Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2qs1jj9yrDOUzXUBbP5OIAg4M5k.roa
File: 2qs1jj9yrDOUzXUBbP5OIAg4M5k.roa (raw, json)
Hash identifier: o1ndg4aUhGwTTSyMvlUziRkCLJT67dxBN/0yyf3ILkw=
Subject key identifier: DA:AB:35:8E:3F:72:AC:33:94:CD:75:01:6C:FE:4E:20:08:38:33:99
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A168811BC69500768BBEFD5621EBAB8C29
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2qs1jj9yrDOUzXUBbP5OIAg4M5k.roa
Signing time: Fri 23 Oct 2026 11:24:14 +0000
ROA not before: Fri 23 Oct 2026 11:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
93.95.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:81:1b:c6:95:00:76:8b:be:fd:56:21:eb:ab:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 23 11:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daab358e3f72ac3394cd75016cfe4e2008383399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:2e:cc:d2:a8:60:b9:3a:f5:79:4b:c3:3c:
50:f7:65:da:da:b7:7a:51:0d:4d:73:eb:60:a8:a3:
d5:bd:1c:1e:78:37:3d:ef:ed:64:05:c6:29:46:8f:
80:db:0f:c2:90:4b:b2:45:65:38:28:05:25:b8:d3:
76:6a:e3:b1:2f:31:d1:5e:b6:6f:f0:19:e2:4b:e3:
7a:ba:32:08:80:ef:d8:83:c8:e0:2c:05:85:3d:98:
bc:06:d0:b4:9d:bf:8f:9f:46:e0:93:1d:c3:6e:fa:
0b:80:81:50:05:79:2d:57:b4:6e:4d:b3:83:3c:c0:
47:11:31:a6:95:46:7e:8f:7c:01:5d:d0:18:74:a4:
70:b3:74:97:ad:16:87:00:56:95:3f:5d:31:ac:a4:
ad:20:35:6c:b2:5c:c9:25:dc:0f:30:0e:c3:9e:f3:
6f:1b:b6:c8:1d:89:af:70:b2:87:a9:b0:1b:d3:4c:
c9:46:de:1b:bf:b0:09:0d:ae:08:3f:7a:d8:6a:9b:
ac:12:f5:7b:04:d9:1a:9b:f2:7e:bd:ed:94:1f:56:
a8:cd:16:3f:d9:83:7e:f8:2a:67:21:4d:47:9d:43:
10:0a:65:89:47:c6:9b:77:87:1b:d5:f7:65:f3:54:
38:5f:20:60:2f:b6:f7:fa:f0:8b:9d:78:58:76:e8:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:35:8E:3F:72:AC:33:94:CD:75:01:6C:FE:4E:20:08:38:33:99
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2qs1jj9yrDOUzXUBbP5OIAg4M5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.203.0-80.174.204.255
93.95.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0f:c3:7c:65:bd:b4:9a:47:ae:6c:58:46:78:50:0e:52:22:
ae:95:d9:4e:54:f5:15:3a:aa:e6:a6:79:4f:56:90:46:1e:25:
8d:6f:ca:67:09:f5:a8:cf:84:95:d5:e4:b1:23:7a:39:44:6a:
50:55:75:dc:3b:35:b1:fc:3b:e3:01:a3:fb:72:5c:56:c3:3c:
85:51:48:c1:d9:be:b3:cc:b8:e1:1e:e3:88:e2:63:87:95:9d:
fe:90:b8:c6:aa:76:e3:b9:78:6e:39:2b:ab:7f:d1:9e:aa:93:
38:26:23:23:c2:20:54:d6:ef:86:78:c6:68:f5:f1:fc:39:27:
d4:cd:19:c4:37:e8:a6:0b:8a:77:32:a9:93:c5:23:e1:3d:c1:
7b:77:7f:8b:eb:3a:ad:11:67:0f:28:62:41:22:0d:24:48:9c:
df:a1:ee:09:f6:df:6c:d5:f4:0e:f1:7d:e8:a9:33:31:17:31:
1a:ba:2e:03:5a:c1:3d:5b:9b:97:2e:7a:39:48:09:08:1f:60:
4a:d6:82:53:fd:7f:a5:4d:ee:09:71:ef:f9:20:e3:0a:07:f6:
fc:e1:6b:fb:0f:21:7a:30:09:d2:4e:70:4c:54:40:3c:de:2a:
23:54:ce:80:7a:55:e2:e3:26:22:57:2a:14:55:5f:64:e4:89:
82:6f:13:06
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaFogRvGlQB2i779ViHrq4wpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYxMDIzMTEyNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFiMzU4ZTNmNzJhYzMzOTRjZDc1MDE2Y2ZlNGUyMDA4MzgzMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLkuzNKoYLk69XlLwzxQ92Xa2rd6
UQ1Nc+tgqKPVvRweeDc97+1kBcYpRo+A2w/CkEuyRWU4KAUluNN2auOxLzHRXrZv
8BniS+N6ujIIgO/Yg8jgLAWFPZi8BtC0nb+Pn0bgkx3DbvoLgIFQBXktV7RuTbOD
PMBHETGmlUZ+j3wBXdAYdKRws3SXrRaHAFaVP10xrKStIDVsslzJJdwPMA7DnvNv
G7bIHYmvcLKHqbAb00zJRt4bv7AJDa4IP3rYapusEvV7BNkam/J+ve2UH1aozRY/
2YN++CpnIU1HnUMQCmWJR8abd4cb1fdl81Q4XyBgL7b3+vCLnXhYduhJbQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNqrNY4/cqwzlM11AWz+TiAIODOZMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvMnFzMWpqOXlyRE9VelhVQmJQNU9JQWc0TTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABQrssD
BABQrswDBABdXxcwDQYJKoZIhvcNAQELBQADggEBAMUPw3xlvbSaR65sWEZ4UA5S
Iq6V2U5U9RU6quameU9WkEYeJY1vymcJ9ajPhJXV5LEjejlEalBVddw7NbH8O+MB
o/tyXFbDPIVRSMHZvrPMuOEe44jiY4eVnf6QuMaqduO5eG45K6t/0Z6qkzgmIyPC
IFTW74Z4xmj18fw5J9TNGcQ36KYLincyqZPFI+E9wXt3f4vrOq0RZw8oYkEiDSRI
nN+h7gn232zV9A7xfeipMzEXMRq6LgNawT1bm5cuejlICQgfYErWglP9f6VN7glx
7/kg4woH9vzha/sPIXowCdJOcExUQDzeKiNUzoB6VeLjJiJXKhRVX2TkiYJvEwY=
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:08 2026 by rpki-client