This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa
File:                     AS202496.roa (raw, json)
Hash identifier:          CvCsf2BsZT4Q/5YhKYcW60FwhBvnmP91HVD0kDFGQkE=
Subject key identifier:   2C:16:3A:80:E9:86:1C:FF:E6:11:A2:39:68:6C:11:54:26:75:9A:52
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       7DEBEF9FD3DF3E6189E03618943FBA03F3690CBE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa
Signing time:             Mon 04 Aug 2025 10:17:59 +0000
ROA not before:           Mon 04 Aug 2025 10:12:59 +0000
ROA not after:            Mon 03 Aug 2026 10:17:59 +0000
asID:                     202496
IP address blocks:        2a0a:a605::/32 maxlen: 48
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 14:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:ef:9f:d3:df:3e:61:89:e0:36:18:94:3f:ba:03:f3:69:0c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Aug  4 10:12:59 2025 GMT
            Not After : Aug  3 10:17:59 2026 GMT
        Subject: CN=2C163A80E9861CFFE611A239686C115426759A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:e1:15:b0:b9:40:42:2c:af:4c:36:da:ff:
                    f1:01:f9:85:48:f5:69:b3:36:80:01:f4:ab:36:26:
                    43:9f:3d:63:1c:d0:43:33:6e:4f:8a:f2:4e:1e:9d:
                    6d:00:65:f9:97:72:ab:1d:3d:15:c3:15:81:85:91:
                    2b:65:92:02:90:f1:f6:dd:61:b3:ba:99:b6:ff:a8:
                    4d:3e:27:e9:94:71:b5:4a:87:97:0c:4d:15:99:75:
                    17:a1:4d:20:98:fb:52:d5:e5:48:d6:48:93:48:8c:
                    9c:7d:2d:a5:4c:47:d4:f8:cd:e7:c7:a8:43:c3:a5:
                    80:24:01:06:95:5d:0c:9a:62:fb:b8:33:1f:d3:ec:
                    00:d2:89:f1:96:1f:7a:a3:0c:de:8b:ac:be:5c:24:
                    02:2b:7a:f9:3d:8a:07:ee:32:5a:c1:d9:f7:e6:d1:
                    09:ad:4c:c3:23:e3:a8:05:4a:6b:63:9e:7f:29:3c:
                    ce:03:bc:01:6d:94:f7:ec:e5:d4:f0:62:25:b8:c5:
                    3a:0b:1a:95:98:bc:9b:2b:72:2d:ec:6a:2b:26:25:
                    c7:f9:99:23:90:8f:ab:c6:51:62:01:b8:d7:50:ce:
                    78:57:0f:f3:0e:fa:2b:dc:9b:b6:81:b4:be:ac:25:
                    a3:ed:b5:3c:74:48:f2:b9:8d:80:48:4e:a2:d0:c1:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:3A:80:E9:86:1C:FF:E6:11:A2:39:68:6C:11:54:26:75:9A:52
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:a605::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:c6:f9:9f:5a:9d:6c:bd:ba:4e:0b:c5:fd:27:34:90:9f:
         bc:ba:d4:07:35:42:0c:d3:de:10:10:d1:c9:c0:10:a9:7a:04:
         21:73:57:1a:c1:9a:44:bd:13:67:0f:36:ff:ad:be:68:2a:71:
         eb:ae:7f:11:3e:ff:e0:06:c1:09:88:1a:00:20:55:6d:36:57:
         53:6a:2b:8d:aa:e0:a8:b3:49:d5:b6:d3:8a:76:72:b2:41:ee:
         e7:a2:16:97:08:88:a2:9e:eb:0b:76:f2:d8:87:5c:31:11:9b:
         4b:ad:38:91:05:91:fe:2f:d2:88:4b:fb:53:d4:d3:80:3c:51:
         84:63:0f:19:a5:2e:2e:5f:2e:29:62:a0:2b:a0:5a:8a:45:85:
         57:87:c2:d7:71:25:83:4a:a8:08:ba:fd:30:d8:9c:84:a0:d0:
         4b:6d:7c:a5:ef:ca:a5:21:cc:c7:1f:0c:91:f2:05:9f:be:bd:
         57:78:28:8d:ff:3d:d6:d4:11:b5:04:26:51:ac:55:8f:40:fe:
         b6:d6:84:a5:4b:63:65:5c:d3:31:f6:a7:b9:95:95:22:83:6f:
         20:5c:6b:94:34:83:c7:63:6d:90:a8:ef:ec:f1:80:e5:98:5f:
         cd:e1:de:db:81:e8:c7:a2:6b:b8:f7:4d:05:ce:b1:5b:29:fd:
         fd:6a:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:28:44 2025 by rpki-client