Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhGIR8ZtE9ACrY-8reYSca4Uwr0.roa
File: NhGIR8ZtE9ACrY-8reYSca4Uwr0.roa (raw, json)
Hash identifier: Zxkrsq7Rx8TJpOyTXvAc7w/J+eE1nPoc6mi5M2gp80s=
Subject key identifier: 36:11:88:47:C6:6D:13:D0:02:AD:8F:BC:AD:E6:12:71:AE:14:C2:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0F6E330D41AD7721B403032D197D14CF9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhGIR8ZtE9ACrY-8reYSca4Uwr0.roa
Signing time: Thu 01 Oct 2026 09:54:39 +0000
ROA not before: Thu 01 Oct 2026 09:54:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
85.217.166.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Oct 2026 06:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e3:30:d4:1a:d7:72:1b:40:30:32:d1:97:d1:4c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 1 09:54:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36118847c66d13d002ad8fbcade61271ae14c2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:a9:42:cd:56:e4:53:f9:e1:62:f6:18:e8:
64:f0:e8:55:d9:35:97:e7:90:75:61:bb:6f:46:27:
79:b5:50:26:07:de:c7:1d:02:00:d2:74:d0:8f:11:
e6:81:e4:f2:2c:0f:69:fe:30:1d:cc:65:a6:16:ca:
e6:98:4d:b3:02:11:a0:fb:14:ea:66:d5:eb:be:ac:
a7:4e:1b:fb:2c:c1:c9:36:7d:3e:f9:b7:d8:2c:0c:
45:3f:18:7b:43:80:c7:6e:28:d2:c0:d5:6e:62:8c:
61:08:a0:f9:3e:79:04:cb:3e:71:ff:5f:e7:3c:b5:
a5:de:60:bf:c5:ea:99:42:b1:92:c0:41:a6:81:0c:
28:05:60:d9:4a:45:1c:88:0f:03:a6:01:a7:22:33:
60:cf:b3:bd:cb:72:28:66:8b:c6:0a:a5:04:87:9a:
ed:53:d5:59:30:d6:50:bb:50:0e:bd:e3:aa:e5:d6:
17:8e:f5:eb:4f:f8:fb:e8:02:6f:a1:02:71:66:97:
95:a7:ee:b8:cc:30:0d:a1:2f:10:14:3f:c2:b1:b4:
2b:de:4f:c1:49:cc:21:64:3f:2d:55:0c:52:33:66:
72:6e:3b:3a:ab:7a:21:2d:30:b3:3c:9e:b3:20:de:
71:24:dd:ed:1d:4b:85:4c:17:03:88:20:b8:b3:f7:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:88:47:C6:6D:13:D0:02:AD:8F:BC:AD:E6:12:71:AE:14:C2:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NhGIR8ZtE9ACrY-8reYSca4Uwr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.128.235.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.217.130.0/23
85.217.166.0/24
87.120.87.0/24
87.120.108.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.120.196.0/24
87.121.114.0/24
87.121.221.0/24
91.92.21.0/24
92.249.50.0/24
93.123.109.0/24
94.125.102.0/23
94.154.160.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
178.215.239.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
37:30:cc:30:75:61:e0:e3:65:ad:57:dd:4b:d7:30:e8:f9:1c:
27:75:68:98:7b:32:80:fd:c1:07:d6:11:a6:47:3f:37:69:61:
bd:c7:6d:15:30:0c:fc:fd:8c:ae:c7:48:64:5b:cb:05:cc:c1:
af:55:0e:2f:51:a6:35:5a:e1:32:f7:70:4f:40:cf:06:f2:d0:
67:ac:60:f9:15:2c:3f:8b:d7:1b:3c:9a:0c:87:13:ee:5d:3c:
31:82:9b:ef:30:1e:4a:73:65:75:8b:85:1d:62:1d:da:c1:42:
f9:82:cb:f3:32:93:d9:16:8a:09:7f:e9:f1:87:c6:db:57:3b:
dc:9d:15:a7:21:80:01:51:a0:f5:14:d4:6b:3d:67:19:63:7d:
3b:24:88:61:f8:77:73:72:7e:1d:69:de:3b:f9:0d:ed:fa:45:
3f:c1:3b:80:fc:e3:c0:90:6f:8c:81:d5:81:36:36:dc:6b:ea:
be:2c:78:e0:c9:e6:0d:65:76:67:f2:8b:42:4e:f6:54:db:68:
be:fc:fd:99:93:32:75:a4:95:64:ea:16:ec:46:da:1f:55:3d:
b7:d6:72:4a:19:9d:0f:0d:98:10:2a:80:a8:22:12:6f:5e:b2:
8b:c8:11:90:cb:06:83:c0:72:98:d0:1c:4c:fa:11:c2:77:9e:
47:71:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:27:17 2026 by rpki-client