Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X-T3LV5_UKkV_UVUjlLqurDYuMI.roa
File: X-T3LV5_UKkV_UVUjlLqurDYuMI.roa (raw, json)
Hash identifier: TBuvqgwbvWjUtT4AdrgVO3TDp3NNN+TDnogrjscR0eY=
Subject key identifier: 5F:E4:F7:2D:5E:7F:50:A9:15:FD:45:54:8E:52:EA:BA:B0:D8:B8:C2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A010C656D6B636810B8BB797DD1CFC6164
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X-T3LV5_UKkV_UVUjlLqurDYuMI.roa
Signing time: Mon 17 Aug 2026 17:30:28 +0000
ROA not before: Mon 17 Aug 2026 17:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 82.110.146.0/24 maxlen: 24
87.82.61.0/24 maxlen: 24
87.83.85.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
87.85.138.0/24 maxlen: 24
87.85.140.0/24 maxlen: 24
87.85.253.0/24 maxlen: 24
87.86.37.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Sep 2026 19:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:c6:56:d6:b6:36:81:0b:8b:b7:97:dd:1c:fc:61:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 17 17:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe4f72d5e7f50a915fd45548e52eabab0d8b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:9b:eb:7e:78:fc:01:99:05:e9:dc:90:ea:
a4:d6:ab:e1:f4:6a:5f:08:60:30:5d:b3:b7:39:80:
b6:d5:4f:d8:f9:c7:c0:54:92:6c:2e:85:f5:d5:f4:
2c:34:86:61:8b:68:8a:f5:c8:81:00:d2:65:f2:7f:
93:e3:79:0a:df:38:f6:f8:95:5a:a1:1e:0d:ad:47:
01:64:09:68:6d:c6:9f:4a:19:cd:ff:3a:d6:b6:fd:
82:04:f8:82:e7:b2:84:7a:65:68:95:0f:d0:93:bc:
e1:04:51:83:4f:01:32:9b:83:b5:52:cc:b9:89:11:
a0:ed:81:fb:95:3a:72:c7:c1:5c:d0:3c:69:09:54:
1b:a5:1b:78:3d:7b:2e:0f:9f:e7:79:d2:bb:49:d2:
6a:ca:0f:02:a5:86:94:aa:3c:cd:d8:ec:1a:13:65:
eb:b1:5b:01:d0:c3:e5:11:b8:d9:07:69:a0:db:ff:
74:9e:a0:1f:e0:90:51:0e:fb:e5:f4:73:37:e8:b4:
a5:0d:9f:6b:5f:83:66:e6:9e:1a:a9:d0:b3:ea:a7:
4f:80:07:f4:32:27:94:e9:78:fd:90:7e:3c:d2:15:
fc:81:1b:0f:e4:71:6a:65:44:ce:20:88:11:24:f9:
ab:ad:f0:1c:a5:e6:1c:82:be:50:c8:5f:4d:74:b6:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:F7:2D:5E:7F:50:A9:15:FD:45:54:8E:52:EA:BA:B0:D8:B8:C2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X-T3LV5_UKkV_UVUjlLqurDYuMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.146.0/24
87.82.61.0/24
87.83.85.0/24
87.83.232.0/24
87.84.239.0/24
87.85.138.0/24
87.85.140.0/24
87.85.253.0/24
87.86.37.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a1:7d:b6:55:61:da:8a:6e:ec:d3:5f:76:b0:20:dc:fc:d2:
99:cf:3c:fe:f4:12:74:d1:bd:1c:14:31:7e:fe:f6:e1:72:c5:
6b:d7:01:1f:eb:74:03:d4:6f:b0:dc:9c:bf:54:54:ec:0a:28:
e4:24:bc:ca:59:7c:12:0d:cb:46:44:0e:91:5a:d9:be:8e:c1:
72:85:ba:dc:e6:dc:6e:67:ac:aa:c8:12:69:ef:81:96:d8:c5:
3c:14:39:76:97:75:9e:2a:95:2d:02:2e:e9:76:5a:4f:60:71:
6d:a0:46:b6:5f:8d:5e:a2:39:b3:b2:9e:dd:8c:0d:8a:1c:b1:
28:e5:07:d3:08:18:b9:77:15:43:78:a2:d9:5e:84:ed:74:34:
c3:8d:c8:f4:4b:6b:60:bc:02:e2:15:e2:f3:21:67:35:9f:58:
2f:bd:45:58:79:62:8a:32:0c:9b:e0:0f:0d:0f:89:30:00:c3:
03:a9:03:1b:61:54:65:2b:ad:cf:aa:66:e0:f5:82:b0:7b:fe:
da:b6:30:0e:6b:6d:99:10:dc:31:bc:c6:58:0c:06:bd:43:3e:
cc:07:27:37:01:31:7e:6a:40:9f:9e:1a:3e:ce:2f:61:4e:d1:
e5:79:4f:1d:46:5d:9e:ea:a2:39:22:3b:b5:b1:c0:26:8b:63:
ec:bf:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:52 2026 by rpki-client