Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NN0eWoTbpw9gRhwG8SDhX1GrYwY.roa
File: NN0eWoTbpw9gRhwG8SDhX1GrYwY.roa (raw, json)
Hash identifier: jTS6SEckEfyadsiAmHCKbQw9CuIeHW91fqC6kvmVH5o=
Subject key identifier: 34:DD:1E:5A:84:DB:A7:0F:60:46:1C:06:F1:20:E1:5F:51:AB:63:06
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A16266729128D1E8E90A5F04AA0A3EEA0B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NN0eWoTbpw9gRhwG8SDhX1GrYwY.roa
Signing time: Thu 22 Oct 2026 06:57:23 +0000
ROA not before: Thu 22 Oct 2026 06:57:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.239.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:66:72:91:28:d1:e8:e9:0a:5f:04:aa:0a:3e:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 22 06:57:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34dd1e5a84dba70f60461c06f120e15f51ab6306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:45:e3:c0:e3:7b:1e:83:92:de:4c:42:fa:
8a:71:33:0a:89:ef:ed:6f:9a:1e:a8:12:14:c6:ca:
95:be:f0:c1:db:d4:c8:a6:e7:bb:5b:97:4b:0d:85:
15:94:cf:36:57:f0:4b:78:4e:7d:c6:79:10:5a:b0:
70:63:58:bf:fc:fb:de:f4:56:74:26:7d:4d:21:73:
3b:f5:ce:50:68:ae:95:19:b3:26:63:64:fd:13:af:
15:84:87:df:22:b8:1b:2b:95:93:ea:3b:d9:71:c8:
17:1d:9e:30:2a:87:4c:11:dd:8c:a6:a5:17:ca:0b:
e3:6b:8b:bf:82:9a:54:33:98:02:5a:fc:ba:b6:0f:
7b:f2:bf:6d:09:7b:d7:57:65:fe:eb:37:d8:99:76:
1f:a1:e0:bb:f9:f4:a6:e4:e2:2c:fb:74:62:06:03:
57:f8:e6:15:bc:ff:88:b1:21:ed:fa:a1:82:b1:a2:
4b:6d:b7:f5:b7:32:b9:f4:09:15:38:55:a4:f3:c2:
bf:fe:2f:96:33:4d:99:8a:7e:91:f9:05:af:74:68:
69:05:7b:48:57:5c:61:8d:24:f4:01:bc:bc:11:35:
b8:fb:4b:48:84:cd:f9:8c:14:fc:74:e2:bd:1a:a2:
13:c1:e7:52:89:fd:ad:37:7f:5d:95:f9:0f:f7:e2:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:1E:5A:84:DB:A7:0F:60:46:1C:06:F1:20:E1:5F:51:AB:63:06
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NN0eWoTbpw9gRhwG8SDhX1GrYwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
Signature Algorithm: sha256WithRSAEncryption
36:11:be:32:72:11:41:4b:15:83:5c:66:7e:50:ad:c3:84:d8:
52:82:9d:8f:a8:9f:b4:b3:e5:d8:21:1b:e9:4b:36:4b:88:f9:
66:a5:4f:6e:fb:b4:fd:e1:cf:47:d4:54:14:2e:11:22:29:fa:
60:5d:91:5a:ca:5c:8b:f8:e5:61:5f:12:0a:3e:34:28:c4:4c:
ef:7a:cd:1a:61:df:6b:fe:e0:da:79:76:8e:ad:d4:76:00:ca:
1e:b4:9b:29:e0:8f:36:9f:21:9d:9f:26:65:a3:0f:d0:b2:f5:
79:0d:4e:13:f2:e1:5d:00:5b:14:8a:10:d7:b1:ae:88:13:cf:
ea:e2:90:93:b3:a7:7e:13:a3:47:3f:e2:3a:dd:92:ac:bd:de:
d2:b4:0e:03:2f:16:1b:5e:fe:02:7b:bd:f1:a2:90:8e:ef:21:
4f:e8:b4:77:20:f2:33:39:2b:9c:f1:94:dc:66:43:df:fa:bf:
b5:1e:e2:e5:c4:55:1b:e1:2a:a5:a8:15:1c:a7:96:ca:24:fd:
12:55:03:01:42:35:11:35:11:14:91:86:b0:f7:38:81:da:a0:
cc:4c:f1:cc:1e:60:40:4a:00:73:a2:b6:04:14:0e:98:c4:9d:
87:12:40:9e:b7:1b:8b:39:98:8f:84:24:41:19:13:0a:65:0a:
d5:93:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:04 2026 by rpki-client