Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pb-8ZNsp0BFM5y8HvHhwL7jt5HE.roa
File: pb-8ZNsp0BFM5y8HvHhwL7jt5HE.roa (raw, json)
Hash identifier: FX2MYMwAHkahlKpGSbEf0rEhhYYWpV8KGhJtWr3OPfQ=
Subject key identifier: A5:BF:BC:64:DB:29:D0:11:4C:E7:2F:07:BC:78:70:2F:B8:ED:E4:71
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A17061489DE84C73A2EB3E41BB7B42E4E1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pb-8ZNsp0BFM5y8HvHhwL7jt5HE.roa
Signing time: Sun 25 Oct 2026 00:06:26 +0000
ROA not before: Sun 25 Oct 2026 00:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.192.0/24 maxlen: 24
62.105.193.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.105.197.0/24 maxlen: 24
62.105.198.0/24 maxlen: 24
62.105.218.0/24 maxlen: 24
77.67.32.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
81.94.104.0/21 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.24.0/23 maxlen: 24
194.77.56.0/22 maxlen: 24
194.77.91.0/24 maxlen: 24
194.77.194.0/23 maxlen: 24
194.77.204.0/22 maxlen: 24
194.77.224.0/22 maxlen: 24
194.77.229.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.122.81.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.149.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.208.0/24 maxlen: 24
194.231.209.0/24 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.210.0/24 maxlen: 24
194.231.211.0/24 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.219.0/24 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
195.21.149.0/24 maxlen: 24
212.168.200.0/21 maxlen: 24
212.189.28.0/23 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.99.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:61:48:9d:e8:4c:73:a2:eb:3e:41:bb:7b:42:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 25 00:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5bfbc64db29d0114ce72f07bc78702fb8ede471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:15:4b:c0:ea:a0:b7:b2:7d:a9:82:21:b9:
7b:28:f5:dd:c6:92:d3:2e:d6:9c:71:e8:86:ce:10:
66:72:9c:13:a9:96:e6:86:c1:3f:1d:88:51:dc:a2:
95:98:e3:44:15:5a:a2:8f:f6:9f:4d:61:71:b6:56:
83:14:e7:3f:be:31:ca:d5:8c:64:8e:de:65:32:0f:
1c:30:ac:4d:98:e7:51:6b:94:29:c5:8b:c6:58:5c:
a3:03:d6:95:1e:df:ec:11:a4:a1:4c:f6:dc:28:37:
0e:a6:24:1c:c0:3c:52:16:f3:ac:74:de:9b:64:7c:
4c:c7:44:81:3c:d2:10:49:b9:e9:ec:2f:37:32:79:
c3:11:3a:a2:99:27:11:60:c9:9e:f3:5f:24:78:4f:
f5:53:5c:d0:6e:67:f4:2d:93:0f:6c:4d:c5:66:84:
d2:4d:a6:a3:8a:44:74:3c:42:cc:d4:6b:7c:5b:08:
5b:2a:9d:87:93:15:4a:c0:95:79:db:77:70:b2:8f:
cd:49:18:aa:11:bf:42:f1:bf:6e:03:d7:a5:62:b3:
2e:47:d9:e9:0d:0e:e7:f6:c4:b0:49:2a:c0:61:47:
f0:93:78:10:14:bd:b6:72:6d:24:cd:e2:e8:6f:89:
cb:8a:11:3b:dc:08:6e:11:2a:54:de:e7:77:48:11:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:BC:64:DB:29:D0:11:4C:E7:2F:07:BC:78:70:2F:B8:ED:E4:71
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pb-8ZNsp0BFM5y8HvHhwL7jt5HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.192.0/23
62.105.195.0/24
62.105.197.0-62.105.198.255
62.105.218.0/24
77.67.32.0/24
77.67.91.0/24
77.67.125.0/24
81.94.104.0/21
193.141.2.0/24
194.45.47.0/24
194.77.6.0/24
194.77.24.0/23
194.77.56.0/22
194.77.91.0/24
194.77.194.0/23
194.77.204.0/22
194.77.224.0/22
194.77.229.0/24
194.122.78.0/24
194.122.80.0/23
194.122.85.0/24
194.231.128.0-194.231.139.255
194.231.142.0/23
194.231.148.0-194.231.155.255
194.231.157.0-194.231.159.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.145.0/24
195.21.149.0/24
212.168.200.0/21
212.189.28.0/23
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.89.0-212.189.91.255
212.189.97.0-212.189.99.255
212.189.104.0/24
212.189.110.0/24
212.189.115.0/24
212.221.26.0/24
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:75:03:17:8f:9a:02:41:eb:90:1f:91:26:a7:0c:ae:95:
e5:c3:85:df:71:fa:c5:4c:cd:37:f6:5a:2b:33:5d:f4:fc:65:
35:69:8b:60:a4:9a:f0:70:80:35:f5:aa:de:bf:b7:ee:e0:81:
d2:4c:7b:f4:b1:26:39:67:86:99:1e:39:3d:70:92:45:93:1f:
8a:83:44:79:ad:ef:e0:b5:b5:f6:6e:22:e3:0a:da:6a:6d:1d:
f1:8a:ba:99:75:07:5a:7c:d8:e4:94:1c:85:b2:99:0f:4e:8d:
1c:a9:a2:b0:5a:b3:39:4f:7f:96:29:52:13:51:bd:a5:69:f2:
ac:bd:cd:f4:8a:bb:4a:4a:8d:95:8e:d2:95:00:e4:1f:d7:f9:
0e:43:f4:d7:e6:c8:b2:a0:56:c5:e8:5e:96:1a:e7:18:20:06:
ef:bd:84:68:27:01:95:bf:b5:5a:f4:4a:ff:37:1d:65:f0:4a:
dd:8e:91:48:e4:50:23:0b:72:e3:44:6b:70:08:32:6f:22:8f:
6f:fb:61:f3:cc:b9:57:5b:08:7c:30:b6:69:7c:48:35:df:ce:
05:96:c6:dc:88:14:a4:3c:4f:26:52:5b:8e:35:77:ea:c5:eb:
b5:e2:2a:54:03:87:45:ce:e6:3b:cb:f2:7e:1a:82:97:8b:67:
53:4f:27:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:34 2026 by rpki-client