Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hSJhP3T9LkNiZzD2u0RxoSTQOpg.roa
File: hSJhP3T9LkNiZzD2u0RxoSTQOpg.roa (raw, json)
Hash identifier: fESg2Niy49PpTGhI8bcQQMt0jxbZf1oYc0wj+s2rpp0=
Subject key identifier: 85:22:61:3F:74:FD:2E:43:62:67:30:F6:BB:44:71:A1:24:D0:3A:98
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A17A23704B7D15BE6110694078283B724B
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hSJhP3T9LkNiZzD2u0RxoSTQOpg.roa
Signing time: Mon 26 Oct 2026 21:35:05 +0000
ROA not before: Mon 26 Oct 2026 21:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.124.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 07:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:23:70:4b:7d:15:be:61:10:69:40:78:28:3b:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 26 21:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8522613f74fd2e43626730f6bb4471a124d03a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:cd:11:78:04:df:fb:50:62:d4:4b:23:30:
1f:cf:ef:0f:71:a6:ee:cf:bb:96:dc:be:01:d4:82:
cf:c9:80:3d:f7:c8:f3:32:a5:fa:15:4a:ec:aa:50:
dd:04:40:8f:06:e5:8b:09:01:d5:9e:3f:58:d0:cb:
76:cd:76:13:de:42:dd:c8:07:52:15:de:92:cd:eb:
88:13:6e:f8:fd:d8:2b:df:91:68:28:45:51:e5:bb:
6f:56:c2:24:4c:15:8f:e9:51:5e:7e:1d:f8:e2:4b:
ac:cd:45:5e:16:87:81:08:7f:b4:ff:06:78:ef:ee:
64:27:dd:99:c3:18:95:de:fe:a8:b9:55:f4:89:2a:
ba:76:23:bf:0e:cb:da:f8:4e:ee:2e:50:6e:a2:3b:
ff:50:23:18:01:33:c5:ae:48:ef:69:ea:af:a9:c4:
5d:52:bd:b7:e7:6f:12:7b:6b:55:e9:0d:29:0a:15:
36:37:b9:cb:1d:2b:4c:e2:d7:ab:17:ff:0c:ae:82:
fb:e9:ec:f0:51:06:62:26:fa:1c:fe:3b:66:5d:0b:
f0:9e:96:da:1e:92:b5:d6:26:78:41:be:f6:5f:4a:
41:5a:74:88:8b:50:a4:72:39:eb:ef:73:4f:b5:86:
05:cb:75:46:7e:08:ef:79:d6:5e:fa:9a:3b:8b:8f:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:61:3F:74:FD:2E:43:62:67:30:F6:BB:44:71:A1:24:D0:3A:98
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hSJhP3T9LkNiZzD2u0RxoSTQOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
201.3.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6a:8f:53:6b:80:3a:cf:c2:99:a9:1c:ce:db:13:af:c2:73:
01:38:04:57:a2:10:1e:7a:a0:3a:17:b8:7d:38:79:eb:eb:32:
4f:d5:95:2c:0c:f1:e5:eb:ea:e5:fe:83:01:6a:f9:30:42:e3:
64:22:b1:fc:cb:7b:b0:d8:c0:f6:43:71:13:0d:b2:fe:67:af:
78:de:13:0c:63:6c:d7:65:8e:0f:25:8d:32:14:bd:e4:be:d7:
11:65:0d:46:a6:f7:03:98:e0:0f:52:c8:3b:97:a2:a3:38:02:
39:c2:4b:25:0a:c2:c7:1b:d8:86:0f:13:7c:41:b8:0e:47:6b:
35:d8:60:15:79:17:e7:e3:a3:41:23:6a:17:7e:22:e5:8e:ba:
4d:09:99:4d:02:79:d8:17:8d:4d:61:d3:fe:3d:cd:6f:f2:8e:
e6:f5:84:ec:b2:02:31:c1:a1:fb:91:87:1a:6f:e2:da:e5:88:
c3:10:79:22:ea:74:29:4f:4b:e6:4e:d9:13:17:ac:ea:bf:fa:
a8:ed:73:08:4e:b7:3e:9a:bf:d8:9c:68:65:f7:ec:b0:c8:49:
77:61:60:87:31:ee:0c:f0:a8:cf:c3:01:c9:a9:34:c3:5f:ec:
d7:56:66:fd:94:f1:fa:a1:39:f5:c3:8d:bb:77:27:80:09:b1:
41:7b:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:46 2026 by rpki-client