Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ek1zGPylPrCywnHXC9_2vXzQpkU.roa
File: ek1zGPylPrCywnHXC9_2vXzQpkU.roa (raw, json)
Hash identifier: QtNQER2+hOigrTL26aBhUuNzPVpcgiFxKpQ3E7Bb4RM=
Subject key identifier: 7A:4D:73:18:FC:A5:3E:B0:B2:C2:71:D7:0B:DF:F6:BD:7C:D0:A6:45
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A143B67BADAF937A8E5E1CFCCD960E6316
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ek1zGPylPrCywnHXC9_2vXzQpkU.roa
Signing time: Fri 16 Oct 2026 07:56:35 +0000
ROA not before: Fri 16 Oct 2026 07:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 87.84.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 07:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:b6:7b:ad:af:93:7a:8e:5e:1c:fc:cd:96:0e:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 16 07:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4d7318fca53eb0b2c271d70bdff6bd7cd0a645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:1f:32:10:84:70:af:fe:63:b9:ca:65:d7:
07:a3:00:06:98:2f:29:5c:04:53:66:c1:c2:24:45:
98:62:27:df:5e:c8:74:d8:1a:30:1a:fe:76:9e:a0:
39:e1:8a:4d:f4:07:48:d8:51:15:e0:65:78:63:90:
13:bb:fa:45:21:87:d4:cc:1f:b6:86:4e:39:cd:97:
89:2d:35:b5:c8:a6:f0:34:f5:e9:29:9a:76:19:02:
71:23:e7:84:2b:2d:78:d5:d8:eb:71:cc:96:65:57:
c6:65:d8:3a:ac:f5:83:62:b6:50:c0:89:4c:7a:13:
b1:89:03:dd:f5:d7:68:19:ff:f4:d2:05:2d:7b:7e:
48:3e:71:f5:5e:00:bd:39:74:43:41:c3:18:68:f7:
9e:45:54:92:29:71:4f:6f:da:08:58:4d:90:d2:53:
fc:63:1b:3f:df:76:04:c6:ff:bf:68:88:62:1c:52:
58:c6:f2:fd:2a:44:5e:00:7d:d6:64:15:9c:09:b2:
72:b3:cc:b1:ba:1f:c4:e5:6a:0f:84:c1:e0:8f:0e:
f1:0c:54:0c:54:52:b3:6d:f1:18:aa:ab:27:49:67:
cb:3c:b9:f6:3c:a1:64:be:ab:f8:fe:a7:ee:d9:dc:
70:38:8f:b2:48:e1:51:56:dd:1b:05:00:55:04:ab:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:73:18:FC:A5:3E:B0:B2:C2:71:D7:0B:DF:F6:BD:7C:D0:A6:45
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ek1zGPylPrCywnHXC9_2vXzQpkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f4:5a:e0:ae:2c:cd:c1:82:22:59:d2:60:a1:1f:d6:1d:f3:
ea:9e:3d:23:e4:ea:09:13:af:29:0c:53:7c:5e:8d:0d:29:b8:
f1:df:d8:d9:d5:bd:ce:78:f1:f3:6f:f5:d9:1f:c6:ce:e8:fe:
47:8c:33:ae:1a:70:ba:f0:ce:a9:05:da:13:49:5f:ed:3d:21:
59:20:ac:dc:83:d4:dd:0b:67:ab:2a:1b:71:42:50:ca:29:cd:
05:7c:5d:0c:e2:d7:db:37:9a:42:c1:9a:f1:49:0d:72:11:8d:
37:ff:c6:cb:97:8d:d0:0f:10:7c:08:03:cd:cb:17:31:24:22:
ce:54:6c:b1:28:1c:ea:12:ef:d6:d3:06:b4:79:4a:81:b3:7b:
3f:69:06:42:be:8a:ae:88:40:e5:fb:5b:07:b0:41:5a:ad:e5:
a6:e1:56:de:27:21:92:a2:5b:20:ff:58:45:2b:b2:cf:d4:0c:
2f:82:9d:ad:3a:de:ce:8e:aa:40:5f:bb:fc:27:db:9e:38:1e:
e5:6a:96:a0:19:14:99:69:2d:d7:d9:33:38:b5:91:3b:4e:60:
d9:d9:a6:58:f8:3b:cc:19:63:71:74:47:ba:d2:7c:a1:3d:e9:
07:6f:5e:f6:92:2d:60:a1:17:cd:d4:64:ab:82:c5:e3:3f:69:
bf:86:5f:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFDtnutr5N6jl4c/M2WDmMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDE2MDc1NjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTRkNzMxOGZjYTUzZWIwYjJjMjcxZDcwYmRmZjZiZDdjZDBhNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UofMhCEcK/+Y7nKZdcHowAGmC8p
XARTZsHCJEWYYiffXsh02BowGv52nqA54YpN9AdI2FEV4GV4Y5ATu/pFIYfUzB+2
hk45zZeJLTW1yKbwNPXpKZp2GQJxI+eEKy141djrccyWZVfGZdg6rPWDYrZQwIlM
ehOxiQPd9ddoGf/00gUte35IPnH1XgC9OXRDQcMYaPeeRVSSKXFPb9oIWE2Q0lP8
Yxs/33YExv+/aIhiHFJYxvL9KkReAH3WZBWcCbJys8yxuh/E5WoPhMHgjw7xDFQM
VFKzbfEYqqsnSWfLPLn2PKFkvqv4/qfu2dxwOI+ySOFRVt0bBQBVBKsnfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpNcxj8pT6wssJx1wvf9r180KZFMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZWsxekdQeWxQckN5d25IWEM5XzJ2WHpRcGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1ROMA0G
CSqGSIb3DQEBCwUAA4IBAQDQ9FrgrizNwYIiWdJgoR/WHfPqnj0j5OoJE68pDFN8
Xo0NKbjx39jZ1b3OePHzb/XZH8bO6P5HjDOuGnC68M6pBdoTSV/tPSFZIKzcg9Td
C2erKhtxQlDKKc0FfF0M4tfbN5pCwZrxSQ1yEY03/8bLl43QDxB8CAPNyxcxJCLO
VGyxKBzqEu/W0wa0eUqBs3s/aQZCvoquiEDl+1sHsEFareWm4VbeJyGSolsg/1hF
K7LP1Awvgp2tOt7OjqpAX7v8J9ueOB7lapagGRSZaS3X2TM4tZE7TmDZ2aZY+DvM
GWNxdEe60nyhPekHb172ki1goRfN1GSrgsXjP2m/hl8v
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:41 2026 by rpki-client