This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/DpRtEorl_0m0d_bi1FN5EzYPLp0.roa
File:                     DpRtEorl_0m0d_bi1FN5EzYPLp0.roa (raw, json)
Hash identifier:          L49drJTma7ZebYXWSF/o8wwYUsuwkzCYOHpXpegAiqY=
Subject key identifier:   0E:94:6D:12:8A:E5:FF:49:B4:77:F6:E2:D4:53:79:13:36:0F:2E:9D
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019B229A33AD00B8CFDC9DC5029CF6981F25
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/DpRtEorl_0m0d_bi1FN5EzYPLp0.roa
Signing time:             Mon 15 Dec 2025 15:21:29 +0000
ROA not before:           Mon 15 Dec 2025 15:21:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215113
IP address blocks:        213.21.240.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 16 Dec 2025 17:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:9a:33:ad:00:b8:cf:dc:9d:c5:02:9c:f6:98:1f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Dec 15 15:21:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e946d128ae5ff49b477f6e2d4537913360f2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:9c:6d:12:16:f7:e3:8b:64:88:0d:f4:f4:
                    d1:33:8c:98:c7:49:ff:24:58:3e:2c:20:79:b2:23:
                    06:2d:6c:92:6e:23:d7:37:15:30:14:78:da:7e:35:
                    de:52:38:c7:14:b6:e2:fe:ee:eb:79:0c:c6:18:c0:
                    63:4b:c5:28:cb:80:d9:2f:d8:1c:a1:6b:21:2a:f7:
                    4c:69:79:00:ae:61:a8:38:6f:55:40:ff:19:f7:4d:
                    ef:5b:d4:98:51:fd:0d:64:e2:52:3f:5f:d7:ca:38:
                    5e:5a:c2:8c:72:77:7e:d3:62:ba:f3:28:0c:bc:19:
                    92:be:82:b2:98:0b:b4:fe:a7:b6:6c:11:94:e7:fb:
                    c7:96:8d:cd:39:d8:61:14:53:f3:e8:6e:d1:9f:28:
                    57:c4:e9:a2:b3:fe:df:03:d3:df:16:dd:13:f0:ad:
                    43:fc:27:af:49:38:e7:a1:fa:73:89:d7:13:ca:cc:
                    17:bb:4d:76:0b:57:43:c4:29:df:a7:aa:03:af:69:
                    27:72:82:ac:6a:42:9e:2c:ce:87:81:6c:5e:2b:2d:
                    e2:05:ed:93:2a:08:35:c1:f5:e2:ec:d3:cf:92:fd:
                    04:67:6f:5c:f9:ec:98:2c:76:12:5f:02:a4:59:ca:
                    a4:b3:b1:9f:a2:a1:28:cc:a5:ed:14:b6:f7:b1:de:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:6D:12:8A:E5:FF:49:B4:77:F6:E2:D4:53:79:13:36:0F:2E:9D
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/DpRtEorl_0m0d_bi1FN5EzYPLp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.21.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:13:33:cc:44:54:dc:a1:34:f6:d0:94:3c:0d:70:1f:c2:
         17:24:0c:3e:38:42:eb:8b:73:34:b4:a7:5c:b3:cd:66:62:8b:
         cd:b7:03:0b:d4:cf:8e:93:7e:b2:6d:c9:ae:1b:23:1e:c9:d4:
         60:f3:8b:d2:c2:09:a0:83:cc:5b:8d:5e:23:e0:c9:f8:5f:d6:
         38:0d:85:ac:5c:8b:82:52:d3:7f:34:7e:71:0d:c6:7b:88:35:
         82:a8:74:27:1a:ab:be:cc:45:23:d5:8f:3c:5b:2e:80:79:88:
         dd:af:6f:2f:fb:70:e1:5c:0d:7d:77:35:63:22:4d:62:94:53:
         57:e9:0e:27:8d:aa:05:91:b7:4d:c8:fa:da:a1:25:f2:c8:a7:
         1b:13:7f:9e:b0:42:f6:95:cd:47:43:b4:bc:43:cb:fc:43:26:
         8f:d7:b2:5c:d7:35:25:82:4d:ea:b5:c0:84:fe:fd:a2:fa:39:
         37:f6:84:2a:f0:72:1d:21:6d:ae:60:b2:e5:6c:19:88:df:e1:
         b8:96:c8:c9:d7:46:22:d4:d3:b6:26:f2:86:a5:49:75:7f:51:
         13:df:0e:83:de:a3:7f:3e:27:e8:95:15:79:4e:55:9c:ff:07:
         8e:fd:29:62:e4:7d:ce:71:33:35:f1:7d:cf:59:e5:a2:b7:bd:
         c6:cc:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:04:37 2025 by rpki-client