Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ccHRsZ82vdQYGCY6aLGZgN_8gSY.roa
File: ccHRsZ82vdQYGCY6aLGZgN_8gSY.roa (raw, json)
Hash identifier: +/1FvTbV6aFGFRC7En1oE2rlEYXX56SQ8qeHyr+2Mco=
Subject key identifier: 71:C1:D1:B1:9F:36:BD:D4:18:18:26:3A:68:B1:99:80:DF:FC:81:26
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFAF542CE64BF7ABFCF0ECFAFB016B9C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ccHRsZ82vdQYGCY6aLGZgN_8gSY.roa
Signing time: Tue 11 Aug 2026 07:17:52 +0000
ROA not before: Tue 11 Aug 2026 07:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.66.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Aug 2026 07:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:af:54:2c:e6:4b:f7:ab:fc:f0:ec:fa:fb:01:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c1d1b19f36bdd41818263a68b19980dffc8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:fb:46:0e:71:89:4c:dd:ba:bb:f5:38:3d:
00:85:90:61:bb:24:8b:1f:78:53:e0:ff:79:03:6c:
eb:1e:3c:ab:4e:2d:12:72:7b:dc:b0:e4:e2:ce:65:
f1:1a:e2:31:b4:22:04:99:87:91:00:45:3e:46:d3:
8e:8f:e2:21:38:7d:bd:90:ae:01:56:1c:86:14:26:
05:ed:2a:4c:c5:3b:d3:83:62:0b:81:b5:01:55:f2:
b3:cd:f8:d2:6d:91:6c:97:9d:b1:37:65:67:34:ca:
8b:80:09:e9:6b:85:21:cb:2a:c7:dc:05:3a:30:6b:
23:be:a6:a2:62:fd:f0:e2:26:54:47:aa:d3:b8:af:
f7:99:ef:40:2c:b1:bb:20:ef:2b:c4:e3:80:b3:11:
4d:f2:41:ec:2d:80:fa:c5:a8:a5:78:4b:3e:53:00:
54:93:98:9d:f3:6e:b3:c7:1d:f6:e2:5e:f1:df:e5:
c6:6f:d7:8f:e6:f1:ac:fd:33:6d:b4:b7:b2:06:1f:
3f:4f:45:cc:21:5c:15:b6:1b:8c:54:fd:40:c3:b7:
a0:25:71:27:52:c3:37:f8:82:d0:55:49:c1:2c:42:
8c:1b:76:8d:2b:17:00:e8:cb:f5:74:df:e8:04:f9:
11:82:89:2a:c1:1c:75:e2:c2:cd:ab:f2:35:38:ac:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:D1:B1:9F:36:BD:D4:18:18:26:3A:68:B1:99:80:DF:FC:81:26
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ccHRsZ82vdQYGCY6aLGZgN_8gSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
89.213.66.0/23
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c7:04:b7:90:51:c9:b6:d3:3c:e7:e8:63:40:aa:ad:93:02:
3c:33:33:7f:36:37:d0:0a:09:f0:e2:52:ab:18:b5:60:e1:b7:
fb:a5:a1:c0:ec:eb:be:59:db:10:9c:17:50:05:c1:7f:44:2a:
a8:06:3f:72:f5:25:e0:52:d9:ec:cb:f7:67:00:14:00:51:63:
ef:66:f8:80:d3:d4:1e:09:97:fb:0b:79:b4:ac:d4:cd:11:e6:
0f:87:a5:b9:db:e8:f7:ff:39:dc:54:40:25:0d:0b:e9:fc:ee:
dd:69:70:c9:91:0c:c5:95:d1:5e:30:b5:a9:6b:51:80:86:6d:
65:8f:d3:cb:64:76:81:90:9d:eb:44:44:21:57:94:d4:d7:7a:
37:85:94:52:d6:4e:b7:77:e8:b8:af:e5:2c:d8:e3:3b:c1:53:
28:33:a9:a6:99:81:cb:c9:a9:dc:db:fd:d2:5a:15:d0:bd:10:
f8:54:f8:e7:e5:87:66:a0:47:fa:e1:5c:ef:4f:17:55:3a:51:
34:95:d2:87:6b:82:37:d4:34:00:68:de:07:87:9c:80:57:3b:
9b:f3:da:0c:b4:b4:85:14:30:72:e4:20:89:56:1d:9b:47:42:
a3:65:ac:be:ab:12:4e:1e:c0:65:3a:f3:63:05:72:71:43:1e:
67:44:2f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:31 2026 by rpki-client