Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZQVgS7RnwWrnjPNqE6YtG3NMlqw.roa
File: ZQVgS7RnwWrnjPNqE6YtG3NMlqw.roa (raw, json)
Hash identifier: fN15LKWHR6SF1XwfPK3eWklifjBS+YfZf4kUozLIJIk=
Subject key identifier: 65:05:60:4B:B4:67:C1:6A:E7:8C:F3:6A:13:A6:2D:1B:73:4C:96:AC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FDB497922EECEA1258976215BBA521A92
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZQVgS7RnwWrnjPNqE6YtG3NMlqw.roa
Signing time: Fri 07 Aug 2026 08:14:13 +0000
ROA not before: Fri 07 Aug 2026 08:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.125.99.0/24 maxlen: 24
89.125.100.0/24 maxlen: 24
89.125.101.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Aug 2026 11:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:49:79:22:ee:ce:a1:25:89:76:21:5b:ba:52:1a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 08:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6505604bb467c16ae78cf36a13a62d1b734c96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:75:0e:a5:3d:ae:d6:bc:30:83:da:22:0e:
4a:79:72:cf:a0:b2:f9:94:55:de:20:2f:6a:8f:bf:
2a:b4:9b:d4:0a:29:8c:a7:59:a6:9b:4c:9c:ca:7c:
e9:b5:0e:9b:0e:30:8c:29:30:cd:9b:35:2e:4a:bb:
45:3d:30:ea:e1:b6:46:91:9d:84:a5:4c:2f:48:05:
be:45:be:be:04:33:d2:28:35:20:39:52:b7:c8:45:
56:c4:e4:17:7a:27:6b:18:5a:4d:c8:c1:c6:88:bd:
8a:b7:90:cb:31:d5:f2:72:70:ed:bc:88:33:43:cb:
ab:67:e0:21:3f:16:e3:48:79:61:81:37:b0:63:59:
90:d0:57:00:00:03:1f:d0:8a:f3:6f:a3:09:68:f4:
d9:45:04:9a:68:59:35:51:7d:97:20:30:6a:c6:1b:
ec:cc:96:1b:a1:ee:3b:ba:3d:8c:0a:56:d9:24:fb:
dd:8e:26:96:06:fc:10:70:04:98:b2:df:7b:99:dc:
8e:75:e5:4f:c3:cc:35:79:3e:28:07:62:cb:13:85:
f4:93:4c:87:ca:7a:a5:e5:96:4e:ca:64:c9:8e:93:
02:9e:ae:33:7d:89:a1:b5:46:8b:3f:6e:ea:41:d2:
92:9c:b1:4d:69:a9:6a:8c:0e:93:7e:45:b9:0d:fd:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:60:4B:B4:67:C1:6A:E7:8C:F3:6A:13:A6:2D:1B:73:4C:96:AC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZQVgS7RnwWrnjPNqE6YtG3NMlqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
78.17.19.0/24
78.17.115.0/24
89.34.106.0/24
89.40.36.0/24
89.40.215.0/24
89.47.36.0/24
89.125.99.0-89.125.101.255
89.125.120.0/24
89.125.129.0/24
89.125.168.0/24
93.115.107.0/24
104.143.218.0/24
128.0.41.0/24
185.198.233.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
78:60:3f:45:bb:17:56:a0:6b:5c:f9:bf:36:c0:cc:40:d0:48:
59:26:a8:49:bd:f0:a8:94:ea:ee:8b:d6:e1:5e:d0:b7:de:1f:
ee:99:6a:58:84:8c:e4:89:08:71:a0:42:47:12:15:a8:21:a3:
d7:6d:0c:8f:d5:cc:d2:3d:ae:66:f9:1c:5a:17:b9:5e:af:c4:
5e:6c:96:42:c6:a1:88:fe:5b:66:d0:5c:30:ec:21:bc:d5:e9:
bb:88:46:75:ae:dc:79:3f:95:fa:c4:df:f1:2c:c0:98:92:67:
9b:c7:ba:f4:8f:d8:93:9b:f4:10:4c:85:2b:a5:ea:69:af:eb:
77:ce:31:a3:56:b4:7b:73:a4:a8:82:3b:c5:a6:bd:14:f6:7a:
22:08:0b:db:ad:4f:b6:4a:1f:31:5b:ca:03:48:d2:83:63:a9:
31:c1:80:61:38:5f:ae:ee:ad:bc:75:02:40:52:71:90:6a:89:
00:5e:a6:42:5f:93:e2:e7:da:66:c2:16:8b:1a:1c:05:16:1c:
1b:96:d4:95:92:57:dd:0b:d1:97:e4:b4:2a:94:09:18:61:94:
d5:8c:a2:a4:d1:e2:42:12:8b:55:ba:3e:55:f3:a4:9a:88:99:
c0:cb:2e:14:9b:78:2f:e5:17:63:74:a2:3b:83:f4:f5:41:78:
6f:65:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:15:41 2026 by rpki-client