Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NYiwFhsYxowXHH2N7LFXwJ1UAIU.roa
File: NYiwFhsYxowXHH2N7LFXwJ1UAIU.roa (raw, json)
Hash identifier: THkiNXdGNT+RRYEKdOJkNA1mPFa9206cQXt1UZ7LRHk=
Subject key identifier: 35:88:B0:16:1B:18:C6:8C:17:1C:7D:8D:EC:B1:57:C0:9D:54:00:85
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A01F129AA3D6F3D486E5D03B960B228E6A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NYiwFhsYxowXHH2N7LFXwJ1UAIU.roa
Signing time: Thu 20 Aug 2026 12:08:28 +0000
ROA not before: Thu 20 Aug 2026 12:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.49.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Aug 2026 20:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:12:9a:a3:d6:f3:d4:86:e5:d0:3b:96:0b:22:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 20 12:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3588b0161b18c68c171c7d8decb157c09d540085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:31:c2:0e:fb:db:a1:e8:03:70:46:0e:dc:
d2:f3:05:e7:7b:c9:a5:43:b9:91:1e:75:1f:37:9d:
59:dc:6b:c1:cd:53:56:43:f8:ed:40:38:5b:f1:bd:
86:df:70:4c:a4:a7:22:fe:57:01:66:c2:a6:e2:e6:
90:a9:64:4c:73:0c:f1:a0:25:c8:3c:14:f4:1b:de:
65:e5:71:5d:ab:f8:f5:dd:b4:86:b4:63:e5:78:3c:
2c:c0:1d:2b:f7:52:c4:7e:64:50:39:fa:ce:fb:72:
62:e8:97:ec:7c:a9:0e:b9:9b:df:6d:12:30:88:f3:
f8:18:01:0c:f8:46:5e:66:77:45:22:1d:b9:d7:5b:
f4:7e:40:aa:32:80:bb:f7:e8:46:28:3c:b8:e1:5d:
76:f9:bd:47:9d:1e:38:1c:9e:52:8e:08:9a:33:93:
de:f3:7c:93:f1:a3:3e:65:94:ae:68:ea:f1:fe:59:
ec:94:58:37:a0:18:81:6c:83:c7:12:ea:9a:2b:0c:
79:f4:5c:ac:49:bb:07:ca:5f:64:6b:fd:ec:08:c4:
5a:24:d3:ec:2c:61:9c:55:dc:65:fb:d4:cf:55:1a:
66:13:7c:cc:0d:74:43:9d:9b:00:ca:e2:52:e0:d4:
56:88:a0:c7:8b:2c:48:12:07:b1:3c:7a:e2:74:48:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:B0:16:1B:18:C6:8C:17:1C:7D:8D:EC:B1:57:C0:9D:54:00:85
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NYiwFhsYxowXHH2N7LFXwJ1UAIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
163.5.130.0/24
163.5.161.0/24
163.5.206.0/24
163.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ef:17:af:ff:19:ca:cd:f3:4d:70:80:9d:86:34:fe:15:c9:
1f:ac:d1:89:c3:60:7f:fd:61:79:80:90:7d:4d:8a:d0:01:61:
70:45:17:62:48:27:6a:89:bb:25:70:d4:e5:83:dc:44:e8:33:
6d:f2:1d:85:3e:14:d7:81:68:71:58:a7:35:58:7d:ae:aa:3c:
4e:bb:f8:26:ce:f2:61:26:b4:58:df:4b:56:c1:45:6d:d0:f6:
ce:84:d4:9f:95:4d:d2:de:85:0c:26:2c:fc:ed:fe:63:de:e5:
b9:9f:3a:dd:fa:88:d8:d8:97:4c:e6:48:4a:11:64:b8:cd:ee:
21:69:f0:e7:cb:64:95:7f:57:83:45:b1:14:2c:83:a3:dd:58:
3f:5e:2c:c0:d2:56:4f:92:f7:0c:67:1b:4b:c3:35:18:22:77:
08:6e:05:74:23:25:a0:73:9a:cc:df:e8:cf:58:f8:c7:14:23:
cd:f8:bd:42:4f:42:7b:80:78:a3:ac:de:24:7f:9f:db:80:d1:
2d:56:a3:82:49:88:20:fc:9e:a2:f9:3c:ac:3a:6d:a7:29:3b:
d9:88:1c:34:75:dd:ee:c0:be:13:9c:ce:22:84:d9:80:d5:5a:
52:18:bf:79:5f:dd:92:40:4a:87:2e:a6:af:66:a9:71:a3:f5:
32:a9:d8:9e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaAfEpqj1vPUhuXQO5YLIo5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODIwMTIwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTg4YjAxNjFiMThjNjhjMTcxYzdkOGRlY2IxNTdjMDlkNTQwMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCoxwg7726HoA3BGDtzS8wXne8ml
Q7mRHnUfN51Z3GvBzVNWQ/jtQDhb8b2G33BMpKci/lcBZsKm4uaQqWRMcwzxoCXI
PBT0G95l5XFdq/j13bSGtGPleDwswB0r91LEfmRQOfrO+3Ji6JfsfKkOuZvfbRIw
iPP4GAEM+EZeZndFIh2511v0fkCqMoC79+hGKDy44V12+b1HnR44HJ5SjgiaM5Pe
83yT8aM+ZZSuaOrx/lnslFg3oBiBbIPHEuqaKwx59FysSbsHyl9ka/3sCMRaJNPs
LGGcVdxl+9TPVRpmE3zMDXRDnZsAyuJS4NRWiKDHiyxIEgexPHridEhGBwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDWIsBYbGMaMFxx9jeyxV8CdVACFMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTllpd0Zoc1l4b3dYSEgyTjdMRlh3SjFVQUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowUxAwQA
owWCAwQAowWhAwQAowXOAwQAowXiMA0GCSqGSIb3DQEBCwUAA4IBAQA17xev/xnK
zfNNcICdhjT+FckfrNGJw2B//WF5gJB9TYrQAWFwRRdiSCdqibslcNTlg9xE6DNt
8h2FPhTXgWhxWKc1WH2uqjxOu/gmzvJhJrRY30tWwUVt0PbOhNSflU3S3oUMJiz8
7f5j3uW5nzrd+ojY2JdM5khKEWS4ze4hafDny2SVf1eDRbEULIOj3Vg/XizA0lZP
kvcMZxtLwzUYIncIbgV0IyWgc5rM3+jPWPjHFCPN+L1CT0J7gHijrN4kf5/bgNEt
VqOCSYgg/J6i+TysOm2nKTvZiBw0dd3uwL4TnM4ihNmA1VpSGL95X92SQEqHLqav
Zqlxo/Uyqdie
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:44 2026 by rpki-client