Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VRKIjvPa0gtt67cFQVRRyn2IAGQ.roa
File: VRKIjvPa0gtt67cFQVRRyn2IAGQ.roa (raw, json)
Hash identifier: Aziyg0GRQuYpZXmjK7NQPwL2t9alHBDrTCxbCTvDJYI=
Subject key identifier: 55:12:88:8E:F3:DA:D2:0B:6D:EB:B7:05:41:54:51:CA:7D:88:00:64
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A10694B29A8070B7353A882153B6E45A46
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VRKIjvPa0gtt67cFQVRRyn2IAGQ.roa
Signing time: Sun 04 Oct 2026 11:02:50 +0000
ROA not before: Sun 04 Oct 2026 11:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Oct 2026 16:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:94:b2:9a:80:70:b7:35:3a:88:21:53:b6:e4:5a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 4 11:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5512888ef3dad20b6debb705415451ca7d880064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:1a:bf:02:70:f6:19:5e:7d:a4:23:e1:1a:
64:ee:d8:7c:7e:78:69:95:e6:61:a1:b1:2b:cf:3a:
98:a6:38:75:ac:9b:6f:6e:8a:58:ca:1e:ca:4c:74:
78:d6:63:96:98:1a:73:d7:c8:c3:8e:8b:1f:a8:5a:
16:ea:38:73:80:1a:88:b8:4f:99:4b:fa:ee:a7:4c:
7d:8b:10:c3:80:b7:ed:1d:44:39:e2:41:d7:47:51:
74:50:75:52:30:91:d4:8b:54:77:ce:73:9c:f2:2e:
ff:91:ba:70:80:27:d3:b0:a0:2b:8c:e8:f1:18:fc:
77:a6:3c:90:0d:58:d0:3e:ca:c6:90:70:0b:89:b2:
fc:32:35:b6:00:79:13:b2:81:36:f4:90:5a:0c:17:
b7:82:90:28:d3:d3:95:af:57:2f:36:5c:f7:f2:c1:
f8:0a:5f:c4:64:66:3b:f4:a7:e6:1a:d7:df:65:5c:
e6:58:b3:97:81:91:66:b6:9e:cc:df:37:8d:6e:84:
e5:45:67:a8:f2:e2:c4:fd:6d:7e:2d:db:89:9f:af:
e3:ec:d2:80:34:a7:44:49:01:90:7a:d2:cf:e2:e7:
a1:bb:90:98:25:63:34:3a:4c:d0:74:b2:8d:56:97:
2e:65:ac:30:59:c2:57:31:32:79:f3:8b:8c:70:83:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:88:8E:F3:DA:D2:0B:6D:EB:B7:05:41:54:51:CA:7D:88:00:64
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VRKIjvPa0gtt67cFQVRRyn2IAGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.244.0-79.98.246.255
176.125.250.0/23
185.199.148.0/23
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0/22
185.225.168.0-185.225.170.255
185.226.180.0/23
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
00:63:0b:cb:53:18:df:a9:b0:42:43:3e:22:db:8b:f7:04:f7:
c0:24:df:e5:53:53:15:c4:dd:49:2e:c4:26:fc:71:f7:f8:55:
61:63:30:55:03:7b:b3:14:cc:a3:b6:91:25:ae:be:b8:3d:f4:
77:66:f1:11:3b:fc:54:a4:fd:0a:a1:9d:e4:62:2a:d9:3f:ba:
f4:1a:71:86:8d:54:e8:b8:f0:77:e5:a9:9f:56:75:57:fd:66:
79:ac:ad:c3:42:5f:7e:ee:7b:50:54:7d:7e:ef:3f:7f:f5:90:
9d:f0:b8:27:11:4e:60:f4:f2:94:43:72:2f:9c:76:59:26:a4:
ee:7e:ee:fb:08:ff:75:35:e2:37:83:a1:05:a4:c9:bb:76:ab:
25:0e:4b:31:a9:64:ad:34:83:8a:88:93:40:5d:8a:7b:ef:4c:
e5:70:eb:76:32:76:08:ba:4d:7a:22:28:7f:06:3e:52:b9:74:
1f:d9:31:a1:d3:2c:d4:af:65:24:18:b6:35:c7:29:68:01:49:
f9:c8:2a:4b:35:44:79:d3:89:ff:ce:e7:62:b9:00:17:2c:35:
30:1f:e4:b9:5d:ce:13:87:f6:54:99:ce:11:72:cc:21:6b:91:
eb:ac:8f:70:62:17:37:22:db:2a:a0:48:42:57:fc:ea:2f:12:
00:02:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:32 2026 by rpki-client