This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/uYtOXZ_IYk6wYIrueo_hlUgxa7U.roa
File:                     uYtOXZ_IYk6wYIrueo_hlUgxa7U.roa (raw, json)
Hash identifier:          BH/uYa1PlODhcDV/Nnt5RPTUcNKMjVWUwvdJ8/A66nk=
Subject key identifier:   B9:8B:4E:5D:9F:C8:62:4E:B0:60:8A:EE:7A:8F:E1:95:48:31:6B:B5
Certificate issuer:       /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial:       01947DA3FC3E84095C59B5FCFAC76D265CB7
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/uYtOXZ_IYk6wYIrueo_hlUgxa7U.roa
Signing time:             Sun 19 Jan 2025 08:18:06 +0000
ROA not before:           Sun 19 Jan 2025 08:18:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     398704
IP address blocks:        185.7.175.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 19 Jan 2025 08:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7d:a3:fc:3e:84:09:5c:59:b5:fc:fa:c7:6d:26:5c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
        Validity
            Not Before: Jan 19 08:18:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b98b4e5d9fc8624eb0608aee7a8fe19548316bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:42:ee:2a:62:ee:4a:89:4e:ba:a3:92:19:
                    86:c2:bf:42:97:a8:c9:e1:c2:39:f2:18:79:40:e0:
                    93:0d:7d:18:cf:b3:01:70:0f:b4:44:44:ac:11:22:
                    06:dd:0a:16:ed:18:3a:85:c3:cd:fd:f5:c0:94:32:
                    24:c9:17:f4:63:2f:77:6e:0a:e0:6e:84:58:06:02:
                    bc:51:19:60:8f:37:4b:78:95:f1:e2:6f:28:31:0c:
                    71:b4:8c:bd:1d:75:2c:7c:7a:62:5d:a1:54:23:5d:
                    b4:35:7b:85:c1:44:3c:cf:a1:0d:58:26:68:43:eb:
                    2f:35:1e:df:67:c3:fc:b8:a4:e2:b8:db:93:c3:d0:
                    7d:33:ad:5a:1d:3c:cb:44:3b:f4:ed:54:65:a0:eb:
                    35:24:7f:b5:67:1f:bf:86:e9:41:9e:eb:5b:0d:1e:
                    72:1f:dc:7e:92:83:05:75:5f:af:50:3c:c1:8d:e0:
                    95:39:f8:02:76:bb:d9:a9:09:ad:e4:34:45:8c:bb:
                    8b:1e:98:85:08:ce:d7:92:9a:ab:23:7f:43:6b:c1:
                    06:59:37:02:dc:b1:ab:9b:74:93:51:4c:67:b4:e3:
                    81:f2:27:a2:a4:8a:ca:47:55:d3:09:b7:04:e2:ff:
                    69:72:03:4a:48:c1:9d:35:21:a1:e2:15:d8:f5:e1:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:4E:5D:9F:C8:62:4E:B0:60:8A:EE:7A:8F:E1:95:48:31:6B:B5
            X509v3 Authority Key Identifier:
                keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/uYtOXZ_IYk6wYIrueo_hlUgxa7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:b9:0a:1f:a4:49:4e:76:fa:7b:1b:70:6e:8f:f0:c8:92:
         4d:d6:e9:b0:54:34:dd:cb:8f:ad:d5:c4:0b:f5:59:9e:55:7f:
         e2:b1:1e:ad:f3:2d:e4:40:ba:24:8c:95:c8:b3:ae:46:97:45:
         ac:40:79:e1:cf:81:da:50:ac:8c:a8:4b:46:6e:23:bc:a2:cc:
         5d:f8:4a:a6:05:a6:e0:38:82:b1:ff:82:9a:c4:8f:9d:6f:eb:
         a6:5c:78:8e:27:96:7c:d0:ba:68:ab:9a:82:d5:a6:5a:c7:0a:
         64:4f:a2:62:48:64:75:f4:38:bd:3a:d5:0d:cb:1b:17:87:ac:
         62:f6:b2:16:89:57:7e:db:e9:bb:1e:e6:a1:f9:68:4f:ed:a8:
         1d:a5:9a:30:62:0f:1f:64:71:81:85:cd:25:28:e6:d2:5d:d3:
         b4:39:3d:e2:ca:9e:37:a4:62:01:56:52:01:bc:94:dc:be:ca:
         e4:90:3d:9e:bd:39:cd:eb:7b:6b:88:20:a5:e4:d4:47:2d:bc:
         72:e5:90:66:0e:27:90:cf:6d:91:be:05:60:18:ee:b5:06:15:
         01:49:bc:21:b0:f4:47:80:a8:ff:e5:9c:49:43:34:a1:2a:53:
         b0:58:c0:43:c2:00:4e:ba:9d:cd:df:a9:7d:ff:18:d8:0b:e8:
         bb:9a:5e:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZR9o/w+hAlcWbX8+sdtJly3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjUwMTE5MDgxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOThiNGU1ZDlmYzg2MjRlYjA2MDhhZWU3YThmZTE5NTQ4MzE2YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdlC7ipi7kqJTrqjkhmGwr9Cl6jJ
4cI58hh5QOCTDX0Yz7MBcA+0RESsESIG3QoW7Rg6hcPN/fXAlDIkyRf0Yy93bgrg
boRYBgK8URlgjzdLeJXx4m8oMQxxtIy9HXUsfHpiXaFUI120NXuFwUQ8z6ENWCZo
Q+svNR7fZ8P8uKTiuNuTw9B9M61aHTzLRDv07VRloOs1JH+1Zx+/hulBnutbDR5y
H9x+koMFdV+vUDzBjeCVOfgCdrvZqQmt5DRFjLuLHpiFCM7XkpqrI39Da8EGWTcC
3LGrm3STUUxntOOB8ieipIrKR1XTCbcE4v9pcgNKSMGdNSGh4hXY9eHFoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmLTl2fyGJOsGCK7nqP4ZVIMWu1MB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvdVl0T1haX0lZazZ3WUlydWVvX2hsVWd4YTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQevMA0G
CSqGSIb3DQEBCwUAA4IBAQAe/7kKH6RJTnb6extwbo/wyJJN1umwVDTdy4+t1cQL
9VmeVX/isR6t8y3kQLokjJXIs65Gl0WsQHnhz4HaUKyMqEtGbiO8osxd+EqmBabg
OIKx/4KaxI+db+umXHiOJ5Z80Lpoq5qC1aZaxwpkT6JiSGR19Di9OtUNyxsXh6xi
9rIWiVd+2+m7Huah+WhP7agdpZowYg8fZHGBhc0lKObSXdO0OT3iyp43pGIBVlIB
vJTcvsrkkD2evTnN63triCCl5NRHLbxy5ZBmDieQz22RvgVgGO61BhUBSbwhsPRH
gKj/5ZxJQzShKlOwWMBDwgBOup3N36l9/xjYC+i7ml4P
-----END CERTIFICATE-----
Generated at Tue Dec 23 20:51:14 2025 by rpki-client