Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/Pq9j65HZtwASXND-Y4QZBgidxKY.roa
File: Pq9j65HZtwASXND-Y4QZBgidxKY.roa (raw, json)
Hash identifier: mvFmqueJ4xpnFlilMiS3/d1BuUHmvvmzr/avqhfi30I=
Subject key identifier: 3E:AF:63:EB:91:D9:B7:00:12:5C:D0:FE:63:84:19:06:08:9D:C4:A6
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 019C5748C0151763F1F76C8F826B2A3D74EA
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/Pq9j65HZtwASXND-Y4QZBgidxKY.roa
Signing time: Fri 13 Feb 2026 13:55:11 +0000
ROA not before: Fri 13 Feb 2026 13:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 46.226.0.0/21 maxlen: 21
89.32.88.0/21 maxlen: 21
91.239.46.0/24 maxlen: 24
91.240.174.0/24 maxlen: 24
95.215.9.0/24 maxlen: 24
185.7.228.0/22 maxlen: 22
185.7.228.0/23 maxlen: 23
185.7.230.0/23 maxlen: 23
185.8.93.0/24 maxlen: 24
185.34.8.0/22 maxlen: 22
185.73.152.0/22 maxlen: 22
185.100.68.0/22 maxlen: 22
185.122.64.0/22 maxlen: 22
185.240.200.0/22 maxlen: 22
188.241.20.0/22 maxlen: 24
192.124.193.0/24 maxlen: 24
192.124.194.0/23 maxlen: 23
192.124.197.0/24 maxlen: 24
192.124.198.0/24 maxlen: 24
192.124.200.0/24 maxlen: 24
192.124.203.0/24 maxlen: 24
192.124.206.0/23 maxlen: 23
193.33.125.0/24 maxlen: 24
195.230.123.0/24 maxlen: 24
2a00:a600::/32 maxlen: 32
2a00:a600:0:2e::/64 maxlen: 64
2a00:a607::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Feb 2026 18:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:48:c0:15:17:63:f1:f7:6c:8f:82:6b:2a:3d:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Feb 13 13:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eaf63eb91d9b700125cd0fe63841906089dc4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:9b:b6:91:e0:6f:cb:49:61:f0:3e:58:cc:
c4:0f:11:d1:31:23:df:da:eb:4f:80:35:e2:f5:8c:
91:b6:f4:5b:a6:70:e2:e8:9a:ab:17:af:b6:ec:ed:
50:b0:7f:03:9d:a1:e2:06:92:46:08:49:15:46:82:
64:e4:29:09:06:e1:51:c2:6e:32:5b:8f:68:c3:88:
80:e6:d8:14:b0:9c:44:5d:bb:7a:f8:fb:36:a4:4f:
2a:8b:e7:7c:06:f8:83:32:c5:f8:55:ad:64:f7:5d:
f7:0b:70:79:ea:7b:d4:21:25:5b:d3:4a:cc:e5:12:
02:6c:92:68:76:41:6e:0d:00:b5:43:c3:37:a8:60:
5c:ea:09:98:59:a8:cc:b7:34:2f:c6:e7:b7:d4:f3:
e2:03:f8:fe:78:03:19:3d:a4:71:49:7e:5a:64:ca:
40:1f:3e:ce:1d:19:f8:a1:ef:54:a3:9f:6a:92:d9:
6c:09:d8:31:16:02:0b:74:2c:b9:8a:fe:c6:84:7d:
8c:46:ef:3f:16:4e:b8:c4:56:e1:72:f4:14:f9:c6:
71:36:ec:29:91:b5:7b:c4:da:76:ad:fd:a2:c9:1f:
90:bd:18:af:17:ec:9d:db:cf:37:48:9f:c5:f3:b0:
1a:a8:89:90:3c:71:cd:4c:24:fd:af:bb:df:d4:5b:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:63:EB:91:D9:B7:00:12:5C:D0:FE:63:84:19:06:08:9D:C4:A6
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/Pq9j65HZtwASXND-Y4QZBgidxKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.0.0/21
89.32.88.0/21
91.239.46.0/24
91.240.174.0/24
95.215.9.0/24
185.7.228.0/22
185.8.93.0/24
185.34.8.0/22
185.73.152.0/22
185.100.68.0/22
185.122.64.0/22
185.240.200.0/22
188.241.20.0/22
192.124.193.0-192.124.195.255
192.124.197.0-192.124.198.255
192.124.200.0/24
192.124.203.0/24
192.124.206.0/23
193.33.125.0/24
195.230.123.0/24
IPv6:
2a00:a600::/32
2a00:a607::/32
Signature Algorithm: sha256WithRSAEncryption
79:a5:af:d1:22:7a:c3:35:45:fb:28:14:07:16:18:c7:bc:f1:
e2:e7:80:39:5c:56:26:1d:84:8c:05:09:aa:cf:f6:f7:89:ad:
dd:0b:f9:da:ee:5e:e8:fa:34:e3:41:20:5d:6d:6a:7f:ed:24:
b4:3d:79:53:f6:26:57:2b:c7:ca:9e:21:56:b5:ae:3e:46:2d:
a5:fb:14:7b:84:15:9e:ef:fc:a3:ae:4c:61:f8:2a:f1:18:6b:
9d:fe:39:85:80:c4:53:4b:dc:92:2e:2e:1d:32:b2:22:cd:76:
66:e8:41:ef:69:7f:0a:9e:af:a0:e0:6b:42:53:41:26:fc:30:
e6:cc:f7:fb:cb:50:8f:47:7e:59:65:78:5d:26:7c:69:bd:6e:
0d:59:ee:7a:19:3c:85:1b:06:d5:6a:a5:a9:6c:47:2a:78:8c:
76:b3:7a:5b:69:fa:13:f4:52:fe:bb:ad:b6:c2:88:39:d0:a0:
89:ad:88:0f:33:20:5b:aa:eb:93:e5:f9:88:7a:97:85:29:86:
7d:b1:95:1e:25:94:1c:1d:0a:89:90:4a:c4:d6:aa:4f:5f:05:
23:59:09:cd:21:93:17:5b:59:12:b0:1c:e1:f0:02:09:26:1c:
8f:63:21:fb:29:c6:3f:0a:ed:7f:00:d8:71:b2:78:65:72:bc:
76:77:6c:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 18 19:11:14 2026 by rpki-client