Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1mT7gtWrBnHp6BgmY-vuUYsAbpk.roa
File: 1mT7gtWrBnHp6BgmY-vuUYsAbpk.roa (raw, json)
Hash identifier: /o52vCC5uMHohb5WVzatUS8J5UV2zNcnsElli+mr6XY=
Subject key identifier: D6:64:FB:82:D5:AB:06:71:E9:E8:18:26:63:EB:EE:51:8B:00:6E:99
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A16B3EE99526BF0BDCD2086C6DFF52E9B8
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1mT7gtWrBnHp6BgmY-vuUYsAbpk.roa
Signing time: Sat 24 Oct 2026 00:10:47 +0000
ROA not before: Sat 24 Oct 2026 00:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.92.142.0/24 maxlen: 24
85.92.143.0/24 maxlen: 24
89.30.136.0/24 maxlen: 24
89.30.137.0/24 maxlen: 24
89.30.138.0/24 maxlen: 24
89.30.139.0/24 maxlen: 24
89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.142.0/24 maxlen: 24
89.30.143.0/24 maxlen: 24
89.30.160.0/24 maxlen: 24
89.30.161.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.164.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.166.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.178.0/23 maxlen: 24
89.30.181.0/24 maxlen: 24
89.30.182.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.199.0/24 maxlen: 24
89.30.200.0/24 maxlen: 24
89.30.201.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.206.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
89.30.246.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.189.17.0/24 maxlen: 24
213.189.22.0/24 maxlen: 24
213.189.24.0/24 maxlen: 24
213.189.25.0/24 maxlen: 24
213.189.27.0/24 maxlen: 24
213.214.102.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.214.106.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
213.214.110.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
213.247.50.0/24 maxlen: 24
213.247.51.0/24 maxlen: 24
213.247.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 04:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:3e:e9:95:26:bf:0b:dc:d2:08:6c:6d:ff:52:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 24 00:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d664fb82d5ab0671e9e8182663ebee518b006e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:7a:47:36:9b:57:56:24:2d:61:cb:e4:a9:
48:ae:74:f5:c0:d4:f0:78:19:ef:47:38:29:d3:43:
b9:06:33:c6:ad:17:51:e2:9d:cb:78:c0:11:f8:70:
bf:de:34:1b:6a:db:71:0a:88:29:5d:e8:23:b2:e8:
21:f7:c4:2c:51:2b:62:fa:40:7b:e8:9c:4e:d5:fe:
6a:f3:d6:20:5e:db:94:db:2c:6d:ca:af:fe:f2:e0:
c1:f2:0b:de:98:d7:05:f0:03:5d:1b:53:c3:29:f6:
18:d8:a2:ae:88:ca:e8:e0:4a:11:09:52:d0:92:e0:
d0:ed:dc:22:7a:2e:e7:d4:9e:ba:f9:5d:df:e9:8a:
52:50:80:37:0c:a1:ac:9c:97:ee:62:d7:20:9e:75:
5c:fd:19:7b:aa:73:81:f3:56:d2:51:3f:df:f7:eb:
78:29:0a:cb:da:17:0f:f2:89:be:7f:1a:ce:c1:99:
55:f9:25:c8:41:07:68:1d:df:88:22:89:3d:74:0b:
eb:04:97:8a:f3:3f:fd:21:68:75:3a:09:e5:3f:9f:
3d:4e:1e:f8:c0:d3:69:5b:a0:5e:c4:98:5c:4b:cd:
30:e1:22:4f:d7:99:ee:6a:9b:b5:a7:ce:5e:ea:4a:
de:78:d3:6f:53:c7:ea:0f:5d:7c:c5:81:fe:09:df:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:64:FB:82:D5:AB:06:71:E9:E8:18:26:63:EB:EE:51:8B:00:6E:99
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1mT7gtWrBnHp6BgmY-vuUYsAbpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.142.0/23
89.30.136.0/21
89.30.160.0-89.30.166.255
89.30.174.0/23
89.30.178.0/23
89.30.181.0-89.30.183.255
89.30.186.0-89.30.188.255
89.30.190.0/23
89.30.199.0-89.30.201.255
89.30.204.0-89.30.206.255
89.30.242.0-89.30.244.255
89.30.246.0/23
213.189.16.0/23
213.189.22.0/24
213.189.24.0/23
213.189.27.0/24
213.214.102.0/24
213.214.105.0-213.214.106.255
213.214.108.0/24
213.214.110.0/24
213.247.45.0/24
213.247.50.0/23
213.247.53.0/24
Signature Algorithm: sha256WithRSAEncryption
35:79:82:e2:b5:75:0a:f2:9c:10:13:b1:e5:68:e3:fd:a6:cb:
2a:84:89:0c:f8:97:f6:22:f9:bb:c0:be:90:61:c8:f3:cc:17:
ac:b9:af:03:5e:18:4a:94:ea:9b:64:5a:ce:32:4f:64:bc:7e:
08:54:b6:19:1d:0d:cc:01:01:d2:b1:1a:27:24:18:69:27:31:
d2:03:35:64:c7:34:10:2a:0f:f1:40:60:39:61:c5:df:52:e0:
11:65:16:71:20:ab:f7:77:1a:51:34:83:1e:ba:0e:10:b3:e5:
9c:7f:ca:60:29:f4:ee:51:3d:02:c4:7f:24:56:62:ba:11:27:
33:39:f8:5a:a1:12:73:c7:32:20:f5:13:c4:5b:f4:fb:8e:1f:
49:07:14:a3:94:d4:f8:14:f4:90:68:19:11:b7:78:28:40:d4:
cc:d3:ec:79:00:3a:ea:93:84:a8:e4:1a:b3:f4:f1:8b:c1:a2:
01:7b:86:cd:37:96:2f:e9:39:32:e3:c4:36:da:fb:3b:0b:bc:
d5:60:ae:1e:3c:d6:cf:6b:4c:3a:3c:1a:18:0d:16:3f:67:0c:
9d:1b:e8:16:bf:8c:c0:2a:aa:74:05:92:de:d6:8b:ed:7b:88:
10:2d:9e:27:c7:13:c3:84:2c:bc:06:23:77:97:ea:93:a4:47:
20:b6:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:57 2026 by rpki-client