Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/os0wGXiaEJbl6DN0YBWmz43WruY.roa
File: os0wGXiaEJbl6DN0YBWmz43WruY.roa (raw, json)
Hash identifier: SYxiMuZwE+kT8xXVIV7+MdEg8vC9HnBSqNxbqj7lTgE=
Subject key identifier: A2:CD:30:19:78:9A:10:96:E5:E8:33:74:60:15:A6:CF:8D:D6:AE:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF0A94058EC07A2DED16B23598D3121BE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/os0wGXiaEJbl6DN0YBWmz43WruY.roa
Signing time: Tue 11 Aug 2026 11:50:51 +0000
ROA not before: Tue 11 Aug 2026 11:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 78.17.94.0/23 maxlen: 23
78.17.174.0/23 maxlen: 23
78.17.196.0/23 maxlen: 23
78.17.210.0/23 maxlen: 23
78.17.214.0/23 maxlen: 23
78.17.220.0/23 maxlen: 23
78.17.222.0/23 maxlen: 23
78.17.224.0/23 maxlen: 23
78.17.226.0/23 maxlen: 23
78.17.230.0/23 maxlen: 23
78.17.232.0/23 maxlen: 23
78.17.236.0/23 maxlen: 23
89.125.46.0/23 maxlen: 23
89.125.132.0/23 maxlen: 23
89.125.134.0/23 maxlen: 23
89.125.182.0/23 maxlen: 23
89.125.194.0/23 maxlen: 23
89.125.224.0/23 maxlen: 23
89.125.228.0/23 maxlen: 23
89.125.232.0/23 maxlen: 23
162.35.246.0/23 maxlen: 23
162.35.248.0/23 maxlen: 23
162.35.252.0/23 maxlen: 23
167.17.36.0/23 maxlen: 23
167.17.42.0/23 maxlen: 23
206.245.140.0/23 maxlen: 23
206.245.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 24 Aug 2026 12:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:a9:40:58:ec:07:a2:de:d1:6b:23:59:8d:31:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 11:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cd3019789a1096e5e833746015a6cf8dd6aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:59:89:5c:c2:b2:8a:f2:d6:4f:57:18:43:
34:3a:e0:26:ba:17:a2:33:ee:e3:97:b8:c0:19:9f:
e7:8f:c5:a3:41:ae:28:70:28:c5:42:ef:ad:6c:b9:
a5:49:7a:5d:74:5d:4c:1a:6b:00:f2:4e:cf:53:e5:
cf:43:b4:72:29:52:58:4e:49:a6:29:0d:02:80:c4:
1d:9b:0e:5d:95:54:ea:f6:11:b5:4a:f5:f4:fb:63:
cf:87:7c:ab:60:7d:08:4d:41:71:a0:30:b7:3a:62:
33:ae:30:e3:e4:07:f0:47:a1:35:b3:48:6a:75:e8:
0d:bf:04:ab:ed:69:93:8a:66:e5:b9:47:c7:45:26:
01:f1:6a:4f:a8:88:85:93:6f:22:a5:d9:88:86:9a:
cc:fc:ff:b3:e9:5a:5e:e6:c9:f1:7c:c3:6d:9a:88:
36:1d:a7:60:3f:28:82:ad:48:5f:32:bd:84:d5:ed:
83:d2:a3:a9:79:be:f6:d0:0e:60:ae:6c:e6:0e:46:
25:fb:e9:3c:17:06:9c:44:6c:10:af:a5:ec:e3:22:
c0:e1:27:69:19:04:15:e3:50:a6:b7:0f:35:0a:96:
42:ad:4f:21:a8:8a:02:b3:71:66:6f:4c:22:9e:5d:
58:d7:9f:a8:2f:7c:6c:43:0c:c8:cf:19:b4:82:ca:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:30:19:78:9A:10:96:E5:E8:33:74:60:15:A6:CF:8D:D6:AE:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/os0wGXiaEJbl6DN0YBWmz43WruY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/23
78.17.174.0/23
78.17.196.0/23
78.17.210.0/23
78.17.214.0/23
78.17.220.0-78.17.227.255
78.17.230.0-78.17.233.255
78.17.236.0/23
89.125.46.0/23
89.125.132.0/22
89.125.182.0/23
89.125.194.0/23
89.125.224.0/23
89.125.228.0/23
89.125.232.0/23
162.35.246.0-162.35.249.255
162.35.252.0/23
167.17.36.0/23
167.17.42.0/23
206.245.140.0/23
206.245.148.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e8:7f:1c:be:b6:3d:ca:78:42:bb:2c:3c:40:b1:e9:36:8e:
4a:5c:5a:bd:2c:d9:24:45:ca:90:7b:8b:63:40:2b:21:e3:06:
23:44:33:c5:ed:53:23:a5:49:22:65:91:0b:40:87:88:61:a7:
be:ed:dd:28:80:df:dc:80:34:6f:85:58:60:5d:07:37:b6:3e:
1d:e8:d5:48:56:d3:b8:b3:6b:01:dd:e5:10:a9:91:3e:b3:89:
38:61:be:bb:d6:ac:93:46:d0:fc:d0:99:96:9b:fa:18:0f:f6:
98:e3:94:1f:9c:d9:48:7e:7e:52:8e:da:74:f5:ae:7f:37:69:
eb:08:bf:e6:79:5a:6f:f8:a8:ea:fc:00:97:c0:19:04:bb:a9:
4d:34:d3:fc:d8:71:c4:2c:83:9a:0c:de:2e:72:60:f4:e7:15:
f0:fe:b9:34:05:b6:8a:ac:00:22:0a:85:41:d0:bf:c5:4b:bc:
2f:d9:6c:1d:29:22:5d:e9:2d:3f:ea:4e:f7:98:26:29:96:1a:
7e:57:05:1e:d3:16:90:c3:f3:60:34:1f:70:71:a1:b1:fc:04:
8b:b6:fe:13:fe:6a:f5:0e:1f:42:de:09:46:fe:71:71:2b:5c:
2a:b9:66:44:c5:04:7a:b6:40:36:3c:4d:96:c1:4c:23:8d:fd:
bd:26:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:53 2026 by rpki-client