f:96:7e:4e:54:7a:b5:22:84:
                    89:86:3a:ca:c3:f5:05:46:28:3e:2c:13:b8:3a:11:
                    a8:7b:a0:5c:be:e7:eb:80:37:d1:c1:54:10:57:04:
                    8c:f9:51:d8:e5:e3:98:8b:09:da:28:99:f9:82:e1:
                    c7:4e:bc:ef:d1:70:97:67:90:d5:48:46:6a:a7:f0:
                    0a:65:fc:9f:fd:c8:50:81:c3:9e:80:30:13:43:e2:
                    87:73:83:4d:0d:c9:47:7a:74:81:b7:76:f3:0f:ce:
                    ab:78:f2:a5:09:e5:08:b5:bf:b4:dd:ac:92:c5:84:
                    96:3d:9c:83:37:45:60:dc:c3:ad:01:dd:2f:1e:b2:
                    bb:6b:97:2d:84:22:56:b5:1d:fc:e1:5d:4f:dd:37:
                    56:cc:27:36:91:bf:ae:1d:bf:89:94:da:6a:ba:c1:
                    3c:ab:69:50:88:16:65:69:73:ef:e1:e8:9f:47:70:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:89:37:2C:08:5E:8A:C4:06:6A:79:29:FB:B3:52:40:28:DF:B7
            X509v3 Authority Key Identifier:
                keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/TeSJNywIXorEBmp5KfuzUkAo37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:df:cb:44:e7:c3:8c:f9:ed:89:cf:1d:ce:9b:6b:b6:5e:
         b4:b9:b9:77:99:14:25:4d:c8:55:3a:1d:37:94:ae:66:75:83:
         91:ff:1e:4a:3e:35:d4:83:22:c9:68:3e:46:27:b6:a0:89:28:
         60:28:df:e4:53:13:65:cb:4e:b2:b7:62:93:c3:33:c5:06:58:
         a4:47:58:e2:12:8f:1a:eb:2a:3c:f8:7c:15:7d:b1:b5:11:46:
         2d:14:da:29:66:82:5c:4b:be:12:e2:46:66:ca:1b:0b:60:f1:
         f1:a9:9e:e9:2a:b1:9e:0f:b5:60:5b:09:a8:81:d8:35:01:85:
         24:87:46:cf:50:83:ca:bd:86:8a:fe:c1:91:ac:a8:c1:ec:cb:
         e9:69:89:ac:30:52:71:70:0b:4f:a7:2b:c6:00:c6:ed:c7:41:
         d5:85:f3:90:66:3c:db:04:09:a4:ff:21:dc:36:f1:a9:c1:b9:
         e7:33:72:67:f9:ac:dd:c8:56:f6:85:5f:d3:5b:21:70:61:23:
         97:5e:88:05:61:5e:d6:4c:84:92:86:0e:85:69:af:f4:47:46:
         01:ba:b0:ab:66:37:8d:c8:ab:84:79:21:87:ec:53:ff:b5:13:
         db:ac:6f:02:5f:f9:ef:9e:36:87:ac:a2:6f:aa:ae:29:7f:14:
         6c:c7:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:56:04 2025 by rpki-client