Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/F7nYF7e5ehLSnbprkI8HTxTngcQ.roa
File: F7nYF7e5ehLSnbprkI8HTxTngcQ.roa (raw, json)
Hash identifier: VBWUOkvqxt0wLl7GValyauRFxiz7Kk3EuV4g62z3S3g=
Subject key identifier: 17:B9:D8:17:B7:B9:7A:12:D2:9D:BA:6B:90:8F:07:4F:14:E7:81:C4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A13ED6BBA890F54A53BA555DB7ECA3CAB6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/F7nYF7e5ehLSnbprkI8HTxTngcQ.roa
Signing time: Thu 15 Oct 2026 09:13:42 +0000
ROA not before: Thu 15 Oct 2026 09:13:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
134.49.91.0/24 maxlen: 24
147.90.18.0/24 maxlen: 24
147.90.19.0/24 maxlen: 24
147.90.21.0/24 maxlen: 24
147.90.28.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.37.0/24 maxlen: 24
147.90.51.0/24 maxlen: 24
147.90.54.0/24 maxlen: 24
147.90.88.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.206.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
173.209.12.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 07:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:d6:bb:a8:90:f5:4a:53:ba:55:5d:b7:ec:a3:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 15 09:13:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b9d817b7b97a12d29dba6b908f074f14e781c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:40:73:42:58:28:c1:e9:c7:5a:28:1c:80:
c1:4d:98:6e:75:04:ed:7f:80:5f:67:13:dd:3c:d2:
8f:49:07:df:85:b2:23:30:12:70:ae:83:2a:34:2e:
51:5f:39:b1:b5:64:0e:f7:a3:6a:31:b4:c1:60:98:
d5:4e:6e:2e:9e:79:86:1d:c1:26:b6:1c:b2:7d:44:
2e:49:3c:7d:85:c8:b6:28:08:34:a0:1c:a8:70:d2:
7d:22:88:b5:ad:c4:51:d8:34:d5:c3:33:f8:c9:58:
b8:0e:81:2e:8f:34:54:9d:6e:6f:41:aa:3f:16:e0:
cc:ee:43:b1:ea:57:e6:39:f8:29:cf:3a:11:e4:05:
04:73:67:89:d4:cf:80:00:05:27:aa:d7:8d:8e:72:
0e:59:ce:e7:12:55:be:50:5d:f8:eb:3a:dd:f8:de:
15:94:b6:6b:95:8a:06:bf:ba:75:1b:4a:ce:22:1a:
0d:c0:8c:6d:c1:db:43:df:c8:ba:4c:4d:65:f6:0a:
d2:0e:b2:00:d7:bb:2e:0e:77:a4:2c:a5:71:a2:48:
2c:09:84:cc:1e:a3:ba:e8:aa:df:89:1e:4a:c0:88:
ab:a4:d5:4a:e8:e6:1b:e4:5d:84:f1:32:4d:ba:d1:
04:fd:65:41:56:7a:ab:e0:67:67:0e:25:63:e4:5f:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:D8:17:B7:B9:7A:12:D2:9D:BA:6B:90:8F:07:4F:14:E7:81:C4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/F7nYF7e5ehLSnbprkI8HTxTngcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
134.49.91.0/24
147.90.18.0/23
147.90.21.0/24
147.90.28.0/24
147.90.35.0/24
147.90.37.0/24
147.90.51.0/24
147.90.54.0/24
147.90.88.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.206.0/24
147.90.220.0/23
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
173.209.12.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:67:f6:58:16:49:5b:38:4c:9b:76:b2:91:fd:1f:de:cd:45:
3c:35:59:54:0e:a4:28:e1:78:34:f9:b6:32:a5:f2:e7:fe:50:
d5:b3:0f:44:d4:0f:f5:e7:16:a6:91:b3:9b:bb:9c:c1:96:0b:
2b:38:ea:3d:de:43:88:c4:51:29:d7:de:01:17:2f:07:48:52:
bc:0f:42:5c:1d:65:ef:a5:5d:fa:8a:d7:70:30:34:df:a5:1d:
5d:39:97:42:54:a1:8a:ae:39:ff:42:5f:33:1a:fb:3a:eb:20:
59:50:19:a9:50:fd:df:c4:96:cf:6a:13:8b:04:e4:d0:63:8f:
21:4a:2b:8a:61:e4:6b:57:65:1c:ef:24:87:b4:0d:43:1f:36:
c4:f8:0c:d3:54:11:04:21:0a:eb:ab:30:84:3c:61:65:42:b2:
77:6c:a4:25:ed:3a:38:96:57:e2:54:ff:ee:fa:bc:d1:73:9c:
cc:86:b5:fc:17:71:43:b8:76:4e:1d:10:c7:f7:3e:47:79:0f:
57:1c:d4:df:f4:f9:ac:1a:93:b5:0a:99:fe:65:6b:55:3a:3d:
0f:a3:27:8f:e7:fa:52:62:a6:72:c7:f0:44:a5:88:5e:bc:57:
aa:c3:cf:47:a3:a2:fb:a4:1c:2e:47:f1:d0:69:6a:1f:96:c3:
d1:88:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 16:32:30 2026 by rpki-client