Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N7Vd5YFv4_6waUiveZQIKeicsTI.roa
File: N7Vd5YFv4_6waUiveZQIKeicsTI.roa (raw, json)
Hash identifier: vNVM3px40rDKUr3Alw9qhJQJfRpFyudwE4pZmW3Zap4=
Subject key identifier: 37:B5:5D:E5:81:6F:E3:FE:B0:69:48:AF:79:94:08:29:E8:9C:B1:32
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1246B9F26FCF665C6EDE541CED70CDE1E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N7Vd5YFv4_6waUiveZQIKeicsTI.roa
Signing time: Sat 10 Oct 2026 06:06:35 +0000
ROA not before: Sat 10 Oct 2026 06:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 10 Oct 2026 19:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:6b:9f:26:fc:f6:65:c6:ed:e5:41:ce:d7:0c:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 10 06:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37b55de5816fe3feb06948af79940829e89cb132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:16:d4:a8:91:80:a1:c6:8b:c3:ea:88:39:
17:7d:9f:2c:e1:77:06:d1:ef:d2:d1:6f:66:e2:72:
17:ae:86:41:30:8e:b2:09:dc:4a:f2:1c:b6:0f:67:
08:f0:ae:b1:2c:08:ab:f7:8b:76:f2:71:d2:04:96:
d9:e5:4e:9e:01:d9:14:26:dd:d6:57:5a:58:d1:64:
9f:96:43:bd:20:49:84:8f:85:de:ae:af:df:2f:4c:
d7:04:9d:e6:f6:33:a7:4a:e6:46:78:bf:4f:32:1e:
f6:e7:ac:d4:1f:f4:6c:11:87:05:04:0a:e5:0a:08:
0d:f3:ac:52:34:74:b0:68:74:97:b6:c9:b6:c7:6a:
0f:e0:cd:f0:57:af:3b:e3:a8:78:9e:c6:ae:05:aa:
cb:44:e7:7f:5b:59:ee:81:0e:de:df:12:0f:30:33:
ea:58:56:d9:0d:0f:f9:08:10:32:a1:bd:84:1f:9d:
c7:b1:ad:8e:2f:1b:0f:20:e6:f5:d7:bd:c4:e8:4d:
d3:21:b2:7f:e7:ea:55:57:c2:1e:3b:64:3d:55:73:
29:31:85:72:cf:66:f5:79:2f:36:4a:75:e2:7d:e7:
80:e9:ac:cc:17:7c:06:a6:9e:08:55:1e:f8:55:35:
aa:48:eb:ee:38:f1:89:1f:46:50:bf:17:9a:61:b8:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:5D:E5:81:6F:E3:FE:B0:69:48:AF:79:94:08:29:E8:9C:B1:32
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/N7Vd5YFv4_6waUiveZQIKeicsTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3c81::/32
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:af:57:a3:04:74:2d:7b:dc:e9:e9:81:c6:7a:90:0b:0a:6d:
c5:48:44:ef:8a:b7:9f:07:76:65:48:bb:4f:97:d2:27:64:98:
9e:8a:54:1f:5f:e7:c7:eb:3e:b7:5b:b6:c2:e8:73:35:a4:7f:
3e:91:27:09:12:68:1e:83:38:3a:7e:cf:51:d1:8b:9b:ee:62:
4c:54:be:1a:48:e9:6f:56:41:5f:1f:d7:06:e9:c3:2c:90:4e:
83:05:b9:5d:d2:54:15:cb:e7:c6:1d:fe:be:fa:32:d9:45:6a:
ab:b2:31:ed:2c:6d:c3:b3:68:d1:5e:37:a9:d7:a3:dd:55:c2:
90:29:31:c4:e3:e1:4f:6f:31:67:c1:d8:87:f6:81:e6:51:a4:
e5:99:de:c1:7e:40:26:14:4a:02:60:f1:9e:7d:e6:b9:97:16:
d6:b9:f1:97:08:a0:69:13:c2:73:56:5c:29:63:a0:5b:b1:47:
ca:10:15:6f:28:91:89:15:5b:57:4f:1e:15:76:9e:e7:1e:9c:
92:5e:46:7f:dd:d6:2c:b0:f7:38:9f:d7:46:74:3c:5e:d7:26:
36:07:87:3c:40:ea:f5:d5:47:d5:ad:c9:6e:b5:aa:3b:a6:f6:
4b:c7:d4:5d:9e:29:c7:61:77:b7:e7:c0:eb:5a:7d:6d:07:e8:
70:00:36:a2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAaEka58m/PZlxu3lQc7XDN4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYxMDEwMDYwNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2I1NWRlNTgxNmZlM2ZlYjA2OTQ4YWY3OTk0MDgyOWU4OWNiMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u4W1KiRgKHGi8PqiDkXfZ8s4XcG
0e/S0W9m4nIXroZBMI6yCdxK8hy2D2cI8K6xLAir94t28nHSBJbZ5U6eAdkUJt3W
V1pY0WSflkO9IEmEj4Xerq/fL0zXBJ3m9jOnSuZGeL9PMh7256zUH/RsEYcFBArl
CggN86xSNHSwaHSXtsm2x2oP4M3wV68746h4nsauBarLROd/W1nugQ7e3xIPMDPq
WFbZDQ/5CBAyob2EH53Hsa2OLxsPIOb1173E6E3TIbJ/5+pVV8IeO2Q9VXMpMYVy
z2b1eS82SnXifeeA6azMF3wGpp4IVR74VTWqSOvuOPGJH0ZQvxeaYbi2YQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFDe1XeWBb+P+sGlIr3mUCCnonLEyMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvTjdWZDVZRnY0XzZ3YVVpdmVaUUlLZWljc1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKgWaQAMF
AyoGX8ADBQMqC6wAAwUDKhALQAMFACoQPIEDBQMqED+AAwUDKhB3wAMFAyoTtMAD
BQMqE7nAAwUDKhRowDANBgkqhkiG9w0BAQsFAAOCAQEAJK9XowR0LXvc6emBxnqQ
CwptxUhE74q3nwd2ZUi7T5fSJ2SYnopUH1/nx+s+t1u2wuhzNaR/PpEnCRJoHoM4
On7PUdGLm+5iTFS+Gkjpb1ZBXx/XBunDLJBOgwW5XdJUFcvnxh3+vvoy2UVqq7Ix
7Sxtw7No0V43qdej3VXCkCkxxOPhT28xZ8HYh/aB5lGk5ZnewX5AJhRKAmDxnn3m
uZcW1rnxlwigaRPCc1ZcKWOgW7FHyhAVbyiRiRVbV08eFXae5x6ckl5Gf93WLLD3
OJ/XRnQ8XtcmNgeHPEDq9dVH1a3JbrWqO6b2S8fUXZ4px2F3t+fA61p9bQfocAA2
og==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:42 2026 by rpki-client