Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/aRQDlWgJQlJfOQoVQ2zpombQ8Z4.roa
File: aRQDlWgJQlJfOQoVQ2zpombQ8Z4.roa (raw, json)
Hash identifier: SFrSJL+D6n5oXo2HYdbI2hQctj3S5u1sSk+PG+na6F0=
Subject key identifier: 69:14:03:95:68:09:42:52:5F:39:0A:15:43:6C:E9:A2:66:D0:F1:9E
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019B79111142922A5F96BD7390DCF2D99933
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/aRQDlWgJQlJfOQoVQ2zpombQ8Z4.roa
Signing time: Thu 01 Jan 2026 10:18:40 +0000
ROA not before: Thu 01 Jan 2026 10:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39728
IP address blocks: 45.152.24.0/22 maxlen: 24
45.152.27.0/24 maxlen: 24
91.217.4.0/23 maxlen: 24
176.113.224.0/19 maxlen: 19
178.214.160.0/19 maxlen: 19
178.216.232.0/21 maxlen: 21
185.149.196.0/22 maxlen: 22
185.178.245.0/24 maxlen: 24
194.31.152.0/22 maxlen: 24
195.8.56.0/23 maxlen: 24
2a07:6900::/48 maxlen: 48
2a07:6900:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Jan 2026 12:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:11:42:92:2a:5f:96:bd:73:90:dc:f2:d9:99:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jan 1 10:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69140395680942525f390a15436ce9a266d0f19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:70:cd:be:4f:da:aa:31:c0:a5:54:89:4b:
e2:02:85:89:3f:7a:95:06:6c:81:8e:ca:13:74:ed:
09:76:66:c2:70:8c:c1:7b:87:28:a8:82:0d:92:f9:
0e:a5:45:d6:0a:57:fd:47:81:f8:61:80:c1:f5:c7:
b4:9d:98:9c:76:19:36:4d:fd:ac:0d:c7:53:63:d5:
c9:88:e6:96:1a:4a:6f:d7:20:29:68:e7:9d:2f:2e:
1b:31:5f:79:fe:24:3d:2d:44:6f:cd:aa:b2:8c:ba:
ea:f7:be:9f:51:7e:80:b0:4d:1b:d3:72:ac:78:0d:
b1:06:d5:93:4d:97:53:23:36:ad:4d:e9:72:ae:f4:
97:75:d4:a1:d2:2a:64:80:81:e6:e8:ff:45:e6:73:
f8:fe:96:ad:f4:e2:d6:03:ae:7b:37:6f:31:e2:a6:
47:ce:78:74:aa:fa:cd:80:f2:2d:25:b5:de:7f:cf:
c5:75:88:ba:bc:c2:a3:27:1e:fc:0f:f6:89:8f:6b:
01:c6:43:1f:4d:df:ae:95:ec:e8:b2:5c:ad:c4:71:
08:7b:8a:33:4a:88:aa:8a:b9:82:a7:64:8d:90:db:
1f:16:65:9b:8a:d5:0d:52:11:46:dd:6e:ed:e5:d8:
c1:73:09:c7:c6:10:90:7c:aa:96:5d:8a:9a:01:f8:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:03:95:68:09:42:52:5F:39:0A:15:43:6C:E9:A2:66:D0:F1:9E
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/aRQDlWgJQlJfOQoVQ2zpombQ8Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
91.217.4.0/23
176.113.224.0/19
178.214.160.0/19
178.216.232.0/21
185.149.196.0/22
185.178.245.0/24
194.31.152.0/22
195.8.56.0/23
IPv6:
2a07:6900::/47
Signature Algorithm: sha256WithRSAEncryption
1e:df:ac:67:6f:04:c7:94:93:25:0d:aa:e8:e2:0f:96:ec:bb:
3e:11:25:e4:df:3b:0d:40:07:8b:cf:e4:f6:ca:81:0d:34:39:
89:f6:96:55:af:aa:f3:be:08:e5:7b:17:33:31:b3:6a:d2:d7:
23:8d:fa:4d:17:f4:b3:61:fe:0c:d9:40:10:8e:ea:bd:db:eb:
00:a5:22:cd:03:c8:aa:5f:1b:b0:ea:50:fb:98:e0:de:d8:28:
6a:fc:5a:16:c3:2a:41:b6:62:25:32:02:12:ac:5b:95:ee:06:
64:26:d4:1d:12:bb:a0:39:6c:7d:eb:6f:56:42:e1:69:81:73:
91:ed:54:99:9b:4f:5b:98:1d:c5:fb:d6:b4:c3:b5:60:87:a8:
80:21:4f:dc:1b:d6:0d:74:03:54:56:59:c4:9f:f0:3c:b3:34:
23:88:39:af:24:a8:87:45:2d:62:d3:64:86:4c:f6:6f:cb:53:
95:44:e3:3c:15:fa:2d:53:31:69:8c:64:48:b6:c3:38:ea:45:
96:25:3b:56:48:f2:26:d5:6c:93:08:a8:b4:a3:68:a0:80:aa:
27:df:14:3b:0a:79:52:cc:8a:bf:f8:05:8d:2f:ad:ed:87:13:
00:4a:32:d7:ba:94:d3:10:48:7b:1d:29:36:c7:d6:62:97:4f:
b3:b7:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 03:22:10 2026 by rpki-client