Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mKlnK9aj4Rb7d5PptyC1GV2SPlM.roa
File: mKlnK9aj4Rb7d5PptyC1GV2SPlM.roa (raw, json)
Hash identifier: /FZ5lQOH10qhTCCCpX93kAaJb7ixd73wlhRzr0ik55M=
Subject key identifier: 98:A9:67:2B:D6:A3:E1:16:FB:77:93:E9:B7:20:B5:19:5D:92:3E:53
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A13EB6092314DA7A0773FF513C3C03E63F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mKlnK9aj4Rb7d5PptyC1GV2SPlM.roa
Signing time: Thu 15 Oct 2026 08:37:59 +0000
ROA not before: Thu 15 Oct 2026 08:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.87.0/24 maxlen: 24
195.81.76.0/24 maxlen: 24
195.81.92.0/24 maxlen: 24
195.81.101.0/24 maxlen: 24
195.81.109.0/24 maxlen: 24
195.81.110.0/24 maxlen: 24
195.81.113.0/24 maxlen: 24
195.81.114.0/24 maxlen: 24
195.81.117.0/24 maxlen: 24
195.81.126.0/24 maxlen: 24
195.81.132.0/24 maxlen: 24
195.81.136.0/24 maxlen: 24
195.81.138.0/24 maxlen: 24
195.81.148.0/24 maxlen: 24
195.81.150.0/24 maxlen: 24
195.81.154.0/24 maxlen: 24
195.81.171.0/24 maxlen: 24
195.81.181.0/24 maxlen: 24
195.81.191.0/24 maxlen: 24
195.81.211.0/24 maxlen: 24
195.81.231.0/24 maxlen: 24
195.81.243.0/24 maxlen: 24
195.81.249.0/24 maxlen: 24
195.81.255.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.105.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:b6:09:23:14:da:7a:07:73:ff:51:3c:3c:03:e6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 08:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a9672bd6a3e116fb7793e9b720b5195d923e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:45:8e:4b:1a:05:06:4a:65:d0:c8:04:c6:
8e:49:41:32:04:06:59:54:4b:ff:76:c9:b0:3e:40:
9d:44:96:16:2f:93:44:27:34:b8:d7:f0:dc:5b:6e:
51:06:bb:b6:fd:12:6c:2f:60:f8:1c:31:2b:05:1c:
cf:48:5c:2e:0e:14:ff:71:5a:fa:7b:53:2b:88:e5:
7f:95:bd:84:95:c9:3b:73:ef:1e:00:5f:8e:cf:76:
4f:0e:e3:91:2a:32:90:f8:87:58:ab:e2:cc:b1:d6:
bf:7f:4c:00:bb:89:41:43:32:de:c9:6f:52:80:2d:
c7:19:b4:d6:1b:73:cc:a1:97:21:c0:07:26:3f:ee:
29:52:07:27:8f:5f:20:af:8b:97:80:8d:73:44:69:
56:7f:92:3a:11:17:b2:7d:96:46:10:f9:02:64:78:
6b:30:04:7d:7a:f2:a4:83:f8:b8:e4:a8:9a:4d:b5:
53:de:62:8f:31:ba:6c:f3:0d:92:5d:d0:f2:c7:96:
52:00:d8:61:58:a9:b7:6d:83:46:60:47:8b:f8:52:
3e:1a:af:7b:e7:94:e2:b2:df:41:7e:bb:6e:1e:e0:
95:20:b1:ee:7e:2e:26:47:a8:ae:ca:5d:78:fc:f0:
59:30:48:ba:cc:35:25:e5:2e:c4:08:c0:96:01:41:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:67:2B:D6:A3:E1:16:FB:77:93:E9:B7:20:B5:19:5D:92:3E:53
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mKlnK9aj4Rb7d5PptyC1GV2SPlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
194.77.192.0/24
194.122.87.0/24
195.81.76.0/24
195.81.92.0/24
195.81.101.0/24
195.81.109.0-195.81.110.255
195.81.113.0-195.81.114.255
195.81.117.0/24
195.81.126.0/24
195.81.132.0/24
195.81.136.0/24
195.81.138.0/24
195.81.148.0/24
195.81.150.0/24
195.81.154.0/24
195.81.171.0/24
195.81.181.0/24
195.81.191.0/24
195.81.211.0/24
195.81.231.0/24
195.81.243.0/24
195.81.249.0/24
195.81.255.0/24
195.86.208.0/24
195.86.223.0/24
212.189.57.0/24
212.189.105.0/24
212.222.168.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bb:a9:08:22:9d:1b:81:f8:17:b8:f1:09:69:0f:25:f6:60:
5c:0c:67:bd:66:4e:e4:68:7d:54:e4:99:42:2e:97:e7:8e:40:
26:74:1f:7e:fa:77:9f:a3:2a:76:39:31:c3:fb:e2:d0:18:56:
a4:c8:35:01:6e:2e:0b:d2:a6:ae:ec:67:3d:79:28:8d:b2:40:
eb:5f:1c:8d:27:51:4f:dd:d8:b6:d6:80:5c:d8:14:b1:eb:54:
0d:81:e9:6c:f3:1c:7b:e9:d9:cd:02:86:bd:fb:0a:c6:82:0a:
a8:06:5c:ad:be:1d:6a:b7:8d:e4:25:8a:a1:83:07:32:02:01:
8b:71:f9:6f:ca:a7:8b:fc:62:cd:da:9c:72:60:36:d5:e4:b1:
9f:7f:00:93:c8:a7:53:01:33:75:fd:88:ee:31:4b:a7:47:6c:
5f:03:62:e7:d0:09:d4:e0:70:02:2d:db:e3:52:35:07:5e:77:
7c:36:48:5f:a5:15:37:c1:f8:b6:7c:fd:7f:3c:f2:1e:5c:d6:
c6:84:2b:e5:42:8c:88:56:c4:42:61:78:d0:e2:82:d5:54:78:
b1:8e:da:62:01:55:3c:35:d6:9c:9d:fa:d0:4c:f1:9c:e7:68:
f3:2d:c6:cd:f3:13:f3:22:1c:5e:10:76:c2:03:a7:47:30:1b:
3a:8d:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:32 2026 by rpki-client