This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa
File:                     qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa (raw, json)
Hash identifier:          y6Nwum0HmebqOXqkNnFfw4sljd6YPpkwRxVc1zd2OrM=
Subject key identifier:   A8:7B:AB:18:F6:7C:84:06:0F:C4:13:90:1D:02:77:1D:D4:65:60:3C
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       019B37E45536A5043753F4873F27021A50C6
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa
Signing time:             Fri 19 Dec 2025 18:34:29 +0000
ROA not before:           Fri 19 Dec 2025 18:34:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4228
IP address blocks:        88.218.18.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 12:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:e4:55:36:a5:04:37:53:f4:87:3f:27:02:1a:50:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Dec 19 18:34:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a87bab18f67c84060fc413901d02771dd465603c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:93:30:fb:0b:7d:01:a7:4f:2a:2b:b1:6e:
                    25:2c:72:bf:99:e3:65:06:41:26:e1:04:c2:0b:11:
                    01:38:3e:51:ad:f6:6d:fb:da:90:40:8a:46:e8:8b:
                    a7:d8:e3:dd:a3:19:b5:e4:e4:8d:71:4a:b1:de:4f:
                    f7:d9:8f:d1:f7:fb:75:45:16:d9:bd:51:1c:7e:9e:
                    68:6d:90:30:40:bc:ec:34:e9:b1:91:ed:c1:8f:b7:
                    eb:e9:16:bf:d5:9a:b1:42:57:19:03:2c:8c:ac:43:
                    20:5f:b5:2b:91:0f:b5:a8:96:dc:35:1d:86:2b:2e:
                    78:82:0b:5d:95:60:68:ad:07:a0:1e:02:77:ff:5e:
                    9d:ef:dc:c7:e3:35:17:17:0a:bc:83:eb:93:5e:d9:
                    ed:bf:c7:76:d2:50:97:ee:53:ea:2f:66:29:fe:9f:
                    ff:70:f9:71:91:51:e7:68:6e:00:a3:13:01:eb:7c:
                    7d:dd:47:b6:18:cd:1f:cf:3c:23:b8:ae:fb:9c:bb:
                    dc:47:01:db:14:b4:be:b0:ab:7d:1e:8f:e6:ec:d3:
                    a3:ca:d7:5c:67:f7:58:0b:56:45:7b:39:07:46:c3:
                    78:f0:ce:62:a6:1a:c3:cf:a6:b5:7a:d3:8f:50:f5:
                    6e:f9:d4:05:01:21:17:69:52:79:c5:26:09:44:f0:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:AB:18:F6:7C:84:06:0F:C4:13:90:1D:02:77:1D:D4:65:60:3C
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:e6:be:6e:51:a2:c1:aa:50:82:0b:fe:3e:e2:72:94:b8:
         2a:ef:f8:53:5c:66:e4:ba:2c:1c:63:82:fc:e9:1e:63:cc:a2:
         4d:6a:66:6f:cb:4d:70:ba:87:ad:dc:7e:8f:bf:5e:ea:85:ef:
         5c:e5:a1:ca:fe:e6:6a:47:be:13:ad:dc:ce:d2:08:38:e4:d5:
         fa:cb:55:43:95:65:a4:71:8c:7b:41:43:90:de:1f:7f:f2:5e:
         21:42:46:15:42:66:d0:65:e2:20:f1:22:9d:cb:a1:5b:11:7a:
         76:0d:39:65:f1:16:63:2a:6b:d9:7b:4b:ba:0d:63:ba:3b:a7:
         93:f1:e2:39:dd:ba:b7:47:01:f0:0c:e9:d3:06:7a:79:41:e1:
         59:0c:5d:7c:58:cb:d2:8b:92:3e:e2:a7:c8:ea:22:c6:fc:34:
         ae:9f:20:84:04:1e:02:74:71:dc:35:69:a8:34:0b:cc:2d:d7:
         08:8d:e5:99:c0:f7:f5:53:d1:4c:91:fa:08:83:10:23:1f:09:
         03:30:49:0c:da:fb:8a:ba:42:16:f5:1d:db:f4:9e:a3:b2:57:
         b3:85:d4:cd:2d:14:1c:b6:ae:c8:54:7f:af:ad:19:f0:ed:ba:
         de:38:c2:07:df:75:7b:78:b1:86:0d:29:bb:a4:1f:56:20:b0:
         95:a2:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:38:29 2025 by rpki-client