Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-FCbRo4tchYtaW1i1PP8rp-3pto.roa
File: 1-FCbRo4tchYtaW1i1PP8rp-3pto.roa (raw, json)
Hash identifier: nRtjsDQo7rji5yU55Sw2LfkA8EMgEGSWQspYUBOURx0=
Subject key identifier: F8:50:9B:46:8E:2D:72:16:2D:69:6D:62:D4:F3:FC:AE:9F:B7:A6:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A038CC19255A12D2A2CDDC1E76DCABBE89
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-FCbRo4tchYtaW1i1PP8rp-3pto.roa
Signing time: Tue 25 Aug 2026 12:01:34 +0000
ROA not before: Tue 25 Aug 2026 12:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.109.195.0/24 maxlen: 24
82.109.198.0/24 maxlen: 24
87.82.195.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.61.0/24 maxlen: 24
87.83.62.0/24 maxlen: 24
87.83.165.0/24 maxlen: 24
87.83.194.0/24 maxlen: 24
87.83.197.0/24 maxlen: 24
87.83.198.0/24 maxlen: 24
87.84.133.0/24 maxlen: 24
87.86.19.0/24 maxlen: 24
87.86.23.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.138.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.146.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.192.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.194.0/24 maxlen: 24
212.134.196.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.235.0/24 maxlen: 24
212.134.236.0/24 maxlen: 24
212.135.25.0/24 maxlen: 24
212.135.64.0/24 maxlen: 24
212.135.65.0/24 maxlen: 24
212.135.68.0/24 maxlen: 24
212.135.69.0/24 maxlen: 24
212.135.71.0/24 maxlen: 24
212.135.73.0/24 maxlen: 24
212.135.75.0/24 maxlen: 24
212.135.79.0/24 maxlen: 24
212.135.96.0/24 maxlen: 24
212.135.97.0/24 maxlen: 24
212.135.101.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.137.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.206.0/24 maxlen: 24
212.135.207.0/24 maxlen: 24
212.135.245.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Aug 2026 13:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:cc:19:25:5a:12:d2:a2:cd:dc:1e:76:dc:ab:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 25 12:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8509b468e2d72162d696d62d4f3fcae9fb7a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:03:b2:bf:a9:b7:c4:28:56:d5:73:94:e5:
1c:0c:5a:1a:df:1f:1f:c7:ac:62:59:bd:a5:3e:c1:
bc:2d:8a:44:6b:87:f5:55:2b:3e:c3:2e:f5:85:42:
d0:78:d3:aa:b9:3e:31:25:c5:05:6a:5b:4c:bd:f2:
3e:79:fa:12:80:2c:43:a7:2d:90:8c:1e:d3:b7:14:
98:6f:0d:59:e4:75:07:b1:8e:89:8e:59:83:e9:db:
42:06:13:02:ee:77:57:f3:8e:e3:03:fd:1e:56:59:
77:9b:31:28:14:84:0a:b3:a8:a1:f2:80:31:98:93:
51:07:fe:ab:6a:92:dc:90:47:5d:34:29:97:1d:7f:
ca:d3:a5:22:dd:2a:98:9c:78:81:e4:9a:94:8b:d1:
6f:e1:2c:f9:c8:d2:8c:bf:d1:87:40:54:d1:e9:2a:
11:82:01:27:e7:0d:fe:49:10:db:1b:98:c7:10:e0:
db:b1:68:2e:80:2b:65:f2:04:ab:1d:1b:19:fe:4c:
4c:96:12:de:0c:dc:c6:60:42:60:9f:d6:0d:9a:ca:
c9:f4:04:b4:6a:05:48:a3:94:63:4e:b6:79:4b:15:
79:8c:cc:8b:64:6e:49:96:42:c3:1c:1f:05:c1:2d:
f3:cd:fc:34:e1:24:51:59:50:52:43:9d:f7:2a:0a:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:9B:46:8E:2D:72:16:2D:69:6D:62:D4:F3:FC:AE:9F:B7:A6:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-FCbRo4tchYtaW1i1PP8rp-3pto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.195.0/24
82.109.198.0/24
87.82.195.0-87.82.196.255
87.82.243.0/24
87.82.247.0/24
87.83.61.0-87.83.62.255
87.83.165.0/24
87.83.194.0/24
87.83.197.0-87.83.198.255
87.84.133.0/24
87.86.19.0/24
87.86.23.0/24
212.134.36.0/24
212.134.138.0/23
212.134.146.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.192.0-212.134.194.255
212.134.196.0/24
212.134.200.0/24
212.134.230.0/24
212.134.235.0-212.134.236.255
212.135.25.0/24
212.135.64.0/23
212.135.68.0/23
212.135.71.0/24
212.135.73.0/24
212.135.75.0/24
212.135.79.0/24
212.135.96.0/23
212.135.101.0/24
212.135.129.0/24
212.135.137.0/24
212.135.155.0/24
212.135.206.0/23
212.135.245.0/24
212.135.252.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d6:26:af:23:f0:b7:aa:d2:e8:6a:c2:d5:e6:68:51:b5:e9:
7c:c3:e2:1c:b3:01:47:c3:37:d6:dc:63:22:ce:22:d2:06:2a:
24:fe:3c:04:c1:74:06:42:16:78:54:a2:d8:0d:7b:e3:71:90:
34:ea:4a:de:7a:0b:2b:37:c4:c3:f6:25:58:d6:40:82:97:1e:
ed:a6:07:5f:3a:6c:56:c4:14:5b:c9:93:21:b9:78:7e:0a:88:
87:53:87:0f:d1:e9:9f:6c:7c:35:ae:31:d8:27:0a:cc:c7:a3:
bf:2e:c8:35:67:9f:5d:48:0c:b5:19:ee:8a:54:30:00:47:06:
89:49:98:ba:2d:76:e9:46:85:19:e6:34:63:64:3e:30:3f:1b:
b1:d5:76:ea:32:20:b0:1d:25:a2:e2:2f:c9:01:c7:df:f3:f4:
70:d1:c2:41:1d:c6:18:a1:f7:27:07:41:9d:d9:8a:45:49:a7:
4c:6c:dd:ac:0f:e9:13:4d:e5:76:68:08:37:58:1f:54:38:6a:
45:4d:d7:45:24:c0:5f:43:10:b3:bc:65:d8:82:d4:e3:71:35:
5a:36:28:2d:be:a7:29:2c:0c:f8:18:1f:5f:64:37:00:5f:8c:
50:9c:e3:30:9c:ec:77:f4:13:a9:70:d8:4d:55:0f:b3:23:51:
6e:dd:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:35 2026 by rpki-client