Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9tHNvst4IRnPDqhbS_fCIjbue_k.roa
File: 9tHNvst4IRnPDqhbS_fCIjbue_k.roa (raw, json)
Hash identifier: 2S4OalmW0yxU1pwF+WPv0qoNIkUNdbgrMS0OVvww3Ls=
Subject key identifier: F6:D1:CD:BE:CB:78:21:19:CF:0E:A8:5B:4B:F7:C2:22:36:EE:7B:F9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A13D48F27289BCB250B590EDFC4672F2F1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9tHNvst4IRnPDqhbS_fCIjbue_k.roa
Signing time: Thu 15 Oct 2026 01:59:13 +0000
ROA not before: Thu 15 Oct 2026 01:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 185.98.63.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Oct 2026 10:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:48:f2:72:89:bc:b2:50:b5:90:ed:fc:46:72:f2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 15 01:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6d1cdbecb782119cf0ea85b4bf7c22236ee7bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:78:98:53:c9:22:ae:e5:46:7e:d6:39:71:
b9:fd:27:1e:b9:bc:3d:7e:c1:50:e9:a5:fc:3f:a1:
38:ee:f7:4e:2b:40:31:ad:c3:f8:2b:f3:8b:64:db:
a9:27:1f:65:7b:7f:c9:5d:32:51:a8:37:21:03:2f:
ea:ab:4f:08:88:a4:62:fe:50:8e:62:a5:67:df:50:
78:d2:c9:0f:50:74:96:19:15:2a:7b:2e:ea:3f:94:
89:bb:19:fb:c6:96:ff:c7:a0:b6:af:a6:2f:81:fe:
a7:c7:7e:be:51:b0:d9:0c:2b:d5:f8:c5:2d:98:36:
2b:84:b6:fd:46:c6:24:d4:b9:ea:9a:a7:2d:90:7e:
6e:c7:78:67:6c:4a:ff:e0:ac:4c:29:30:59:15:16:
8c:31:46:84:3e:a0:0d:9c:e6:32:df:16:b4:a0:6e:
44:8d:ec:a0:af:42:c3:1e:8c:42:b9:00:3a:3c:c4:
86:c2:a9:f1:85:20:59:21:f6:6a:b9:ca:59:57:75:
16:fb:1a:ee:12:74:25:77:91:60:66:2a:e5:b8:35:
1d:6e:3a:37:0a:20:60:74:54:64:04:59:ca:61:f4:
cc:ce:4b:cc:da:63:6b:9e:7e:29:56:5b:8d:ae:0a:
e8:ea:63:96:b6:8d:f7:07:c5:86:86:d5:ff:fb:24:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:CD:BE:CB:78:21:19:CF:0E:A8:5B:4B:F7:C2:22:36:EE:7B:F9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9tHNvst4IRnPDqhbS_fCIjbue_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.63.0/24
193.160.140.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bd:a6:75:d9:8c:c3:9c:67:bb:ed:b6:16:7a:f6:93:3a:b5:
2e:0d:8d:2a:49:61:0f:42:7e:72:8e:77:6e:24:c5:6b:cd:74:
7c:8b:6c:3a:3b:72:76:11:de:a0:cd:2f:03:b7:fc:92:8d:0c:
98:fd:11:7d:1e:b7:cb:05:26:dc:c0:a1:78:b9:f3:1a:61:36:
0a:3c:17:b6:f4:2e:6a:8b:0d:79:8f:d1:5c:6e:3d:56:99:fd:
14:4e:43:cd:31:af:c6:b2:a2:9e:05:36:1d:fb:1b:b5:1a:84:
25:48:17:57:f4:84:a4:b5:6d:d1:d0:3c:8c:4c:53:54:9a:58:
44:e4:3b:77:e2:f6:d9:7c:2c:1a:7a:84:71:e4:dc:2f:32:a4:
22:b3:7b:79:b0:6f:8e:8e:45:0b:bc:a7:77:dc:20:4d:b0:22:
99:70:5f:d3:e9:03:21:f7:53:90:2d:28:f0:37:7e:1d:df:10:
b5:fc:89:17:61:f6:b4:5c:89:f2:1b:9a:74:2f:6f:08:bf:03:
98:87:1d:de:d7:43:98:5b:a4:a5:ba:e9:fc:28:40:b0:05:8e:
b3:3d:3b:8e:7a:55:61:bb:60:b2:01:03:7f:c2:e4:09:eb:0f:
8a:1c:61:2d:72:6e:00:f8:dc:1a:aa:90:d7:4e:f6:1f:65:4c:
f0:8c:28:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE9SPJyibyyULWQ7fxGcvLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYxMDE1MDE1OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmQxY2RiZWNiNzgyMTE5Y2YwZWE4NWI0YmY3YzIyMjM2ZWU3YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7694mFPJIq7lRn7WOXG5/Sceubw9
fsFQ6aX8P6E47vdOK0AxrcP4K/OLZNupJx9le3/JXTJRqDchAy/qq08IiKRi/lCO
YqVn31B40skPUHSWGRUqey7qP5SJuxn7xpb/x6C2r6Yvgf6nx36+UbDZDCvV+MUt
mDYrhLb9RsYk1LnqmqctkH5ux3hnbEr/4KxMKTBZFRaMMUaEPqANnOYy3xa0oG5E
jeygr0LDHoxCuQA6PMSGwqnxhSBZIfZqucpZV3UW+xruEnQld5FgZirluDUdbjo3
CiBgdFRkBFnKYfTMzkvM2mNrnn4pVluNrgro6mOWto33B8WGhtX/+yRRRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPbRzb7LeCEZzw6oW0v3wiI27nv5MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvOXRITnZzdDRJUm5QRHFoYlNfZkNJamJ1ZV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWI/AwQA
waCMMA0GCSqGSIb3DQEBCwUAA4IBAQB1vaZ12YzDnGe77bYWevaTOrUuDY0qSWEP
Qn5yjnduJMVrzXR8i2w6O3J2Ed6gzS8Dt/ySjQyY/RF9HrfLBSbcwKF4ufMaYTYK
PBe29C5qiw15j9Fcbj1Wmf0UTkPNMa/GsqKeBTYd+xu1GoQlSBdX9ISktW3R0DyM
TFNUmlhE5Dt34vbZfCwaeoRx5NwvMqQis3t5sG+OjkULvKd33CBNsCKZcF/T6QMh
91OQLSjwN34d3xC1/IkXYfa0XInyG5p0L28IvwOYhx3e10OYW6Sluun8KECwBY6z
PTuOelVhu2CyAQN/wuQJ6w+KHGEtcm4A+NwaqpDXTvYfZUzwjCh5
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:57:35 2026 by rpki-client