Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Cp3cFYISF2eMp33AoDLK1irsqNA.roa
File: Cp3cFYISF2eMp33AoDLK1irsqNA.roa (raw, json)
Hash identifier: h4j1o2WAzzXmAmlIcNX9EatHIsGJAIDrSXwMTmM8eqI=
Subject key identifier: 0A:9D:DC:15:82:12:17:67:8C:A7:7D:C0:A0:32:CA:D6:2A:EC:A8:D0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A14AF295E49079033339CD5A861E11D7BF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Cp3cFYISF2eMp33AoDLK1irsqNA.roa
Signing time: Sat 17 Oct 2026 17:39:34 +0000
ROA not before: Sat 17 Oct 2026 17:39:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 11:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:f2:95:e4:90:79:03:33:39:cd:5a:86:1e:11:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 17 17:39:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9ddc15821217678ca77dc0a032cad62aeca8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:c2:81:77:44:ac:17:d2:1e:86:a9:60:8a:
dc:32:7b:71:81:9f:3e:df:18:10:40:3f:ec:72:07:
71:99:2c:fa:5a:c9:d1:4a:1b:03:1e:62:e7:9c:e5:
18:ca:67:96:9d:8d:db:63:9c:3b:00:89:60:4c:74:
8a:e0:7f:f6:4c:1e:32:c5:ef:34:87:ca:01:6f:6c:
a8:03:99:43:aa:35:b7:c0:bd:3e:08:7f:98:e1:37:
2d:db:9e:19:4a:ec:f4:29:43:85:bd:6d:34:39:5b:
04:df:3c:17:14:f2:e0:76:39:03:5c:74:f7:bb:78:
5f:42:eb:bb:a5:2d:d8:f1:da:6e:a6:f4:8e:34:51:
48:c1:51:28:68:e2:9b:2d:ea:be:60:b6:19:30:f8:
95:da:f4:94:e8:36:93:c8:94:e9:45:ea:ab:9a:12:
de:27:4f:8c:e3:d3:25:58:3c:27:ee:3c:87:fb:fa:
7d:46:fe:7f:65:88:e9:1b:6e:64:65:50:53:15:2e:
ec:58:36:ef:59:e2:7b:40:e5:28:14:16:5a:1f:f8:
86:cb:09:6d:86:1b:57:ba:ec:65:76:2c:dd:61:88:
1a:0a:27:79:e3:09:9f:51:4d:ad:0e:07:58:68:51:
0d:11:35:7b:ae:c8:53:2c:cd:ec:62:f8:59:08:0e:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:DC:15:82:12:17:67:8C:A7:7D:C0:A0:32:CA:D6:2A:EC:A8:D0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Cp3cFYISF2eMp33AoDLK1irsqNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.244.0-79.98.246.255
176.125.250.0/23
185.199.148.0/23
185.199.212.0/22
185.221.24.0/22
185.226.181.0/24
185.226.183.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3d:05:81:a8:1a:32:ec:83:9e:91:95:9a:c9:4c:95:f7:de:
d0:87:ca:72:c8:87:3f:e5:f5:8d:78:78:88:07:30:2a:50:90:
af:df:45:98:73:73:f4:8d:37:42:8b:ff:b4:85:0c:02:82:66:
cd:30:d4:98:0a:5e:dc:15:75:05:a4:4f:e9:7b:cf:31:69:a7:
f1:51:7e:03:99:47:a7:7d:42:94:fe:b4:cb:67:c5:8c:2e:8b:
9c:46:e7:df:c0:9b:a8:8c:ef:0b:c4:87:62:0c:1e:df:81:da:
aa:95:51:11:83:25:19:cc:b0:cd:d5:97:a1:07:ba:14:9b:ef:
84:bf:7b:02:13:e4:e1:51:dc:b7:be:b2:fb:f1:9f:b9:5c:12:
fd:9a:67:d8:37:0e:22:04:4b:e0:c2:e0:35:0f:07:9e:02:84:
23:b1:7a:7e:8a:fe:60:07:84:de:08:98:cc:0e:68:95:63:f7:
53:24:1b:ce:24:2d:6f:02:7c:4e:71:68:be:34:6f:c7:ad:d2:
35:97:57:6b:42:c2:e6:9e:41:6c:73:9e:0d:8e:78:84:07:ec:
80:28:ee:d9:e3:17:c4:a7:3f:e8:6f:f2:ee:b4:86:d0:60:03:
ac:40:89:b5:86:fa:ad:44:d4:d6:8a:84:db:1a:3a:0b:70:25:
2c:65:b8:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAaFK8pXkkHkDMznNWoYeEde/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMDE3MTczOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTlkZGMxNTgyMTIxNzY3OGNhNzdkYzBhMDMyY2FkNjJhZWNhOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ/CgXdErBfSHoapYIrcMntxgZ8+
3xgQQD/scgdxmSz6WsnRShsDHmLnnOUYymeWnY3bY5w7AIlgTHSK4H/2TB4yxe80
h8oBb2yoA5lDqjW3wL0+CH+Y4Tct254ZSuz0KUOFvW00OVsE3zwXFPLgdjkDXHT3
u3hfQuu7pS3Y8dpupvSONFFIwVEoaOKbLeq+YLYZMPiV2vSU6DaTyJTpReqrmhLe
J0+M49MlWDwn7jyH+/p9Rv5/ZYjpG25kZVBTFS7sWDbvWeJ7QOUoFBZaH/iGywlt
hhtXuuxldizdYYgaCid54wmfUU2tDgdYaFENETV7rshTLM3sYvhZCA7LTQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFAqd3BWCEhdnjKd9wKAyytYq7KjQMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvQ3AzY0ZZSVNGMmVNcDMzQW9ETEsxaXJzcU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAAtm/0D
BAAtm/4DBAAtndEwDAMEAk9i9AMEAE9i9gMEAbB9+gMEAbnHlAMEArnH1AMEArnd
GAMEALnitQMEALnitwMEALn6GjANBgkqhkiG9w0BAQsFAAOCAQEAST0FgagaMuyD
npGVmslMlffe0IfKcsiHP+X1jXh4iAcwKlCQr99FmHNz9I03Qov/tIUMAoJmzTDU
mApe3BV1BaRP6XvPMWmn8VF+A5lHp31ClP60y2fFjC6LnEbn38CbqIzvC8SHYgwe
34HaqpVREYMlGcywzdWXoQe6FJvvhL97AhPk4VHct76y+/GfuVwS/Zpn2DcOIgRL
4MLgNQ8HngKEI7F6for+YAeE3giYzA5olWP3UyQbziQtbwJ8TnFovjRvx63SNZdX
a0LC5p5BbHOeDY54hAfsgCju2eMXxKc/6G/y7rSG0GADrECJtYb6rUTU1oqE2xo6
C3AlLGW42Q==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:22 2026 by rpki-client