Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/pMPQ6GaRsAsOrowt6oqCV4eXFp4.roa
File: pMPQ6GaRsAsOrowt6oqCV4eXFp4.roa (raw, json)
Hash identifier: 6qh2adreEVGElo/pyBGqBNLYjICyzIKg0IdbNYB0GZU=
Subject key identifier: A4:C3:D0:E8:66:91:B0:0B:0E:AE:8C:2D:EA:8A:82:57:87:97:16:9E
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A05C2C26B1A4B68DC1F17185A5F2654B49
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/pMPQ6GaRsAsOrowt6oqCV4eXFp4.roa
Signing time: Tue 01 Sep 2026 08:53:12 +0000
ROA not before: Tue 01 Sep 2026 08:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.172.0/22 maxlen: 22
94.228.173.0/24 maxlen: 24
94.228.174.0/24 maxlen: 24
94.228.175.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Sep 2026 12:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:2c:26:b1:a4:b6:8d:c1:f1:71:85:a5:f2:65:4b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Sep 1 08:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c3d0e86691b00b0eae8c2dea8a82578797169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:29:a3:21:95:45:96:cb:b5:e2:b5:2f:66:
46:9f:1d:43:dd:71:79:50:42:44:fb:3a:56:82:33:
3b:51:3f:11:2d:17:a0:d9:e5:03:a1:2f:3a:bc:44:
44:5a:14:cf:11:27:af:f3:69:bb:41:44:1d:f9:a4:
30:4a:c7:a1:19:64:01:63:ca:2b:77:40:c1:2f:8f:
bd:c7:47:9f:46:1c:4d:82:33:87:48:05:3a:ec:0c:
99:e6:b0:e7:48:ac:3c:74:d3:7c:c8:1b:e4:9b:70:
6f:51:a4:b3:e7:6b:21:49:86:22:4c:86:78:c4:35:
0d:1f:b4:78:22:05:e9:8f:e8:c6:5b:eb:45:f9:17:
9d:f3:ed:9a:f0:2f:fd:ef:13:6b:ff:0a:c1:f3:e5:
0d:19:b9:34:8e:3b:aa:55:a6:02:e7:0e:14:81:f0:
a4:86:64:e3:d0:b3:59:5d:0d:9b:33:bf:b6:5c:52:
c2:74:0e:fc:bb:22:bb:c3:fe:ab:6a:b1:87:7b:d8:
c8:73:02:cd:d8:47:7a:7b:fd:69:5f:9b:e7:d1:27:
4c:8b:5c:fd:44:47:28:cb:77:64:b9:82:f5:55:00:
dd:80:59:93:0c:12:4c:de:e9:93:2a:a8:cc:e1:44:
5f:23:1f:8a:6b:08:31:99:3f:8c:96:7f:c9:1a:1a:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:D0:E8:66:91:B0:0B:0E:AE:8C:2D:EA:8A:82:57:87:97:16:9E
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/pMPQ6GaRsAsOrowt6oqCV4eXFp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.172.0/22
178.236.242.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
26:bc:f7:2f:0c:ee:ca:ae:e2:c5:de:68:a6:ae:9a:47:ae:22:
c8:d6:58:63:3f:5a:c5:c0:dd:9d:19:d2:ac:47:de:dd:19:a1:
79:9d:e2:06:78:ff:b4:f6:f5:f3:4d:23:82:08:f6:d2:92:9c:
af:8a:c5:98:25:f4:ce:ce:5e:7e:85:9f:57:62:07:cc:5d:2e:
47:82:51:ee:cb:0e:3e:42:a0:92:97:c0:b3:6f:38:72:7d:e4:
2e:e2:2c:a7:b2:71:0a:bb:0b:10:45:fa:77:9d:19:19:58:af:
57:8a:de:7c:ac:b0:81:93:77:e5:97:f9:0b:74:fa:48:f0:d0:
bd:fd:8c:64:c2:f3:33:4d:8d:0b:7b:43:33:f3:58:f1:ba:9c:
19:b5:cc:bc:e5:07:1e:4c:e4:42:c8:57:5f:16:af:60:99:0b:
84:97:08:d1:ad:64:b7:9e:b1:e9:04:06:b4:56:e9:48:2f:51:
77:95:e0:cc:90:d3:f9:b1:11:98:58:66:0d:b3:cd:42:dd:fb:
c8:a3:5c:5b:ff:eb:fa:4f:fa:b9:19:89:c7:0d:69:4d:b2:74:
cb:02:43:ec:13:9f:b7:45:65:44:15:2e:33:b6:6e:06:7f:b4:
91:04:56:4d:6b:a7:ee:a5:83:a7:26:c9:14:09:50:7f:fa:a3:
ed:c8:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:21 2026 by rpki-client