Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCA9ztKjqrT__KNH6kyyHzKu-ho.roa
File: PCA9ztKjqrT__KNH6kyyHzKu-ho.roa (raw, json)
Hash identifier: /JVnmYlOduMt8PFVAG5/zFQ+pHXVRn79h11+iY/O/cM=
Subject key identifier: 3C:20:3D:CE:D2:A3:AA:B4:FF:FC:A3:47:EA:4C:B2:1F:32:AE:FA:1A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1393585F2751D72A6C87A678B59E83FF6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCA9ztKjqrT__KNH6kyyHzKu-ho.roa
Signing time: Wed 14 Oct 2026 06:59:31 +0000
ROA not before: Wed 14 Oct 2026 06:59:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 14 Oct 2026 18:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:35:85:f2:75:1d:72:a6:c8:7a:67:8b:59:e8:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 14 06:59:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c203dced2a3aab4fffca347ea4cb21f32aefa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:4b:ef:83:ff:5a:26:40:a7:39:cc:9f:46:
a4:e1:19:dd:b7:49:5a:50:54:b1:aa:6c:40:07:69:
3e:40:c5:09:67:35:ea:00:4e:bc:5e:97:a1:5b:d8:
25:7a:e2:7e:3d:cc:5d:45:96:18:b4:d9:0d:af:fa:
7a:e2:37:11:b9:c7:2f:23:83:0f:32:d1:7e:d5:8b:
2c:ab:9b:d3:c5:ce:74:88:41:54:a3:1a:9a:10:7b:
7f:d8:40:28:2b:08:25:84:50:70:4b:fe:2d:4c:fd:
e7:e8:ea:f4:c4:33:e4:13:90:58:19:1c:48:62:e4:
11:2e:3b:ee:4b:7c:ec:75:dd:10:06:21:bd:ba:b8:
3e:70:18:1f:e6:c0:49:33:f0:35:ca:6f:be:a6:57:
98:9a:62:0b:7e:72:89:3e:7b:07:12:01:db:ea:77:
32:13:cb:35:d2:36:95:66:f1:eb:a4:46:c7:16:85:
59:ef:60:61:2c:4a:02:0f:99:6e:44:3b:1b:cb:9c:
eb:b0:34:19:47:6f:f4:16:85:4d:d9:b5:ae:d1:10:
bb:fd:7b:cc:ef:e0:e8:70:98:24:eb:86:64:f6:d0:
da:1b:b2:02:d0:d0:c2:e0:96:de:2c:32:0d:d9:99:
2e:ea:ad:80:21:a5:d7:ce:ec:8d:03:ba:f2:05:df:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:3D:CE:D2:A3:AA:B4:FF:FC:A3:47:EA:4C:B2:1F:32:AE:FA:1A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCA9ztKjqrT__KNH6kyyHzKu-ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3c81::/32
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a13:c340::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:fd:27:ae:a3:74:16:11:8c:e3:22:f7:32:09:53:09:44:74:
56:b0:5a:91:c4:6e:b5:19:0b:f1:98:c6:f6:51:62:d2:16:7b:
34:e1:29:0c:0d:fe:69:a8:a0:2c:dc:9f:0d:0b:77:e1:98:d4:
6a:26:70:9d:cb:51:1b:ca:ce:e0:f1:70:df:27:0e:b0:fd:a6:
cf:b7:9b:9f:59:d8:e4:df:67:63:74:0c:81:a5:9b:80:f4:68:
fd:9b:24:8a:93:93:e3:43:96:88:64:8d:68:53:06:70:ff:a2:
2a:f9:94:e5:c7:92:c1:49:5b:3b:55:c5:d9:48:4c:33:91:39:
c7:48:03:c8:c7:60:16:b1:1d:38:c6:7b:bf:7c:2d:ef:4a:c0:
57:52:5b:04:2a:57:19:20:04:34:df:d1:4c:8c:b5:df:6e:03:
00:d1:be:a0:fe:2b:d2:bf:0c:a7:94:f0:dd:1a:be:10:08:eb:
0f:e9:e0:f0:4f:10:9f:af:37:1f:9a:ee:d1:59:62:f4:2e:3a:
6a:31:c7:20:0a:8d:40:48:11:82:73:10:d9:65:74:b9:56:21:
c6:c6:d1:d1:03:94:47:f3:42:ac:4a:ef:5c:c4:c9:5f:3e:e7:
d5:9e:ef:ba:5e:b2:1d:b1:af:dd:ca:78:ac:84:64:ec:47:18:
0d:2c:65:98
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAaE5NYXydR1ypsh6Z4tZ6D/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYxMDE0MDY1OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzIwM2RjZWQyYTNhYWI0ZmZmY2EzNDdlYTRjYjIxZjMyYWVmYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFlL74P/WiZApznMn0ak4Rndt0la
UFSxqmxAB2k+QMUJZzXqAE68XpehW9gleuJ+PcxdRZYYtNkNr/p64jcRuccvI4MP
MtF+1Yssq5vTxc50iEFUoxqaEHt/2EAoKwglhFBwS/4tTP3n6Or0xDPkE5BYGRxI
YuQRLjvuS3zsdd0QBiG9urg+cBgf5sBJM/A1ym++pleYmmILfnKJPnsHEgHb6ncy
E8s10jaVZvHrpEbHFoVZ72BhLEoCD5luRDsby5zrsDQZR2/0FoVN2bWu0RC7/XvM
7+DocJgk64Zk9tDaG7IC0NDC4JbeLDIN2Zku6q2AIaXXzuyNA7ryBd93gQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFDwgPc7So6q0//yjR+pMsh8yrvoaMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvUENBOXp0S2pxclRfX0tOSDZreXlIekt1LWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKgZfwAMF
AyoLrAADBQMqEAtAAwUAKhA8gQMFAyoQP4ADBQMqEHfAAwUDKhO0wAMFAyoTucAD
BQMqE8NAAwUDKhRowDANBgkqhkiG9w0BAQsFAAOCAQEAFP0nrqN0FhGM4yL3MglT
CUR0VrBakcRutRkL8ZjG9lFi0hZ7NOEpDA3+aaigLNyfDQt34ZjUaiZwnctRG8rO
4PFw3ycOsP2mz7ebn1nY5N9nY3QMgaWbgPRo/ZskipOT40OWiGSNaFMGcP+iKvmU
5ceSwUlbO1XF2UhMM5E5x0gDyMdgFrEdOMZ7v3wt70rAV1JbBCpXGSAENN/RTIy1
324DANG+oP4r0r8Mp5Tw3Rq+EAjrD+ng8E8Qn683H5ru0Vli9C46ajHHIAqNQEgR
gnMQ2WV0uVYhxsbR0QOUR/NCrErvXMTJXz7n1Z7vul6yHbGv3cp4rIRk7EcYDSxl
mA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:18 2026 by rpki-client