Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NCNw-q6YxY8PikHzVJtCFYodrks.roa
File: NCNw-q6YxY8PikHzVJtCFYodrks.roa (raw, json)
Hash identifier: NUg2KeiaQGM51pFEn1ICLCnMiOvkTPu/222JE02k7/k=
Subject key identifier: 34:23:70:FA:AE:98:C5:8F:0F:8A:41:F3:54:9B:42:15:8A:1D:AE:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EB538665B5C01C4AB2445CA122F7DE962
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NCNw-q6YxY8PikHzVJtCFYodrks.roa
Signing time: Thu 11 Jun 2026 05:47:12 +0000
ROA not before: Thu 11 Jun 2026 05:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 85.31.46.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jun 2026 10:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:38:66:5b:5c:01:c4:ab:24:45:ca:12:2f:7d:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 05:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342370faae98c58f0f8a41f3549b42158a1dae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:f9:e5:de:6e:91:98:15:bf:b5:a9:cf:60:
81:21:45:6b:42:15:72:80:1c:f1:79:0e:d4:6a:07:
fd:8e:05:9c:51:e0:4f:e3:58:b9:ee:86:61:81:bd:
46:ed:2b:29:d5:f8:05:35:b7:54:6b:84:bc:b4:dd:
f9:c2:a9:70:a9:04:19:97:b6:4a:5c:cb:09:ce:9e:
46:6c:89:ff:fe:14:5a:bd:59:ab:0a:33:45:37:91:
f8:cc:06:94:f8:be:81:ef:bf:eb:43:e7:55:1e:ad:
96:74:f4:96:aa:2a:5b:6a:ae:07:54:b5:c7:31:02:
ec:08:af:46:84:b7:ff:f5:37:cb:2a:60:a1:8b:0c:
28:6b:29:ce:20:f9:d0:4f:18:e5:b8:36:aa:20:07:
63:da:1d:30:bc:db:e5:ae:dd:48:db:80:1e:b6:93:
8d:cc:65:79:a3:c2:01:33:46:9d:9a:98:62:8b:df:
51:e2:3a:b2:fa:99:67:02:e4:96:88:f7:36:a8:87:
2a:39:34:07:52:db:15:fc:f7:c8:de:8e:1e:8d:4d:
5c:e9:ea:c3:09:f6:60:e6:51:f0:d6:03:f7:86:96:
3b:c1:fe:3f:8d:f6:85:e0:eb:48:cc:89:64:ee:b8:
80:6d:8b:19:f7:f2:64:4f:68:56:1c:c7:d9:75:10:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:70:FA:AE:98:C5:8F:0F:8A:41:F3:54:9B:42:15:8A:1D:AE:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NCNw-q6YxY8PikHzVJtCFYodrks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.46.0/24
87.121.216.0/24
185.207.15.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b7:77:ca:12:ca:44:dc:80:c7:b9:c3:35:e7:09:ee:a8:ad:
45:67:c1:d8:69:ca:93:f1:e7:25:6e:32:58:b7:52:75:cb:81:
e9:15:63:24:24:b8:c1:46:96:4e:3f:0d:bd:fb:84:fb:d2:23:
dd:db:93:45:79:0b:59:c3:e8:83:70:05:94:1b:bd:46:1a:9a:
b7:d8:81:0d:f1:1a:29:02:68:41:b9:86:55:ce:3b:67:4e:f2:
24:9c:98:5e:cb:20:5c:70:87:ae:20:95:16:e8:2c:fb:61:7c:
3f:ef:fe:0e:4f:a3:52:01:55:70:0c:6f:33:0f:43:0d:55:97:
2a:74:d8:f4:cc:30:16:a9:cf:a6:22:ad:86:bb:92:e0:8a:dd:
3b:f8:ac:a2:55:86:fb:08:ec:bb:3e:ec:c9:4d:b8:0b:ca:be:
3f:b1:05:56:3c:4f:5e:b1:77:f9:66:b0:ac:12:2c:51:aa:11:
8e:62:a0:ac:6e:53:3a:59:fe:5d:d6:77:d1:a1:75:79:03:68:
26:a5:6d:e1:a7:b9:2d:7f:f1:49:9d:11:ac:c9:39:31:86:5f:
56:8c:7c:7b:98:fb:c1:54:eb:64:f9:8f:51:3e:56:02:e9:9f:
33:d0:e1:bc:b8:25:b9:2c:f2:d2:7f:df:ba:6f:e1:41:5f:53:
be:95:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:01:07 2026 by rpki-client