Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8TpzssHqMc5Kha2G7ucirUOXgH8.roa
File: 8TpzssHqMc5Kha2G7ucirUOXgH8.roa (raw, json)
Hash identifier: d6yMZM7c4wozhGQrW6zvuKPviSd82ZOhEYO8u7JSn44=
Subject key identifier: F1:3A:73:B2:C1:EA:31:CE:4A:85:AD:86:EE:E7:22:AD:43:97:80:7F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A144E84463E2DAA91606A569C8929433F5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8TpzssHqMc5Kha2G7ucirUOXgH8.roa
Signing time: Fri 16 Oct 2026 13:30:34 +0000
ROA not before: Fri 16 Oct 2026 13:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 9.247.19.0/24 maxlen: 24
9.247.26.0/24 maxlen: 24
9.247.31.0/24 maxlen: 24
9.247.35.0/24 maxlen: 24
9.247.37.0/24 maxlen: 24
9.247.42.0/24 maxlen: 24
9.247.44.0/24 maxlen: 24
9.247.58.0/24 maxlen: 24
9.247.72.0/24 maxlen: 24
9.247.80.0/24 maxlen: 24
9.247.136.0/24 maxlen: 24
9.247.144.0/24 maxlen: 24
9.247.157.0/24 maxlen: 24
9.247.164.0/24 maxlen: 24
9.247.169.0/24 maxlen: 24
9.247.174.0/24 maxlen: 24
9.247.178.0/24 maxlen: 24
9.247.195.0/24 maxlen: 24
9.247.201.0/24 maxlen: 24
9.247.209.0/24 maxlen: 24
9.247.217.0/24 maxlen: 24
9.247.221.0/24 maxlen: 24
9.247.225.0/24 maxlen: 24
9.247.239.0/24 maxlen: 24
9.247.245.0/24 maxlen: 24
9.247.253.0/24 maxlen: 24
78.17.221.0/24 maxlen: 24
78.17.225.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Oct 2026 12:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:e8:44:63:e2:da:a9:16:06:a5:69:c8:92:94:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 16 13:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f13a73b2c1ea31ce4a85ad86eee722ad4397807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:6b:0a:3a:43:eb:88:11:e2:fa:75:4c:a0:
41:42:01:0e:97:87:29:2b:8a:ef:2c:a9:8a:ba:ca:
66:79:04:27:a4:78:b2:88:cc:eb:6c:fd:70:08:8f:
f9:2c:64:83:18:19:e1:d0:95:d0:83:e4:4c:8f:50:
89:31:cd:6f:ce:18:d5:f6:72:f0:2e:57:c4:df:f6:
15:15:cc:6c:f7:ec:5d:98:a7:cb:9e:c0:4a:ca:3e:
a2:39:c3:53:a1:8c:cb:eb:cf:40:73:79:a9:06:27:
37:59:07:d8:69:f8:55:73:d0:9f:e3:b7:60:23:2c:
0e:2a:6b:bc:a3:cb:64:47:60:f7:b5:77:11:42:2d:
e3:af:7d:c8:60:84:6f:83:72:d6:60:cf:fa:1f:30:
53:e7:8e:b3:a7:eb:18:e1:af:aa:57:7e:4e:70:5a:
da:7f:e0:43:61:9d:e5:cc:95:dc:05:e0:cf:8c:b6:
51:8a:6c:f7:37:8f:15:9b:9f:d0:50:db:50:c9:36:
60:15:59:3e:a5:3d:0b:49:38:20:52:d4:09:78:a0:
fb:04:14:17:48:bd:79:6d:02:f1:68:b5:ee:74:d3:
6d:9e:99:de:03:e3:9d:85:1d:a2:7b:11:a2:ce:8c:
8c:6a:02:fb:f1:2d:e5:43:fa:c6:cd:ce:a8:df:12:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:73:B2:C1:EA:31:CE:4A:85:AD:86:EE:E7:22:AD:43:97:80:7F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8TpzssHqMc5Kha2G7ucirUOXgH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.19.0/24
9.247.26.0/24
9.247.31.0/24
9.247.35.0/24
9.247.37.0/24
9.247.42.0/24
9.247.44.0/24
9.247.58.0/24
9.247.72.0/24
9.247.80.0/24
9.247.136.0/24
9.247.144.0/24
9.247.157.0/24
9.247.164.0/24
9.247.169.0/24
9.247.174.0/24
9.247.178.0/24
9.247.195.0/24
9.247.201.0/24
9.247.209.0/24
9.247.217.0/24
9.247.221.0/24
9.247.225.0/24
9.247.239.0/24
9.247.245.0/24
9.247.253.0/24
78.17.221.0/24
78.17.225.0/24
89.34.106.0/24
93.114.183.0/24
140.225.194.0/23
140.225.215.0/24
153.76.198.0/24
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
212.192.8.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
56:18:7d:33:d7:d2:bc:dd:1d:df:da:43:23:d1:30:1e:89:85:
6c:c8:0e:cf:2b:62:8e:4c:b3:98:74:5a:31:8c:ec:f3:4c:63:
79:a7:54:c2:e5:2f:f4:b2:00:48:3a:32:c7:f8:c3:b6:9a:eb:
33:a3:40:1f:91:70:61:cb:6e:e4:c2:5d:b8:bc:38:1c:9c:9d:
a5:be:dc:f0:07:24:9d:8b:08:25:ce:50:bd:6e:1c:90:1f:bf:
97:eb:eb:6c:35:4d:2c:2a:34:41:a0:af:60:b8:c1:a9:34:2b:
06:94:27:7f:91:37:27:98:34:88:fc:69:13:f6:3a:23:a3:c5:
47:09:74:65:67:df:16:18:36:f7:47:cd:e5:82:50:fb:5d:aa:
dc:c9:76:58:1d:fb:e1:3b:d2:fd:50:51:73:31:50:f2:9c:01:
c3:ab:64:17:b2:4a:08:b3:5a:aa:6b:fb:0a:bb:75:a5:01:82:
9c:c5:5b:d3:03:d0:59:42:6c:52:a2:83:f3:c5:cd:50:97:e7:
16:a7:4f:88:f6:06:0a:ef:b2:c6:0e:54:0c:d5:d7:a4:bd:ba:
c4:bd:df:d7:12:a1:7d:d5:0e:4d:f1:27:bd:e3:27:15:b0:fc:
20:6b:9f:33:51:59:13:b5:57:79:c3:6b:38:8e:e6:8f:c1:d4:
9c:7f:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:53 2026 by rpki-client