This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3430203d3e20323033383433.roa
File:                     326131343a373538303a3930303a3a2f34302d3430203d3e20323033383433.roa (raw, json)
Hash identifier:          G9rXv4cHRz/eoQ1zyYcWnobdhgCDxU/pjWSYeg8nXDc=
Subject key identifier:   97:77:7F:D4:89:DA:1C:62:F6:50:2D:E2:8A:47:B7:48:4B:FE:E9:73
Certificate issuer:       /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
Certificate serial:       6275D9120C8706605B091EADD8E6BE9057DB013A
Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3430203d3e20323033383433.roa
Signing time:             Fri 11 Apr 2025 06:50:16 +0000
ROA not before:           Fri 11 Apr 2025 06:45:16 +0000
ROA not after:            Fri 10 Apr 2026 06:50:16 +0000
asID:                     203843
IP address blocks:        2a14:7580:900::/40 maxlen: 40
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 18:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:75:d9:12:0c:87:06:60:5b:09:1e:ad:d8:e6:be:90:57:db:01:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
        Validity
            Not Before: Apr 11 06:45:16 2025 GMT
            Not After : Apr 10 06:50:16 2026 GMT
        Subject: CN=97777FD489DA1C62F6502DE28A47B7484BFEE973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:00:65:cd:e8:73:9a:7d:b0:4e:93:85:3e:
                    3d:f2:fc:51:e2:89:fc:f0:24:ed:fe:7a:41:23:31:
                    94:cf:bf:42:27:1c:fc:e9:de:36:ff:9d:89:2f:49:
                    91:16:f1:98:04:5a:f4:10:d5:86:90:4b:52:74:53:
                    d7:a5:63:21:b7:17:93:02:c8:47:75:43:b2:93:39:
                    86:f7:5c:3f:62:ce:08:cc:ad:ab:ea:bd:26:d4:59:
                    53:93:17:1a:e3:3a:11:e0:4b:17:6f:17:b3:67:2e:
                    f2:09:c1:24:15:47:3b:02:f5:41:a1:de:c5:04:50:
                    a9:e0:5a:af:8a:69:69:1f:10:04:0f:f6:c3:f3:7d:
                    e5:8b:3f:0b:a6:53:6a:6b:c3:a2:20:73:3c:b6:ac:
                    b8:c6:16:0d:ed:a4:90:4a:fd:7a:0a:e1:93:9c:fb:
                    97:6c:f2:e4:e7:44:ef:a1:fc:03:0d:8e:89:06:dc:
                    64:13:ed:1b:30:82:1b:f7:87:58:ac:5a:f8:c9:9d:
                    4c:82:b5:f8:cb:c7:ca:da:f5:82:5b:db:74:43:87:
                    92:38:da:f5:7e:4f:3a:ef:c6:2c:06:2d:15:50:f4:
                    41:23:16:27:d9:65:4d:1d:c9:bc:cb:a7:bd:bd:78:
                    96:0c:17:e2:78:fb:22:77:b2:92:63:b6:ee:bd:87:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:7F:D4:89:DA:1C:62:F6:50:2D:E2:8A:47:B7:48:4B:FE:E9:73
            X509v3 Authority Key Identifier:
                keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34302d3430203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:f4:21:1b:6f:70:72:9c:79:2b:3f:59:20:16:9e:67:9e:
         91:63:e9:69:bb:6c:f6:16:d9:c2:91:e5:30:8e:64:dd:f6:ee:
         7a:ae:e2:e7:ff:36:5d:b2:12:7e:63:c2:8d:25:63:27:44:71:
         d2:41:a2:20:a0:78:81:ff:51:be:a1:6a:5e:6b:09:69:99:a9:
         a5:5b:c5:6d:68:16:21:c3:5f:2d:0d:1e:03:05:2a:2d:79:4e:
         c8:fe:ad:f2:16:30:ac:5a:dd:33:85:9a:c6:12:5e:76:12:9f:
         54:72:e8:6c:aa:2d:de:72:81:c3:ff:f9:d0:69:81:9f:e0:86:
         3b:4c:f3:35:0f:5b:a6:e4:b8:c6:42:d6:e7:4c:43:3d:4b:07:
         98:86:e6:99:34:0a:c7:40:0a:e1:ec:b6:b7:67:78:4c:87:60:
         40:1b:7d:d4:3f:5f:db:2a:81:17:ff:84:4b:da:26:68:9e:e7:
         3c:0e:58:75:56:85:c4:4b:fd:7a:dd:63:8d:c3:d4:28:09:33:
         ba:c5:c3:46:32:4b:03:a7:2d:41:a4:62:02:ff:63:a1:6b:64:
         fd:b0:67:51:2f:ef:04:58:7a:1f:9b:58:1d:aa:2b:72:7c:ff:
         82:20:5a:41:ec:de:2e:f5:df:4f:ca:1a:24:a6:95:ec:76:e5:
         9e:62:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----