Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hi0MxMMNyVxyf1ZZz4ss3t5tVQY.roa
File: hi0MxMMNyVxyf1ZZz4ss3t5tVQY.roa (raw, json)
Hash identifier: V/VgkLt2eZjH6PPWsnhaJM3N60vw3JMmFJX8W1eIl4U=
Subject key identifier: 86:2D:0C:C4:C3:0D:C9:5C:72:7F:56:59:CF:8B:2C:DE:DE:6D:55:06
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FB24C5993D72CF3CC293626FB0E650F61
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hi0MxMMNyVxyf1ZZz4ss3t5tVQY.roa
Signing time: Thu 30 Jul 2026 09:12:55 +0000
ROA not before: Thu 30 Jul 2026 09:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.124.0/22 maxlen: 22
45.15.238.0/24 maxlen: 24
45.81.76.0/22 maxlen: 22
45.93.80.0/24 maxlen: 24
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.108.0/22 maxlen: 22
45.139.126.0/24 maxlen: 24
45.139.127.0/24 maxlen: 24
45.139.168.0/22 maxlen: 22
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 30 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:4c:59:93:d7:2c:f3:cc:29:36:26:fb:0e:65:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 30 09:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=862d0cc4c30dc95c727f5659cf8b2cdede6d5506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:78:05:31:07:97:f1:9f:73:29:0a:a7:5a:
5a:4b:4f:c5:c8:81:b2:d6:b3:28:81:38:f7:af:1d:
62:00:15:65:19:09:e6:a6:5c:98:64:f0:2f:c7:61:
c2:80:66:30:63:5a:a0:b1:4e:40:15:c2:7a:90:7b:
7f:d7:e1:b6:bf:c0:eb:16:17:c0:f7:05:b2:05:fc:
d6:43:cf:e5:c9:83:0e:a6:f9:71:8d:32:8a:c1:f7:
8c:21:9a:f7:59:7d:28:de:7e:85:1b:20:7e:dd:6a:
c8:e8:39:7b:ab:9f:f1:6b:32:be:3c:71:3a:a1:a4:
01:32:52:24:25:e6:5b:2a:e4:c5:02:4e:7b:53:57:
e1:a1:40:5c:3c:dd:a8:fb:9a:0f:db:e7:eb:17:96:
87:17:86:12:2c:6b:de:1a:a7:f5:55:0e:e8:96:d5:
87:1c:89:0d:e4:54:7d:da:24:a3:5b:8b:6b:67:c0:
7e:2e:68:bc:0d:79:5c:e5:7c:ca:aa:e4:fe:22:a1:
43:58:dd:5f:22:3c:52:81:5c:30:48:c6:53:7e:25:
f9:34:76:f6:4b:c7:29:42:48:81:aa:58:67:8f:23:
1e:00:0f:42:c3:7b:92:9a:6e:3a:b1:11:51:c7:95:
90:3b:b7:53:77:b8:86:34:eb:60:3f:66:35:a7:2c:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:0C:C4:C3:0D:C9:5C:72:7F:56:59:CF:8B:2C:DE:DE:6D:55:06
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hi0MxMMNyVxyf1ZZz4ss3t5tVQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.124.0/22
45.15.238.0/24
45.81.76.0/22
45.93.80.0/24
45.129.204.0/22
45.132.20.0/22
45.132.128.0/23
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.138.213.0-45.138.214.255
45.139.108.0/22
45.139.126.0/23
45.139.168.0/22
45.140.64.0/24
45.140.72.0/22
45.143.244.0/22
45.144.168.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.152.116.0/23
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.24.0/24
176.116.28.0/24
176.222.56.0/23
176.222.59.0/24
192.109.91.0/24
192.109.100.0/24
193.58.170.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c6:70:96:27:61:71:51:08:ac:7c:64:f2:3b:5f:52:ea:d3:
d8:4e:b9:a9:28:9e:af:16:72:52:8c:a9:e5:9f:df:ed:08:f5:
3d:3f:77:e6:fe:bf:b8:90:aa:47:b9:4a:ac:ee:9a:b7:45:b1:
10:09:ba:47:c5:56:df:75:1c:a1:c5:6c:2e:3d:6f:85:76:a9:
18:7f:6a:96:b0:11:0f:f4:7f:9b:2d:cd:0d:0c:44:84:be:4c:
f6:92:b3:32:b7:8b:52:88:60:01:d3:4e:cb:77:ce:e1:95:05:
fb:f1:d1:b4:01:a2:4b:55:76:f5:f1:b7:69:ba:9f:18:da:e5:
7e:f8:fe:1c:c4:c3:f8:1c:70:4c:ff:ad:96:23:57:c9:f4:e2:
6b:17:82:0b:3f:01:4e:f7:cc:98:b0:ff:2f:3e:3a:47:7a:73:
28:df:f6:e4:2c:27:83:93:ed:5a:3a:45:bc:80:e8:aa:5a:e6:
ba:5a:41:9e:7d:40:6f:33:4e:e0:18:f7:58:b8:2b:a9:ea:5e:
3f:c9:09:b7:82:0c:b2:34:1e:d4:4c:7f:79:28:9e:ec:ba:05:
c6:1c:70:d4:7f:a7:40:64:c2:99:24:66:60:6b:f2:7a:7d:bf:
34:b4:e0:53:1c:9c:37:44:08:a6:04:ce:c5:e4:aa:0c:6f:ae:
27:5a:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 13:14:25 2026 by rpki-client