Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/htGtMExc6qd0t_RO9bkmdJK0yII.roa
File: htGtMExc6qd0t_RO9bkmdJK0yII.roa (raw, json)
Hash identifier: ngaYbyWhTBaLfEqgiPzwjR33Luu9qxHnLSPrq1sZ6KU=
Subject key identifier: 86:D1:AD:30:4C:5C:EA:A7:74:B7:F4:4E:F5:B9:26:74:92:B4:C8:82
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019BBE5DD695D713AC0219E5D795EC368BE0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/htGtMExc6qd0t_RO9bkmdJK0yII.roa
Signing time: Wed 14 Jan 2026 21:16:19 +0000
ROA not before: Wed 14 Jan 2026 21:16:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210099
IP address blocks: 77.92.153.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jan 2026 07:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:be:5d:d6:95:d7:13:ac:02:19:e5:d7:95:ec:36:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 14 21:16:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86d1ad304c5ceaa774b7f44ef5b9267492b4c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:65:81:00:73:ed:34:c0:66:c8:66:56:7e:
48:6b:52:17:69:c3:d1:75:50:ce:49:c4:c3:97:d4:
d9:1d:a4:9a:08:ad:b7:78:5d:40:57:b2:d3:9d:2b:
be:c5:64:cd:ec:93:76:dc:71:07:91:cb:8a:01:f0:
51:33:88:d8:6f:d7:0b:2f:e2:20:fd:f1:c2:3d:fc:
77:92:13:c2:dd:5c:5c:23:17:8d:83:0c:30:9c:ec:
8d:18:fd:ed:50:b9:9f:98:28:94:cf:95:10:ef:06:
3b:c4:6f:2e:45:f4:3e:b7:ca:07:f5:8f:9f:f4:d6:
ca:af:c6:4b:f5:3f:16:3e:10:0c:fd:53:58:60:0e:
12:57:30:0f:9e:55:b4:c3:7b:68:51:ec:ae:ab:bd:
a8:ba:5b:82:45:b3:91:64:04:17:ef:6f:ef:fe:d1:
a2:33:55:f3:50:e0:70:b2:72:79:06:04:26:bf:da:
17:c5:5e:ed:91:2f:c7:96:75:63:a2:9d:77:08:cd:
fc:55:a6:34:23:32:dc:a5:a1:be:bf:5b:28:fc:fe:
44:57:ba:06:d5:d5:02:36:b7:4e:32:30:fb:79:65:
fb:ca:1e:48:d6:ea:50:47:bf:cf:bf:48:89:3c:fe:
c2:98:5a:04:fd:e8:c2:2e:77:94:ba:d8:28:69:1b:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:AD:30:4C:5C:EA:A7:74:B7:F4:4E:F5:B9:26:74:92:B4:C8:82
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/htGtMExc6qd0t_RO9bkmdJK0yII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
78.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b3:56:ee:93:b0:10:94:85:48:84:92:a7:e6:6e:68:e4:0e:
0f:ca:b3:68:f3:8e:e1:81:af:f0:12:34:fb:17:d0:f8:b6:00:
1a:f3:c3:ac:99:d3:c2:35:67:1c:6d:54:97:ba:74:61:22:a6:
ad:02:8b:c2:51:0f:7b:84:21:ff:17:40:7e:40:8d:e3:c4:a1:
e1:11:1f:99:fc:bf:e6:7b:4f:09:cb:ea:c6:d1:1b:75:fc:a4:
96:40:5c:09:9e:37:d9:ea:e0:29:73:1b:2c:35:2f:1a:c7:8b:
3d:9f:ee:27:3b:e9:87:0f:23:92:48:4c:52:b9:c0:f2:e2:b7:
d4:cf:6b:24:9f:bc:02:64:92:f0:e9:6c:95:c0:97:eb:c0:40:
1a:7f:f9:6a:7b:5a:df:28:63:07:a7:da:96:c3:62:3e:b7:09:
22:0c:ac:37:ab:f7:69:b4:c8:3f:20:0c:d4:15:e7:ab:a7:a4:
91:a2:00:a5:d4:3d:53:e2:ab:94:34:1d:54:f3:e6:3f:4e:65:
9a:fe:35:fb:fe:a2:ea:8f:30:49:4c:ea:dd:79:16:0c:7c:99:
25:dd:a3:a8:61:f6:55:e3:ec:86:31:80:22:3d:ed:aa:16:d7:
03:3a:26:b2:e8:b1:37:89:81:0e:a6:7a:ff:9b:a4:fc:00:51:
f0:e1:41:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZu+XdaV1xOsAhnl15XsNovgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjYwMTE0MjExNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmQxYWQzMDRjNWNlYWE3NzRiN2Y0NGVmNWI5MjY3NDkyYjRjODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6tlgQBz7TTAZshmVn5Ia1IXacPR
dVDOScTDl9TZHaSaCK23eF1AV7LTnSu+xWTN7JN23HEHkcuKAfBRM4jYb9cLL+Ig
/fHCPfx3khPC3VxcIxeNgwwwnOyNGP3tULmfmCiUz5UQ7wY7xG8uRfQ+t8oH9Y+f
9NbKr8ZL9T8WPhAM/VNYYA4SVzAPnlW0w3toUeyuq72ouluCRbORZAQX72/v/tGi
M1XzUOBwsnJ5BgQmv9oXxV7tkS/HlnVjop13CM38VaY0IzLcpaG+v1so/P5EV7oG
1dUCNrdOMjD7eWX7yh5I1upQR7/Pv0iJPP7CmFoE/ejCLneUutgoaRsYvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIbRrTBMXOqndLf0TvW5JnSStMiCMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvaHRHdE1FeGM2cWQwdF9STzlia21kSksweUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVyZAwQA
TodJMA0GCSqGSIb3DQEBCwUAA4IBAQBps1buk7AQlIVIhJKn5m5o5A4PyrNo847h
ga/wEjT7F9D4tgAa88OsmdPCNWccbVSXunRhIqatAovCUQ97hCH/F0B+QI3jxKHh
ER+Z/L/me08Jy+rG0Rt1/KSWQFwJnjfZ6uApcxssNS8ax4s9n+4nO+mHDyOSSExS
ucDy4rfUz2skn7wCZJLw6WyVwJfrwEAaf/lqe1rfKGMHp9qWw2I+twkiDKw3q/dp
tMg/IAzUFeerp6SRogCl1D1T4quUNB1U8+Y/TmWa/jX7/qLqjzBJTOrdeRYMfJkl
3aOoYfZV4+yGMYAiPe2qFtcDOiay6LE3iYEOpnr/m6T8AFHw4UEh
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:40 2026 by rpki-client