Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQxGdfUpGcbkThiP_Ydq9tRg6Uw.roa
File: zQxGdfUpGcbkThiP_Ydq9tRg6Uw.roa (raw, json)
Hash identifier: YbVT5miJlA2vEeVeEK4uUmkkUAxo7614w2hpx7aDQLA=
Subject key identifier: CD:0C:46:75:F5:29:19:C6:E4:4E:18:8F:FD:87:6A:F6:D4:60:E9:4C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FBA0E21CD83C26C66F123F01E480D0A7C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQxGdfUpGcbkThiP_Ydq9tRg6Uw.roa
Signing time: Fri 31 Jul 2026 21:21:56 +0000
ROA not before: Fri 31 Jul 2026 21:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 62.105.194.0/24 maxlen: 24
62.105.196.0/24 maxlen: 24
62.132.2.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.26.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
194.77.69.0/24 maxlen: 24
194.120.121.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Aug 2026 15:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:0e:21:cd:83:c2:6c:66:f1:23:f0:1e:48:0d:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 31 21:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd0c4675f52919c6e44e188ffd876af6d460e94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:4c:21:1f:d1:30:2d:f9:9b:39:e4:cf:fb:
d9:1d:77:30:2e:62:85:be:7d:1a:00:09:96:9a:45:
23:c6:04:9c:5b:01:e6:f5:4d:2b:ab:93:d2:3b:37:
61:9f:5b:55:d5:48:23:3e:7f:11:1d:9c:ef:0c:b0:
ed:22:b2:75:7b:c9:95:3a:79:fa:0a:e7:08:8b:71:
4d:29:aa:a7:ec:80:a5:50:a0:d6:eb:53:a5:63:97:
d8:f3:e5:58:55:78:f8:ce:88:f3:c9:70:ae:b9:54:
1f:2d:41:15:7b:c0:5a:a8:11:97:64:0f:d8:ea:7e:
fe:67:a1:13:a0:b6:cb:cb:b9:ad:f3:6d:39:9b:d7:
86:6c:c2:27:82:1b:56:75:ae:07:67:9d:3c:3f:76:
4b:81:75:12:4a:f4:e2:0a:d3:78:7b:6f:50:f4:d9:
66:9f:08:de:2b:88:b8:6c:34:0b:fc:ad:c7:60:0a:
d1:24:f4:ea:4e:ad:a7:b1:66:b8:af:25:14:dd:c8:
c9:d6:23:98:a3:31:74:d6:b9:1f:73:0c:91:56:b1:
b3:71:af:5d:f7:f5:b2:3d:d5:f7:c9:de:b9:ec:38:
6e:9d:08:91:22:3a:c7:a3:02:50:3c:5a:a7:61:2f:
81:cb:ee:90:01:94:e5:18:cb:c3:42:6c:db:c3:18:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:46:75:F5:29:19:C6:E4:4E:18:8F:FD:87:6A:F6:D4:60:E9:4C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQxGdfUpGcbkThiP_Ydq9tRg6Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.194.0/24
62.105.196.0/24
62.132.2.0/24
62.132.116.0/24
77.67.26.0/24
77.67.31.0/24
77.67.91.0/24
194.77.69.0/24
194.120.121.0/24
195.21.129.0/24
212.221.26.0/24
212.222.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:1d:d1:55:4c:0e:b1:39:ea:77:ff:92:0b:bb:f5:5c:65:00:
16:13:36:42:e5:ed:71:b0:2e:70:57:12:0d:c5:af:9a:1a:6a:
4f:0f:c0:06:bb:73:56:f6:6c:5f:b4:a1:17:38:ed:bb:a4:3d:
58:c9:3e:dd:16:ee:ed:61:66:df:69:1c:78:c0:15:33:3a:90:
eb:7a:bc:60:f9:c8:58:e4:c2:be:71:52:ea:9e:81:ee:e7:d1:
c8:9a:78:96:6a:5e:fe:d6:42:82:37:95:04:6d:56:c8:79:41:
0d:48:16:05:a2:8c:9b:db:8f:8b:18:ab:30:4a:22:d8:31:15:
3d:e3:aa:22:4c:5e:03:be:c3:6a:e5:ee:8a:b7:b2:36:3a:cc:
76:6c:76:41:62:dd:73:bc:aa:f5:78:f2:6e:f0:fe:ad:84:6f:
ab:05:06:2c:02:cd:ef:3e:2f:d0:3e:9e:8f:3a:c9:d8:b9:d9:
91:1b:b1:6c:29:c9:28:3e:94:58:3d:06:c0:86:42:a4:6d:a9:
84:d0:9d:3f:a0:71:49:82:a8:f2:29:0a:37:47:b2:b2:27:65:
b8:d0:0b:99:1f:09:58:42:13:46:99:9c:01:49:a2:b6:5f:e3:
19:c2:28:eb:9b:f5:e6:32:95:43:6d:c3:32:c6:27:c6:53:64:
89:b5:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:40:58 2026 by rpki-client