Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2gIcHxqZyU2QuTbMquiB38G8UoI.roa
File: 2gIcHxqZyU2QuTbMquiB38G8UoI.roa (raw, json)
Hash identifier: 1ZQdit/FU6uFzkHVy7DckHZX2YsDokf51o658ozOwEM=
Subject key identifier: DA:02:1C:1F:1A:99:C9:4D:90:B9:36:CC:AA:E8:81:DF:C1:BC:52:82
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF62ED3E8325425B90228240F11FA7884
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2gIcHxqZyU2QuTbMquiB38G8UoI.roa
Signing time: Wed 12 Aug 2026 13:34:51 +0000
ROA not before: Wed 12 Aug 2026 13:34:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.22.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
140.225.220.0/22 maxlen: 22
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Aug 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:2e:d3:e8:32:54:25:b9:02:28:24:0f:11:fa:78:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 12 13:34:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da021c1f1a99c94d90b936ccaae881dfc1bc5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:62:2a:3d:c3:b2:2e:cc:50:7f:8f:53:69:
17:f0:49:81:92:34:7e:91:c7:db:86:ae:87:2e:c7:
0a:d0:a4:6b:20:45:bc:79:c2:b2:1a:4d:30:4c:2d:
85:37:4e:6a:12:f8:85:f0:8c:ce:66:87:4f:f5:84:
ca:cf:65:d5:05:9b:72:f1:12:ad:b9:06:f2:0e:b3:
87:d6:9a:fc:60:06:f9:a1:15:d1:e2:ee:2d:02:b7:
23:3b:9e:f1:2a:0b:08:06:bf:a0:78:17:8e:86:61:
7d:e9:5e:61:6c:fe:a1:fb:72:cb:ab:6f:07:36:c7:
3b:bc:e7:bc:53:1b:c7:ec:d2:af:1a:65:5d:93:68:
14:76:69:77:3c:bc:1c:ec:ac:fa:76:94:a3:55:f9:
5b:78:dd:c0:33:97:ac:35:36:b8:84:39:30:2f:bd:
0e:3c:13:5d:8f:10:f5:c0:00:36:fc:61:ce:6a:d9:
58:bd:45:2b:1e:1a:a9:cb:d7:78:9a:f8:06:6e:c1:
91:7a:33:11:32:fb:d4:98:24:3b:a3:5a:92:20:27:
14:93:39:cd:15:7b:52:3f:1b:2a:40:d3:74:9d:d4:
dd:15:98:d2:4a:6c:d5:13:72:0e:e3:05:de:ec:76:
e4:35:a0:e5:5d:e6:36:11:37:61:90:32:17:7e:d4:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:02:1C:1F:1A:99:C9:4D:90:B9:36:CC:AA:E8:81:DF:C1:BC:52:82
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2gIcHxqZyU2QuTbMquiB38G8UoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.22.0/24
89.34.106.0/24
93.114.183.0/24
140.225.194.0/23
140.225.199.0/24
140.225.220.0/22
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:17:24:d4:96:cd:10:61:9f:44:aa:00:c6:e2:92:8b:86:77:
59:70:11:71:af:6f:68:3d:a8:c1:34:af:b5:6a:3e:c5:82:4b:
3a:da:b2:96:89:17:7a:9d:e9:3a:aa:fa:c0:4b:fd:77:1d:66:
63:ad:cb:ff:82:64:d4:88:db:87:5e:8b:de:ca:ca:f4:30:fc:
58:3b:45:4b:3b:5a:a6:68:dd:83:fd:96:d1:d3:80:68:3f:80:
29:09:71:b3:cc:41:65:0d:4b:67:c7:fb:28:4a:d5:d2:6d:20:
80:90:b4:54:55:e5:38:dc:85:d7:1a:1f:52:67:00:34:85:4c:
89:fc:79:01:4b:ef:32:1a:f3:c7:14:c3:72:25:4e:08:70:2a:
3b:51:7a:58:76:4d:51:a3:e0:45:3d:b2:95:62:8b:09:55:02:
1a:f4:d1:68:d0:2e:44:25:24:aa:5e:64:87:e1:49:38:91:8b:
e0:71:eb:4b:92:24:e3:9c:ea:36:98:37:b1:94:76:fd:a1:c1:
bd:9b:f4:b2:09:1e:ce:9d:81:b4:c4:c0:2a:9b:23:ff:26:5a:
6d:c5:f1:6d:8c:a3:91:ab:2d:21:cf:69:3a:71:52:39:1a:10:
0e:62:4b:3c:5e:63:9b:9c:65:eb:ed:c7:5d:91:4b:1c:a4:f1:
dc:e7:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:15 2026 by rpki-client