Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QPWzhG3hfnq8JfxKzc1zgPQS5Og.roa
File: QPWzhG3hfnq8JfxKzc1zgPQS5Og.roa (raw, json)
Hash identifier: JKBYhpPaJZ+RtqEHu642y23wd9iEMR3+HrLkGrgLtwc=
Subject key identifier: 40:F5:B3:84:6D:E1:7E:7A:BC:25:FC:4A:CD:CD:73:80:F4:12:E4:E8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF09E4317FBE3E692CE6596BB948B7BB5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QPWzhG3hfnq8JfxKzc1zgPQS5Og.roa
Signing time: Tue 11 Aug 2026 11:38:51 +0000
ROA not before: Tue 11 Aug 2026 11:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 78.17.170.0/23 maxlen: 23
78.17.178.0/23 maxlen: 23
89.125.31.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.166.0/23 maxlen: 23
89.125.174.0/23 maxlen: 23
103.110.39.0/24 maxlen: 24
104.143.208.0/23 maxlen: 23
104.143.210.0/23 maxlen: 23
140.225.192.0/24 maxlen: 24
140.225.198.0/23 maxlen: 23
140.225.206.0/23 maxlen: 23
140.225.212.0/23 maxlen: 23
140.225.214.0/24 maxlen: 24
153.76.198.0/23 maxlen: 23
153.76.202.0/23 maxlen: 23
153.76.212.0/23 maxlen: 23
153.76.214.0/23 maxlen: 23
153.76.216.0/23 maxlen: 23
153.76.221.0/24 maxlen: 24
162.35.224.0/23 maxlen: 23
162.35.242.0/23 maxlen: 23
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 14 Aug 2026 18:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:9e:43:17:fb:e3:e6:92:ce:65:96:bb:94:8b:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 11:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40f5b3846de17e7abc25fc4acdcd7380f412e4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:0d:06:73:61:f1:f7:61:ea:19:2e:12:1d:
e8:c2:d4:d1:82:1f:24:5c:72:4f:9c:7c:64:5c:45:
8a:cb:2e:b7:57:43:56:d4:7d:99:1c:fa:7e:b7:a0:
e1:ea:31:ae:7a:90:44:5b:36:c4:7d:2f:c5:5e:d1:
fe:85:d6:18:c6:40:ee:78:3a:83:43:ef:4c:25:8b:
5c:18:dd:cd:ec:7c:55:1c:69:c6:44:58:b6:c4:2a:
4a:a2:d5:6f:8a:7e:c1:d5:aa:01:03:13:11:30:03:
46:a2:8e:46:a2:ac:d1:bc:36:f0:23:a3:d4:5b:04:
b6:b2:1b:1f:f5:2c:f5:ec:4c:18:b2:b8:56:1e:cf:
8d:76:5e:92:92:aa:e8:4f:d0:12:53:44:82:45:d5:
06:02:97:3c:84:79:2a:0b:70:b7:34:69:79:63:60:
0f:1d:b4:db:41:df:38:a4:6a:0b:dc:20:a8:b7:8e:
04:f7:ef:74:f1:3a:8f:87:0d:ec:23:0d:5f:7a:0d:
c5:02:ce:bf:8f:22:f8:bf:f9:98:a9:c1:4d:18:40:
97:7e:67:ff:51:c7:50:ef:ff:58:c6:b7:78:b8:22:
ad:c6:b7:df:c4:39:0d:d0:47:29:7c:03:25:95:de:
80:e1:8e:6e:92:03:09:40:35:b1:b1:c5:da:61:8e:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:B3:84:6D:E1:7E:7A:BC:25:FC:4A:CD:CD:73:80:F4:12:E4:E8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QPWzhG3hfnq8JfxKzc1zgPQS5Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.170.0/23
78.17.178.0/23
89.125.31.0/24
89.125.143.0/24
89.125.166.0/23
89.125.174.0/23
103.110.39.0/24
104.143.208.0/22
140.225.192.0/24
140.225.198.0/23
140.225.206.0/23
140.225.212.0-140.225.214.255
153.76.198.0/23
153.76.202.0/23
153.76.212.0-153.76.217.255
153.76.221.0/24
162.35.224.0/23
162.35.242.0-162.35.245.255
167.17.32.0/23
167.17.38.0/23
Signature Algorithm: sha256WithRSAEncryption
24:58:4d:50:02:6c:6f:54:26:62:7c:4e:48:67:ca:f1:f6:ba:
c1:b1:9f:bc:04:e9:db:93:02:e0:51:61:38:8f:d4:70:13:9d:
22:f8:a0:b6:41:52:47:1f:65:50:a3:cc:ef:f4:4d:38:8f:00:
73:3c:9c:50:18:e2:a8:2f:f6:fb:60:0f:e9:bd:b6:b7:52:4e:
58:73:de:9d:4c:e8:6c:42:88:a5:90:e8:2d:1a:18:14:6a:7b:
6a:f7:48:b7:55:f5:fd:f8:e8:e2:21:d2:e1:34:08:1f:00:55:
4e:5f:c4:90:03:98:d7:9e:26:74:83:56:94:ff:74:0a:ea:af:
db:ae:96:b4:16:b8:57:e8:22:a9:24:30:a4:e1:6f:b3:50:b2:
f3:0c:2f:2c:63:90:09:c7:ef:dc:6e:00:42:89:26:f7:35:71:
fe:68:37:13:85:63:a0:da:f3:c6:58:f0:f3:35:db:52:c9:b4:
6b:8e:34:89:e7:6e:3c:be:71:51:19:76:58:67:04:d1:e9:06:
d1:9a:12:01:85:42:be:c7:62:ff:65:60:0d:40:d9:52:8b:55:
8c:c7:d6:41:3c:4c:59:73:e3:36:51:4c:5a:41:97:d0:77:0f:
f7:20:c3:50:70:79:7e:68:11:03:22:be:d8:80:b3:84:b8:bc:
38:98:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:57 2026 by rpki-client