Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NJMahbGUEhFzkQg-I11ivfghVPw.roa
File: NJMahbGUEhFzkQg-I11ivfghVPw.roa (raw, json)
Hash identifier: GkAYPn8XcBAe0c7vpUpNVyeXGhaamjCQauE09k1++/I=
Subject key identifier: 34:93:1A:85:B1:94:12:11:73:91:08:3E:23:5D:62:BD:F8:21:54:FC
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D8927F499EF4D09BF0AD5B2AD84B7FB6
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NJMahbGUEhFzkQg-I11ivfghVPw.roa
Signing time: Fri 25 Sep 2026 12:37:54 +0000
ROA not before: Fri 25 Sep 2026 12:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
139.28.50.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
193.187.108.0/24 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 15:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:92:7f:49:9e:f4:d0:9b:f0:ad:5b:2a:d8:4b:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 25 12:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34931a85b19412117391083e235d62bdf82154fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:80:4d:9c:c4:56:ab:23:c1:32:1e:aa:88:
8c:9f:ec:73:92:bf:1e:7b:b1:a7:0f:0d:d5:19:a2:
73:2c:0f:1c:00:d0:42:e4:8f:cb:8b:46:71:1f:74:
9f:de:61:3d:86:af:15:86:f6:ff:6e:c3:05:2f:26:
21:7a:d2:e7:e7:d5:7d:35:06:e3:a5:78:b8:22:b5:
f1:ad:12:7b:6d:bf:d5:9b:9f:bc:fc:3c:15:14:93:
d9:76:7d:03:af:17:26:11:26:f1:f6:11:be:0c:12:
b2:71:71:5b:6b:29:38:4b:b0:f8:b0:34:10:59:0b:
67:b8:81:32:66:5c:77:69:46:d8:e2:dd:7f:02:84:
78:00:4a:97:0b:f0:e7:a8:44:d9:90:99:a1:f1:d9:
90:42:45:e8:0e:24:90:1b:d4:66:bd:79:93:03:9c:
1f:99:6c:3b:1d:d5:89:ee:85:c6:32:f5:ff:c9:99:
d3:03:4d:b7:a9:c1:2b:22:af:92:ba:f8:b2:90:95:
c3:a4:ea:75:68:e1:ba:7b:b9:55:da:20:60:85:9b:
58:6e:0c:34:7c:fc:d9:67:b0:f4:00:1b:d0:ca:6e:
c5:e5:91:a3:a5:bf:a5:18:a2:06:58:5e:7d:17:73:
b1:f5:29:48:07:9f:12:d5:ee:9a:07:1f:a6:6c:20:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:93:1A:85:B1:94:12:11:73:91:08:3E:23:5D:62:BD:F8:21:54:FC
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/NJMahbGUEhFzkQg-I11ivfghVPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
139.28.50.0/24
193.32.207.0/24
193.187.108.0/24
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:13:e7:63:aa:87:b5:fd:2d:70:1d:85:ef:91:08:65:06:30:
c5:ec:64:22:c9:4a:d0:5d:bc:60:39:96:32:70:b8:4f:7b:4b:
a5:38:63:8c:7b:62:c1:88:93:4b:6c:90:e7:06:c8:74:87:7a:
bc:f9:ee:78:7d:51:96:0c:f6:be:4a:2e:86:23:6a:44:3e:28:
e3:c1:56:11:32:ed:77:f6:dd:68:d4:65:3d:52:d3:de:7c:ce:
ef:05:52:7c:82:4a:33:29:ec:b6:0c:ad:ba:70:c6:e5:11:47:
f6:a3:9c:a2:0a:1e:48:ff:ee:f7:46:fc:6c:28:0b:bd:ea:bd:
23:62:17:60:68:7a:7b:dc:7f:f0:bf:d7:73:ae:5d:25:ed:50:
6c:61:b3:ee:d0:d9:18:6e:7a:4a:9d:e3:c9:92:68:a4:26:3b:
1b:83:38:83:67:35:1e:65:02:7b:91:5d:64:a5:c5:4b:39:2c:
f5:01:b4:99:5c:39:4c:7b:57:19:c4:cb:e3:05:9f:14:d7:40:
8b:87:05:77:95:51:4c:3f:72:32:c2:c3:1e:eb:d1:12:03:9b:
c9:5e:98:96:ea:5b:e5:ea:32:2d:0d:05:f3:3a:3c:46:28:b4:
2f:27:de:a5:3e:a8:d8:09:da:8b:cb:3d:52:2a:d6:f5:ee:5a:
af:32:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:47:36 2026 by rpki-client