Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFT5uVZuJC4QL0o9rmiSsqHcKyc.roa
File: qFT5uVZuJC4QL0o9rmiSsqHcKyc.roa (raw, json)
Hash identifier: CzmJgqK2pKVfOrQV11O2tKOGzzrzN1Qc71kkVb7vuP0=
Subject key identifier: A8:54:F9:B9:56:6E:24:2E:10:2F:4A:3D:AE:68:92:B2:A1:DC:2B:27
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019ECF4E951B63389BFAB31B7E15F0D831CB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFT5uVZuJC4QL0o9rmiSsqHcKyc.roa
Signing time: Tue 16 Jun 2026 07:21:34 +0000
ROA not before: Tue 16 Jun 2026 07:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.129.0/24 maxlen: 24
78.17.236.0/24 maxlen: 24
78.17.237.0/24 maxlen: 24
78.17.238.0/24 maxlen: 24
78.17.239.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.193.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jun 2026 11:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:4e:95:1b:63:38:9b:fa:b3:1b:7e:15:f0:d8:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 07:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a854f9b9566e242e102f4a3dae6892b2a1dc2b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:45:a2:5b:92:a9:dd:5b:f8:31:a3:ec:77:
50:f5:f5:0e:60:9c:e4:3e:fa:b7:28:a3:9e:92:e5:
cf:e9:6e:41:9e:0c:2b:29:3f:32:67:69:5b:82:3e:
d7:46:ec:35:42:a5:8b:c0:6b:31:11:1f:45:9d:5e:
84:de:93:b8:28:f1:f1:bd:5e:78:0f:21:37:37:85:
91:1e:5e:6d:6b:75:ea:bb:8f:6c:c5:75:b0:2c:cb:
07:43:f1:ba:f7:db:61:b9:3b:39:59:a2:32:e7:56:
93:49:d4:f4:0f:6e:a5:42:8e:8a:2b:51:fe:4f:eb:
90:37:60:b3:ff:78:c7:14:5e:91:86:1f:a8:e1:30:
e4:3a:d7:0a:88:09:a0:88:cf:a0:85:c0:5d:90:a6:
0b:c1:7c:64:62:f5:86:6b:0b:fb:d6:d6:56:ea:9d:
6c:5e:85:df:38:bc:90:3b:c4:3d:6c:2a:2b:0d:b6:
d8:46:e1:0b:1c:e9:38:30:69:81:d1:43:dc:dd:63:
12:57:e0:5b:07:b7:d8:0c:5d:8a:7b:48:ae:0a:d0:
ef:a5:ef:80:f8:c1:1f:4f:39:77:86:e4:de:e7:a9:
f3:91:b6:1d:91:88:ee:ea:44:d9:03:2c:48:81:e4:
57:3e:75:14:15:9b:81:da:9a:2d:c9:b9:34:4a:af:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:F9:B9:56:6E:24:2E:10:2F:4A:3D:AE:68:92:B2:A1:DC:2B:27
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qFT5uVZuJC4QL0o9rmiSsqHcKyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.129.0/24
78.17.236.0/22
89.34.106.0/24
89.125.126.0/24
89.125.193.0/24
93.114.183.0/24
103.245.228.0/24
140.225.194.0/24
140.225.199.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d3:89:0d:cf:37:9c:ca:c2:f6:59:10:0e:cb:c2:61:c5:d2:
31:3d:81:04:be:30:86:21:7d:b0:d5:31:09:35:10:9e:a1:b0:
cb:53:1d:81:ee:48:32:c7:cd:e6:c6:88:27:0e:0d:dc:a9:aa:
54:33:3b:7f:24:69:7e:30:39:46:5e:f3:05:b9:dc:c7:d0:98:
b1:a1:74:59:e9:2d:89:86:17:79:c9:db:72:73:29:12:c3:0a:
3a:d1:d4:b5:6f:65:69:cd:d4:09:3c:b9:75:bd:e2:c8:50:54:
0c:0d:f2:fd:02:a9:4a:2b:24:01:4d:f3:b7:ed:fe:a6:f9:61:
2e:be:84:2c:f4:fb:81:57:13:fb:11:ea:75:c8:11:9b:61:d4:
c1:c3:96:23:ca:7e:7c:01:0d:b9:79:a1:a6:e1:78:ba:3f:53:
09:2c:90:46:73:dc:16:3c:7d:c5:81:d8:a1:e9:f2:46:6e:97:
1f:e8:a9:fe:3f:e2:4a:26:84:2b:c3:1a:f4:cd:fc:71:82:79:
8d:3a:36:7d:33:20:49:48:92:79:2b:03:77:58:4f:86:a9:72:
6e:27:0c:34:a1:5e:0a:5c:c5:bf:7d:1a:1a:e0:9e:a1:82:ca:
09:10:ea:2b:c1:6f:b2:33:92:9d:b6:41:d9:50:36:49:9c:16:
f3:54:a6:6d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ7PTpUbYzib+rMbfhXw2DHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNjE2MDcyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODU0ZjliOTU2NmUyNDJlMTAyZjRhM2RhZTY4OTJiMmExZGMyYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5xFoluSqd1b+DGj7HdQ9fUOYJzk
Pvq3KKOekuXP6W5BngwrKT8yZ2lbgj7XRuw1QqWLwGsxER9FnV6E3pO4KPHxvV54
DyE3N4WRHl5ta3Xqu49sxXWwLMsHQ/G699thuTs5WaIy51aTSdT0D26lQo6KK1H+
T+uQN2Cz/3jHFF6Rhh+o4TDkOtcKiAmgiM+ghcBdkKYLwXxkYvWGawv71tZW6p1s
XoXfOLyQO8Q9bCorDbbYRuELHOk4MGmB0UPc3WMSV+BbB7fYDF2Ke0iuCtDvpe+A
+MEfTzl3huTe56nzkbYdkYju6kTZAyxIgeRXPnUUFZuB2potybk0Sq/HnQIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFKhU+blWbiQuEC9KPa5okrKh3CsnMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcUZUNXVWWnVKQzRRTDBvOXJtaVNzcUhjS3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAE4RgQME
Ak4R7AMEAFkiagMEAFl9fgMEAFl9wQMEAF1ytwMEAGf15AMEAIzhwgMEAIzhxwME
AMI6LwMEAM71nAMEAM71njAMAwQA1MAHAwQA1MAIAwQA1MAKAwQA1MAeAwQA1MDQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAI04kNzzecysL2WRAOy8JhxdIxPYEEvjCGIX2w
1TEJNRCeobDLUx2B7kgyx83mxognDg3cqapUMzt/JGl+MDlGXvMFudzH0JixoXRZ
6S2Jhhd5ydtycykSwwo60dS1b2VpzdQJPLl1veLIUFQMDfL9AqlKKyQBTfO37f6m
+WEuvoQs9PuBVxP7Eep1yBGbYdTBw5Yjyn58AQ25eaGm4Xi6P1MJLJBGc9wWPH3F
gdih6fJGbpcf6Kn+P+JKJoQrwxr0zfxxgnmNOjZ9MyBJSJJ5KwN3WE+GqXJuJww0
oV4KXMW/fRoa4J6hgsoJEOorwW+yM5KdtkHZUDZJnBbzVKZt
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:59:46 2026 by rpki-client