This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
File:                     AS213060.roa (raw, json)
Hash identifier:          wUxiMlq5Kllum97cfavtlh4o1ncWiAAmH/JPcn4uvhQ=
Subject key identifier:   29:77:AF:7B:CB:07:3C:A3:49:5C:5B:B1:F4:05:1E:DD:06:AE:B7:A8
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       654B990BB02060491B76DF8EFA8A482AB212A651
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
Signing time:             Wed 17 Dec 2025 07:24:07 +0000
ROA not before:           Wed 17 Dec 2025 07:19:07 +0000
ROA not after:            Wed 16 Dec 2026 07:24:07 +0000
asID:                     213060
IP address blocks:        45.231.206.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 07:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:99:0b:b0:20:60:49:1b:76:df:8e:fa:8a:48:2a:b2:12:a6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Dec 17 07:19:07 2025 GMT
            Not After : Dec 16 07:24:07 2026 GMT
        Subject: CN=2977AF7BCB073CA3495C5BB1F4051EDD06AEB7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:c4:81:25:de:f6:b6:23:31:64:e0:d9:e7:
                    ab:07:21:2e:a9:1a:22:e8:8b:99:f2:49:ae:0d:90:
                    34:e4:ce:2d:a9:b7:51:b0:55:a7:93:e7:fb:10:59:
                    cd:89:eb:97:14:7c:a5:51:c3:13:49:78:2a:ac:e2:
                    94:d6:33:60:e9:f6:54:ac:41:9a:d8:81:3a:ef:e9:
                    ac:84:9d:7c:7d:76:45:cb:91:2c:15:21:be:bd:07:
                    cb:bd:27:f3:88:4c:40:90:6e:c5:4d:31:07:38:0a:
                    35:d8:b4:0d:96:35:ac:9a:73:e6:c5:b6:b3:0a:13:
                    33:c9:3d:80:71:78:fb:0f:19:fb:d5:48:52:22:05:
                    4e:03:e9:e0:86:21:0d:39:c6:38:6e:c6:68:7f:72:
                    2b:8b:34:ad:97:b8:b7:48:04:c2:64:33:02:1b:74:
                    0a:91:fc:69:92:3f:cd:03:6a:fe:05:e2:0c:23:a5:
                    20:33:10:17:22:91:37:23:59:a0:14:64:76:b3:f2:
                    78:b3:87:ca:a6:f0:b1:1b:06:ef:54:91:e7:76:5c:
                    8e:f8:ff:d8:d1:2c:7a:c1:5b:41:0d:dd:7c:be:9c:
                    25:d9:a6:fa:a3:76:79:88:6b:05:d2:3c:99:fd:ad:
                    02:64:c7:4e:8c:0e:4f:48:e2:0f:35:84:e3:68:1b:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:77:AF:7B:CB:07:3C:A3:49:5C:5B:B1:F4:05:1E:DD:06:AE:B7:A8
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:24:3e:52:0c:02:5e:63:02:ca:80:ab:de:bf:50:03:79:
         76:ec:19:e9:4b:b9:5a:3d:6e:66:90:91:f3:83:2e:a0:7d:96:
         3d:34:34:93:dd:b5:7f:e8:74:15:51:70:01:51:75:1b:04:7b:
         37:d1:0c:bb:de:89:3e:da:b2:69:a4:ce:cd:50:7d:c5:38:05:
         26:4c:e5:73:fe:1c:34:56:dd:87:fa:70:5b:45:9b:37:56:36:
         30:b4:47:76:33:03:62:1e:21:62:7d:60:67:35:bd:98:0c:55:
         53:e8:86:9e:8a:7a:a3:2a:69:b1:10:39:58:cd:4b:7b:ca:4e:
         a7:fc:9a:62:e5:6a:8e:99:a7:ba:7b:29:fb:a1:18:4b:55:45:
         3b:c2:b0:0b:fd:98:79:60:72:ba:23:c7:85:ba:80:0c:2e:5d:
         e7:29:9c:00:94:16:0c:de:61:8d:6b:f8:da:61:70:7d:04:4f:
         da:6e:8f:56:9a:02:2b:d3:5c:a2:ff:55:2c:55:cc:73:d6:ed:
         9e:8b:d4:b3:94:e1:9a:81:40:24:df:d5:cc:a9:1f:0a:fc:6f:
         2f:8d:08:ee:12:18:a4:c0:d9:24:e1:27:5a:6c:54:f8:95:cc:
         48:8e:a1:d3:b2:36:b6:3c:5e:db:07:02:8a:60:e0:43:08:3c:
         74:f8:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:49:12 2025 by rpki-client