This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20313335343032.roa
File:                     3139342e33342e3235332e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier:          0FTLWY2O5c2Jj1hHY9xb3MDJCfGq8FtGZroHqkTMlsY=
Subject key identifier:   ED:26:E0:11:93:95:AE:A6:04:C1:40:A9:67:CA:0F:4C:8A:AA:5A:5C
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       12D2E64B8F938350E38A74BFA9B7B2D819DA9881
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20313335343032.roa
Signing time:             Wed 12 Feb 2025 12:32:59 +0000
ROA not before:           Wed 12 Feb 2025 12:27:59 +0000
ROA not after:            Wed 11 Feb 2026 12:32:59 +0000
asID:                     135402
IP address blocks:        194.34.253.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 11 Mar 2025 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:e6:4b:8f:93:83:50:e3:8a:74:bf:a9:b7:b2:d8:19:da:98:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Feb 12 12:27:59 2025 GMT
            Not After : Feb 11 12:32:59 2026 GMT
        Subject: CN=ED26E0119395AEA604C140A967CA0F4C8AAA5A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:ac:61:64:ab:b4:1c:82:8e:ae:ae:bd:02:
                    f1:04:ab:26:f9:e1:2b:56:6a:8f:d5:05:ae:ef:fd:
                    3f:54:67:53:56:b3:bd:05:08:b6:e6:18:2f:af:a3:
                    bc:7a:f5:12:5d:ab:41:02:8d:e0:88:65:34:6a:55:
                    79:4f:8a:84:3f:b8:cc:8e:ad:73:ee:ea:b6:0f:1d:
                    06:aa:04:98:44:ae:46:71:37:cd:a8:bf:89:0f:7b:
                    64:01:6f:24:dd:e0:04:98:e6:99:1d:11:5c:9f:6a:
                    87:f7:fb:49:f7:64:41:d5:0e:f1:7c:93:08:0e:9a:
                    0c:ec:7e:8d:8e:9c:17:b9:11:62:4f:14:8a:cd:24:
                    eb:77:1f:3a:14:3c:4a:cf:70:2b:81:c4:4b:f7:91:
                    4f:4c:06:37:68:c1:5a:c1:f4:2e:8e:df:e0:9c:8e:
                    05:5a:e7:54:d1:66:2c:32:bf:a9:47:bf:27:9e:5e:
                    89:00:39:8a:a7:7e:70:96:0f:ce:3b:74:ec:db:31:
                    02:e3:e6:b6:f1:97:b1:f1:5e:f5:b3:eb:4f:e4:50:
                    a6:36:13:8e:82:51:77:6d:d0:90:e9:d6:b3:aa:9b:
                    2d:46:e1:85:a4:a5:75:e9:78:9b:a1:8c:c6:4b:26:
                    c4:71:d5:b0:30:1c:d2:87:f2:c0:75:ce:39:cc:53:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:26:E0:11:93:95:AE:A6:04:C1:40:A9:67:CA:0F:4C:8A:AA:5A:5C
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20313335343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:9d:77:fc:33:85:e1:20:9d:80:32:b3:a1:80:e0:68:31:
         6f:9f:cd:a0:88:cd:53:66:0b:6b:95:66:51:28:9e:a2:5e:ab:
         84:cf:f3:8e:23:86:fd:23:30:ea:17:be:2b:6a:9b:19:00:39:
         56:84:3c:1c:4f:6e:b6:8c:32:7d:92:60:e4:d7:20:5c:0c:e4:
         f1:3d:b1:37:72:7f:1e:bb:26:2b:43:d6:d9:3b:6b:56:fa:4f:
         4e:72:8c:80:f8:c0:2c:9d:bb:46:51:15:0a:bb:bd:b1:4a:91:
         8c:54:86:17:2c:df:16:41:6d:02:63:50:5c:eb:a4:2d:4d:c7:
         de:b8:0e:c0:37:5f:88:a6:2f:f8:10:63:d8:cd:b7:85:94:14:
         82:b6:f5:c7:82:df:11:e5:d3:3c:5a:6f:29:50:2e:e6:d5:b4:
         85:03:a9:f5:57:14:16:28:d1:e9:76:15:8e:fb:82:9f:f3:8a:
         97:88:ca:bb:f6:b5:e3:bb:fb:f9:2b:76:55:f6:aa:65:be:a3:
         9e:fd:1a:7e:5e:64:2b:2f:b8:f4:76:cc:5c:cb:7d:af:a8:93:
         b0:ae:ab:f2:1a:2c:ed:5e:95:7b:86:94:e0:ce:d7:a2:c5:0b:
         2f:dd:91:9f:97:4e:4d:fd:01:ac:9c:8d:50:d4:9d:c0:e1:77:
         a3:70:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:49:47 2025 by rpki-client