This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          W30POJ6NaxssIUcKRE/xswMi1c4zu0022Fm+gpGMvvA=
Subject key identifier:   66:95:83:07:99:23:19:41:18:78:06:F9:27:FB:BE:66:F2:9F:C1:CA
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       06AC583BBC2712140158C58E4CF6F205674FE5A7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa
Signing time:             Tue 09 Sep 2025 13:54:35 +0000
ROA not before:           Tue 09 Sep 2025 13:49:35 +0000
ROA not after:            Tue 08 Sep 2026 13:54:35 +0000
asID:                     23470
IP address blocks:        95.134.100.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 09 Sep 2025 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ac:58:3b:bc:27:12:14:01:58:c5:8e:4c:f6:f2:05:67:4f:e5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep  9 13:49:35 2025 GMT
            Not After : Sep  8 13:54:35 2026 GMT
        Subject: CN=6695830799231941187806F927FBBE66F29FC1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:22:dc:3c:c5:f8:50:fd:e4:df:0e:89:62:
                    33:1f:62:17:2d:24:88:0c:c1:a9:e5:8a:38:29:71:
                    4a:9b:d6:d4:97:54:88:8b:98:97:ac:53:55:96:02:
                    a4:10:5d:71:7e:8d:e8:58:a1:5a:16:d8:7f:82:43:
                    f4:db:3e:f0:76:72:0d:ed:22:e3:32:79:63:27:36:
                    e0:61:c3:16:9c:6b:11:16:2c:25:88:11:5a:a1:5c:
                    af:e3:af:05:81:5a:b6:fa:26:ba:d9:34:1c:89:b7:
                    15:22:0c:d2:82:a1:5e:84:c4:7c:ea:78:58:a9:31:
                    e6:71:53:b3:49:85:d6:d6:47:f2:3e:f3:74:1a:a1:
                    db:99:e9:19:62:03:de:6d:8c:14:fa:c5:a9:dd:d3:
                    9d:cd:69:58:2e:5e:4f:38:eb:26:a4:3b:43:92:77:
                    0c:8e:44:9c:36:af:6c:4e:5e:46:aa:ae:6d:fc:c5:
                    bc:03:b1:b4:09:25:53:7d:df:fb:22:91:9e:7e:ba:
                    46:99:b6:8e:cf:dc:4a:8b:9e:d9:73:68:a3:07:a1:
                    2b:9d:ed:90:07:e0:a0:93:e0:a6:41:d8:80:90:57:
                    68:db:cd:08:bd:ce:b4:9b:73:df:5b:b7:5c:6b:56:
                    cd:f6:e2:a1:8a:da:bf:e9:2e:e0:ca:89:78:97:f6:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:83:07:99:23:19:41:18:78:06:F9:27:FB:BE:66:F2:9F:C1:CA
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.134.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:44:83:c1:e1:8e:cc:84:45:04:98:58:1e:cc:be:40:8f:
         09:72:b5:63:06:59:9f:bb:c3:ec:fe:88:95:97:e5:95:14:70:
         92:b4:5a:48:02:a5:37:ab:b5:29:85:2f:b8:a2:91:25:4c:55:
         6a:44:f7:f5:ac:bf:84:73:17:ac:f7:bc:c4:23:a7:c0:41:2f:
         0c:e6:bf:e9:83:f7:4c:99:34:e7:3b:1d:c3:67:64:81:cd:8d:
         1d:ad:44:bd:02:ed:1e:31:e5:72:4f:2e:d1:d8:45:5c:e3:1d:
         ac:25:85:e5:71:5a:c6:b1:81:1c:af:38:4f:ee:ae:4f:d0:18:
         e0:29:b1:e2:05:2a:26:5e:05:bc:55:5f:c9:5c:66:ff:c6:dc:
         15:e8:55:7e:0d:63:94:a5:82:22:05:c8:92:5e:56:df:a0:21:
         23:4c:4c:41:3a:f4:14:f9:4b:27:ae:11:45:3d:5a:0a:97:fc:
         32:e0:ce:ea:ee:2b:75:d6:99:07:29:b5:5e:69:50:63:2b:90:
         5c:66:0f:cd:7e:dc:1f:57:d7:f6:70:80:ed:12:46:3a:ec:d9:
         c4:51:bf:91:37:e6:20:6d:5c:25:a2:f8:11:39:2a:d3:16:5c:
         b5:37:e6:8e:56:64:50:bc:11:d4:ba:61:24:20:03:0e:8f:73:
         81:5f:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:14:03 2025 by rpki-client