Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HR0YfyRJXUANP4LsIqWBWDWfTMc.roa
File: HR0YfyRJXUANP4LsIqWBWDWfTMc.roa (raw, json)
Hash identifier: SbEChSDgBeMT+5b/SYBR5sXRtZOy2m1oHxBXkg+J7sE=
Subject key identifier: 1D:1D:18:7F:24:49:5D:40:0D:3F:82:EC:22:A5:81:58:35:9F:4C:C7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FBAAA84E1FFD7F9E20AA67AB0F2565AED
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HR0YfyRJXUANP4LsIqWBWDWfTMc.roa
Signing time: Sat 01 Aug 2026 00:12:45 +0000
ROA not before: Sat 01 Aug 2026 00:12:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.108.40.0/23 maxlen: 24
82.110.224.0/24 maxlen: 24
82.110.227.0/24 maxlen: 24
82.110.229.0/24 maxlen: 24
87.83.46.0/23 maxlen: 24
87.83.172.0/23 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.204.0/24 maxlen: 24
87.84.222.0/23 maxlen: 24
109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.134.160.0/23 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Aug 2026 11:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:aa:84:e1:ff:d7:f9:e2:0a:a6:7a:b0:f2:56:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 1 00:12:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d1d187f24495d400d3f82ec22a58158359f4cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:3b:96:20:e1:e5:d6:91:0a:10:04:71:67:
45:ae:26:c6:23:5e:e3:5e:54:68:4d:15:df:d5:e7:
e1:bc:ab:2c:a3:71:9f:f3:45:82:e9:f6:2c:27:8c:
54:88:47:5b:c6:b1:45:3c:86:a8:77:ac:ae:9d:82:
94:44:97:b5:e5:53:6c:a8:17:34:41:4f:42:78:ce:
e6:8f:bc:c5:ca:7b:77:37:a7:6c:20:d1:ab:2c:5d:
b4:a3:8b:4d:b6:ea:7f:6b:5b:e5:21:73:80:a3:c2:
f8:4a:d0:47:ae:69:fa:ad:4b:0d:b6:2d:fa:03:be:
51:72:cb:cf:1f:db:12:93:4d:99:9b:2b:11:5b:40:
19:89:34:2d:5b:61:6c:1e:10:98:27:cf:9a:f4:bf:
41:2e:8e:dd:21:f4:f9:7a:7d:72:65:6f:e2:82:47:
7e:9d:e4:38:2b:0c:85:4e:31:b5:d6:c4:85:12:fc:
33:88:28:bd:23:81:c6:12:29:d9:df:59:56:ad:95:
2f:26:f3:32:d3:36:07:47:42:94:2a:b2:c8:c0:14:
35:fe:db:ef:47:51:2d:90:20:0b:ab:39:61:8d:b6:
04:0c:14:c4:80:fd:ac:19:c2:3e:8d:bf:d2:43:8e:
26:84:94:14:6c:67:5a:de:a5:6c:53:e1:62:ee:ce:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:18:7F:24:49:5D:40:0D:3F:82:EC:22:A5:81:58:35:9F:4C:C7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HR0YfyRJXUANP4LsIqWBWDWfTMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.40.0/23
82.110.224.0/24
82.110.227.0/24
82.110.229.0/24
87.83.46.0/23
87.83.172.0/23
87.84.203.0-87.84.204.255
87.84.222.0/23
109.204.104.0/21
212.134.38.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.134.160.0/23
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ca:ea:b5:e3:d9:e7:aa:0c:05:63:b8:cf:51:2f:37:4e:72:
46:2e:d8:56:6f:2b:2f:38:46:df:4e:f9:30:93:8d:30:77:0f:
29:fd:86:a0:ad:87:28:72:9e:c2:8b:f5:33:76:0d:21:ef:34:
8f:79:22:4c:c3:74:5f:31:2b:4b:7f:e8:90:01:8d:73:b7:fa:
36:8c:67:06:18:2b:f2:a4:e6:07:fe:16:cf:86:65:ae:16:d8:
b3:84:b1:fb:02:cf:b9:3e:24:4f:07:1f:41:1f:24:93:1c:34:
1c:52:00:e4:78:17:89:6e:1f:90:c2:e1:fb:03:de:76:a8:82:
ff:ef:24:81:70:24:8e:a2:15:41:23:3e:53:41:ce:7b:e2:9b:
6d:17:33:99:3c:87:7c:4e:25:fd:ea:9e:73:0d:3c:9a:78:ca:
31:16:10:ab:72:ed:d7:8c:c9:37:14:86:b7:01:04:7a:2a:9b:
3c:73:97:91:7c:67:43:84:c7:7e:13:91:0a:da:80:81:6b:5a:
99:06:66:f3:aa:db:02:49:52:a5:cb:6c:ca:7e:72:17:2d:d0:
86:e6:53:a7:cc:8c:f6:70:ff:43:0c:3b:29:7c:c8:1d:08:6a:
d9:5a:6c:a1:56:5a:70:48:fc:f7:76:56:dd:a7:cd:02:21:68:
f3:e2:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:03:47 2026 by rpki-client