Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xc1QKEdNaw0RvaPVe77PgAXGxRc.roa
File: xc1QKEdNaw0RvaPVe77PgAXGxRc.roa (raw, json)
Hash identifier: 3AjzWMIQJUcoGmYPgtTltQ2TR1kD20dZYNOJxuLUPSQ=
Subject key identifier: C5:CD:50:28:47:4D:6B:0D:11:BD:A3:D5:7B:BE:CF:80:05:C6:C5:17
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F114A19B8C98AA5B1399F304B1FD8D6BE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xc1QKEdNaw0RvaPVe77PgAXGxRc.roa
Signing time: Mon 29 Jun 2026 02:51:36 +0000
ROA not before: Mon 29 Jun 2026 02:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.105.194.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.162.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jun 2026 08:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:4a:19:b8:c9:8a:a5:b1:39:9f:30:4b:1f:d8:d6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 29 02:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5cd5028474d6b0d11bda3d57bbecf8005c6c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:ea:23:4c:ab:b7:ef:7e:98:ae:27:0e:1c:
d6:98:e6:23:d2:6d:1e:42:d4:8b:76:9a:cf:02:ea:
4a:47:3c:c3:ea:af:9e:74:5f:4e:90:5f:89:c9:ea:
8b:8f:70:20:dc:1d:5d:0b:25:4a:39:1f:58:3a:fa:
54:54:b0:07:f5:8a:ab:16:b6:cf:40:29:15:7c:2e:
f9:d1:c0:09:fe:52:3f:d1:8f:fc:69:1e:02:59:09:
92:11:74:0d:b4:cf:bc:01:f2:16:3e:92:af:3a:9d:
df:3a:55:4a:7f:26:a0:de:96:d3:48:2b:90:ef:f1:
21:bf:75:bc:c8:38:8e:c9:ec:ab:8a:be:64:82:8b:
b2:52:97:9c:80:38:7e:5f:a7:41:7e:eb:25:09:1b:
4f:3c:f5:18:40:94:6f:b3:f8:fe:59:76:d0:59:71:
dd:c9:47:f1:99:3e:a2:91:67:ce:f9:3a:44:d4:2d:
bb:98:5c:c6:b7:79:47:52:68:87:57:da:18:5b:81:
9c:4a:c3:d0:5c:a9:bc:6b:79:1b:f8:e7:23:15:ab:
ea:c8:ff:98:2b:b6:0e:a5:4f:3b:78:a3:d1:43:1a:
93:3c:ca:d7:f3:d9:50:27:09:ef:91:b4:7d:aa:e7:
fb:ef:61:18:9e:ed:d7:39:03:67:c5:5d:28:b2:02:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:50:28:47:4D:6B:0D:11:BD:A3:D5:7B:BE:CF:80:05:C6:C5:17
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xc1QKEdNaw0RvaPVe77PgAXGxRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.194.0/24
193.141.2.0/24
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.162.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ce:ff:7c:19:a8:2e:07:73:f4:49:60:ed:28:8e:73:51:5a:
92:a2:27:34:c3:85:57:51:81:90:2d:bb:1d:02:c0:2b:83:8e:
19:4e:f9:72:ed:a9:b2:c3:a9:e8:76:af:db:1e:3f:f4:69:ec:
55:0a:fe:f3:22:a0:20:3b:55:c0:27:f6:da:6a:00:2c:56:bc:
2b:96:b5:d1:7a:97:5e:7f:da:1c:23:5d:64:4a:5b:ca:65:e0:
bf:61:07:92:a5:05:6e:34:5f:8d:bc:86:e9:a5:52:3d:32:a3:
00:b0:0e:76:87:61:59:36:d2:9f:60:5c:eb:7a:0c:9e:a7:e5:
cf:8a:d7:25:9d:0c:2e:31:e3:cc:e3:e1:b6:d6:66:62:36:72:
d7:ae:10:58:c1:41:b5:8d:99:8f:58:2f:54:81:da:93:11:7b:
f2:78:35:1f:fc:2c:fd:08:0c:3c:ac:f4:d4:5c:71:47:37:16:
52:e7:ae:04:ec:2a:e9:93:1b:fa:2f:48:ac:25:99:18:d0:03:
04:c7:0b:19:55:ee:d3:9f:38:69:69:cc:df:bb:ea:54:65:37:
eb:e6:26:28:ae:67:5f:87:2c:a2:89:b9:fd:d4:6d:5a:55:b5:
e1:c6:c6:83:b6:dc:96:46:19:d0:4e:7f:53:12:07:3f:0e:86:
68:f3:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:08 2026 by rpki-client