Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ufay5LNVTR-1Xvc0NDHgdFmlBbM.roa
File: ufay5LNVTR-1Xvc0NDHgdFmlBbM.roa (raw, json)
Hash identifier: YK88JhgL1jfgEgilMOUD5BXf2OP6hidfNljwHoTC7c4=
Subject key identifier: B9:F6:B2:E4:B3:55:4D:1F:B5:5E:F7:34:34:31:E0:74:59:A5:05:B3
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A145BDFB96F4B277B300BB5BE1AC315849
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ufay5LNVTR-1Xvc0NDHgdFmlBbM.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.192.0/24 maxlen: 24
137.31.193.0/24 maxlen: 24
137.31.194.0/24 maxlen: 24
137.31.195.0/24 maxlen: 24
137.31.196.0/24 maxlen: 24
137.31.197.0/24 maxlen: 24
137.31.218.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Oct 2026 21:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fb:96:f4:b2:77:b3:00:bb:5b:e1:ac:31:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9f6b2e4b3554d1fb55ef7343431e07459a505b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:b0:df:de:4c:66:9d:de:b1:a7:ee:54:84:
e5:89:7c:b3:bf:74:d0:d2:8a:04:8e:96:09:27:1f:
60:2a:ed:66:30:24:74:bd:09:64:4c:d1:1f:66:c6:
e5:5a:76:58:f6:0b:93:52:85:92:6a:8b:48:52:28:
b9:4b:7e:85:50:d3:16:62:2c:3b:d8:b7:f7:ff:54:
5b:31:d2:dc:5a:16:1d:ce:67:39:d2:df:e6:a1:1d:
89:eb:f1:f2:8d:86:b1:84:74:00:f8:d5:92:19:7c:
f9:99:41:09:42:59:78:c4:0d:f8:e1:38:f9:0e:27:
df:3c:64:06:a4:87:9e:66:69:89:76:a1:21:82:bf:
60:77:7c:80:90:ef:c0:60:d1:de:8b:6f:66:bb:d3:
dd:66:7c:0f:91:79:c8:1e:76:a8:d5:2b:fd:42:3d:
77:dd:75:c8:aa:c2:12:dd:38:4b:0e:b3:56:d2:f6:
3d:7a:ff:61:84:eb:b3:e6:22:a1:94:f8:e0:4f:29:
28:b4:8d:87:c0:71:ee:2c:8e:18:cf:f7:cc:a2:3d:
af:54:23:f3:e1:0a:60:25:31:e5:7b:16:2f:23:c0:
09:42:cb:50:50:2b:76:bb:59:cd:43:8b:04:9d:69:
d4:89:58:c7:03:77:64:bc:47:03:15:9e:2a:eb:3f:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:B2:E4:B3:55:4D:1F:B5:5E:F7:34:34:31:E0:74:59:A5:05:B3
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ufay5LNVTR-1Xvc0NDHgdFmlBbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.192.0-137.31.197.255
137.31.218.0/24
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:ce:80:d7:b3:eb:b4:4a:ea:ca:f4:5f:37:0a:a4:a1:05:20:
95:9f:b5:d1:0f:cf:1e:2f:11:80:2a:0c:f7:7c:29:67:f2:ae:
aa:95:d4:17:69:81:f8:00:15:bc:42:a4:c6:7a:55:1d:98:e7:
d2:71:f7:6b:4f:a8:33:d8:2a:2d:65:26:8f:0e:fb:6a:d4:01:
ed:64:e3:3b:10:5b:8e:b3:26:37:49:90:c7:ff:0d:2a:0e:eb:
f5:38:44:5a:cd:25:ca:bc:2b:91:2b:c7:6e:22:04:e4:e0:87:
1c:32:e5:51:33:d1:b0:d0:64:c0:1f:8d:70:f6:25:86:2b:ba:
be:1e:92:25:b3:ee:b6:3c:bf:2c:6e:24:83:16:73:6f:d6:6c:
5d:8f:79:ab:f7:a1:53:99:f6:7b:9c:0f:a7:5b:8b:d8:47:43:
c4:b7:0c:58:9b:e7:ff:da:c8:6b:cb:79:11:44:af:03:54:1e:
da:e5:7d:43:1e:4e:eb:12:09:cd:b8:3c:c7:50:f5:f2:dd:fd:
4f:ca:74:2d:a6:49:0b:4c:fd:c1:a3:91:06:54:90:20:49:20:
c7:37:4c:da:a2:13:27:aa:a9:bb:00:4e:92:23:0d:65:cd:80:
c7:ba:47:cd:b7:68:43:a8:d4:f6:0f:10:ba:e5:1a:b7:a7:19:
11:c7:96:65
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAaFFvfuW9LJ3swC7W+GsMVhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYxMDE2MTcyNDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWY2YjJlNGIzNTU0ZDFmYjU1ZWY3MzQzNDMxZTA3NDU5YTUwNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+2w395MZp3esafuVITliXyzv3TQ
0ooEjpYJJx9gKu1mMCR0vQlkTNEfZsblWnZY9guTUoWSaotIUii5S36FUNMWYiw7
2Lf3/1RbMdLcWhYdzmc50t/moR2J6/HyjYaxhHQA+NWSGXz5mUEJQll4xA344Tj5
DiffPGQGpIeeZmmJdqEhgr9gd3yAkO/AYNHei29mu9PdZnwPkXnIHnao1Sv9Qj13
3XXIqsIS3ThLDrNW0vY9ev9hhOuz5iKhlPjgTykotI2HwHHuLI4Yz/fMoj2vVCPz
4QpgJTHlexYvI8AJQstQUCt2u1nNQ4sEnWnUiVjHA3dkvEcDFZ4q6z+TMwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLn2suSzVU0ftV73NDQx4HRZpQWzMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvdWZheTVMTlZUUi0xWHZjME5ESGdkRm1sQmJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBkgQCAAEwgYsDBAFX
OkADBAKJHwQwDAMEBYkfYAMEAIkfYgMEAIkfnzAMAwQAiR+lAwQAiR+mMAwDBAaJ
H8ADBAGJH8QDBACJH9oDBACJH/8wCwMDAZ/+AwQAn/4MMAwDBASf/lADBACf/lIw
DAMEAZ/+ugMEBp/+gAMEAZ/+yDAMAwQAn/7PAwQAn/7QAwQAwgl0MBoEAgACMBQw
EgMHACoD7sA2AQMHAioD7sA2CDANBgkqhkiG9w0BAQsFAAOCAQEAP86A17PrtErq
yvRfNwqkoQUglZ+10Q/PHi8RgCoM93wpZ/KuqpXUF2mB+AAVvEKkxnpVHZjn0nH3
a0+oM9gqLWUmjw77atQB7WTjOxBbjrMmN0mQx/8NKg7r9ThEWs0lyrwrkSvHbiIE
5OCHHDLlUTPRsNBkwB+NcPYlhiu6vh6SJbPutjy/LG4kgxZzb9ZsXY95q/ehU5n2
e5wPp1uL2EdDxLcMWJvn/9rIa8t5EUSvA1Qe2uV9Qx5O6xIJzbg8x1D18t39T8p0
LaZJC0z9waORBlSQIEkgxzdM2qITJ6qpuwBOkiMNZc2Ax7pHzbdoQ6jU9g8QuuUa
t6cZEceWZQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 02:15:52 2026 by rpki-client