Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dPbJv00f9iyNpKr1XRkYXCbLf9I.roa
File: dPbJv00f9iyNpKr1XRkYXCbLf9I.roa (raw, json)
Hash identifier: ptEzLtgT9GLGdijlMgFNE0WqYBBCRB8klQPjBFkQFRc=
Subject key identifier: 74:F6:C9:BF:4D:1F:F6:2C:8D:A4:AA:F5:5D:19:18:5C:26:CB:7F:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0390B2EBD9DAC25E6FF4B9CB4C7173AE4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dPbJv00f9iyNpKr1XRkYXCbLf9I.roa
Signing time: Tue 25 Aug 2026 13:10:29 +0000
ROA not before: Tue 25 Aug 2026 13:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.183.0/24 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.178.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.249.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.156.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.167.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
94.183.192.0/21 maxlen: 24
94.183.212.0/24 maxlen: 24
94.183.213.0/24 maxlen: 24
94.183.214.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.72.0/24 maxlen: 24
217.60.73.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
217.60.152.0/22 maxlen: 24
217.60.156.0/22 maxlen: 24
217.60.176.0/22 maxlen: 24
217.60.185.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Aug 2026 06:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:0b:2e:bd:9d:ac:25:e6:ff:4b:9c:b4:c7:17:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 13:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f6c9bf4d1ff62c8da4aaf55d19185c26cb7fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:70:1d:ee:66:a8:14:ad:72:ff:69:28:02:
63:02:85:15:d1:c6:31:a2:c5:c8:0f:e4:ec:4e:3e:
f9:29:95:f5:49:c6:2d:08:bc:df:43:c1:b9:be:68:
f4:34:cf:68:39:67:ba:38:ca:03:26:6f:41:70:28:
87:28:22:5e:c2:84:2a:dd:ac:e2:e9:23:13:73:7c:
0c:b5:d4:64:00:bd:51:d8:75:a2:eb:d5:48:01:aa:
a3:38:c5:da:e6:50:41:21:40:18:22:99:88:c6:ed:
a4:2f:41:5e:71:3b:f2:cf:c2:13:b8:26:67:e8:40:
91:32:40:d8:bd:d4:a1:a9:2a:ad:1a:6a:fe:22:81:
90:54:8e:ad:50:ba:65:3a:68:9b:e5:10:d8:01:ec:
c4:78:8a:81:a1:3b:fe:09:71:36:d3:83:58:26:9b:
16:f5:47:c8:3d:19:bc:15:b8:b5:1d:a7:fa:78:2a:
28:a0:09:71:f3:01:c5:10:ac:59:88:4f:d5:84:31:
fe:a6:85:cd:09:de:cb:d2:19:4f:bb:21:54:1c:21:
6d:73:f9:80:ef:7a:f1:c3:65:c9:3f:d9:71:ce:b1:
a6:6b:97:94:22:5e:36:45:e4:81:ca:a2:c2:2c:92:
81:7b:df:a8:dc:57:98:a8:ea:5b:da:51:4b:fa:9d:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:C9:BF:4D:1F:F6:2C:8D:A4:AA:F5:5D:19:18:5C:26:CB:7F:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dPbJv00f9iyNpKr1XRkYXCbLf9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.183.0/24
31.57.16.0/21
31.57.200.0/24
31.58.178.0/24
31.58.180.0/24
31.58.184.0-31.58.207.255
31.58.249.0/24
31.59.64.0/22
31.59.80.0/21
31.59.90.0/23
31.59.152.0/21
31.59.161.0/24
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.204.0-31.59.211.255
94.183.152.0/24
94.183.156.0/24
94.183.160.0/24
94.183.167.0/24
94.183.169.0/24
94.183.192.0/21
94.183.212.0-94.183.214.255
217.60.12.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.72.0/23
217.60.108.0-217.60.115.255
217.60.128.0/19
217.60.176.0/22
217.60.185.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
a2:67:37:ff:72:41:b5:b8:d7:f9:de:e1:c9:5d:47:83:99:3d:
8a:8d:92:19:a9:4e:83:9d:da:3f:d5:f4:90:11:6c:55:5f:34:
d0:0d:a9:37:1d:54:7f:35:96:d2:6b:df:32:5f:23:2b:f1:c3:
f3:05:96:f0:fe:16:b5:c8:d8:2c:b6:60:2b:e9:fc:4c:4b:a4:
9f:04:1d:b2:e3:f2:5f:62:a6:68:7f:a7:ba:b6:e2:35:1a:a6:
5e:c2:7a:67:c3:96:4b:55:5b:30:8c:17:61:6e:61:b2:1c:d5:
4f:9c:03:e5:8d:1a:2d:c0:97:6f:3a:c3:c1:f9:d9:20:3f:51:
16:0a:55:28:0a:ce:9d:23:03:e3:3e:77:14:34:6b:46:f5:0c:
5f:31:a7:57:39:c4:97:75:96:6d:ef:4e:db:31:4a:4d:86:82:
07:a1:9f:36:b4:56:61:39:ec:58:0e:1e:8c:d7:3a:3e:31:17:
a2:ac:60:ee:ab:fb:8a:c8:2d:14:74:ac:9c:85:f0:bf:3c:11:
3b:3b:b7:e3:2a:56:bf:24:d9:30:57:64:a1:59:cc:0b:cc:ff:
2a:45:5e:4d:56:64:53:1d:4d:2c:bc:3c:c7:0c:ea:80:6d:4b:
cc:7a:73:f5:83:3f:5b:ed:61:bd:63:14:8b:a8:94:6c:8c:43:
d0:f0:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:45 2026 by rpki-client