Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Opm7SlwhGQAXi_ue8I2SBeQekzY.roa
File: Opm7SlwhGQAXi_ue8I2SBeQekzY.roa (raw, json)
Hash identifier: Glkgj5P32086nu6Kp/d0YUHRf0nIGFt67/pUh2iaqq8=
Subject key identifier: 3A:99:BB:4A:5C:21:19:00:17:8B:FB:9E:F0:8D:92:05:E4:1E:93:36
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019CEC6F380DE82C3F291D8B8E1D56CA13BE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Opm7SlwhGQAXi_ue8I2SBeQekzY.roa
Signing time: Sat 14 Mar 2026 13:00:37 +0000
ROA not before: Sat 14 Mar 2026 13:00:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Mar 2026 06:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:38:0d:e8:2c:3f:29:1d:8b:8e:1d:56:ca:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 14 13:00:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a99bb4a5c211900178bfb9ef08d9205e41e9336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:6f:8a:fe:4e:0c:b9:d3:70:47:7d:b9:70:
2a:41:c3:b5:a8:10:4e:c4:7c:04:d2:55:b6:7e:e5:
f2:79:76:68:e9:42:f1:0c:c8:c4:29:b6:f6:c6:54:
3e:e6:9d:33:81:b4:5a:b3:ac:cd:f1:aa:2d:3d:60:
7f:33:09:0e:03:a2:16:82:61:8f:7f:54:89:96:ed:
21:bf:fe:0c:76:5d:dc:37:7e:65:f5:f6:93:aa:64:
21:cd:a8:51:f7:68:1f:04:ef:6b:8c:6e:4a:da:0f:
13:05:54:e2:82:c7:32:da:fe:ab:a5:ce:bb:ff:23:
cc:52:69:8c:f5:11:f6:f5:9b:06:d8:36:05:86:3f:
c0:55:42:45:8e:1a:30:01:98:e0:d8:9a:c6:53:4e:
04:86:e6:e0:f6:76:f2:64:11:2a:ce:03:76:48:e7:
73:d7:44:ee:84:db:0b:95:fb:55:78:44:21:ac:07:
10:41:d7:82:d0:ed:cb:17:12:db:66:21:99:8b:c5:
c9:29:8a:4b:cb:f0:d7:8d:da:05:90:d8:31:6d:05:
c9:c6:9f:b8:dd:7f:10:d5:eb:d4:6e:65:c7:79:c7:
b9:f8:b3:a3:5e:34:8b:a6:09:12:66:0f:f8:8f:e9:
40:2e:40:43:71:89:4b:b4:39:ae:60:6c:30:a5:e3:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:BB:4A:5C:21:19:00:17:8B:FB:9E:F0:8D:92:05:E4:1E:93:36
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Opm7SlwhGQAXi_ue8I2SBeQekzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.38.228.0/24
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.140.0/24
89.43.143.0/24
89.46.2.0/23
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.126.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6b:48:18:99:d0:3c:44:8f:57:eb:9f:ac:ff:fb:3d:7b:81:
cd:b9:e7:20:94:a7:79:98:6c:44:1a:4d:61:5c:02:02:cc:7f:
58:e4:4e:b1:c2:43:44:44:f3:d3:46:f2:a1:e3:7b:74:81:29:
8b:df:ac:eb:e7:15:a0:c6:a7:b5:85:81:fc:36:e7:62:78:3b:
a8:92:d1:89:3b:83:30:2a:a0:7b:b2:22:7c:18:b0:a1:5b:37:
18:e0:46:0c:5a:b0:51:1d:6c:c9:9a:e8:93:a2:53:27:85:ce:
9f:f2:7a:fe:b1:e8:17:fd:bd:c9:ec:65:ae:15:0e:8b:19:41:
01:7e:e2:50:df:3f:7f:9d:56:bb:59:e4:3e:41:4f:fd:21:15:
72:aa:10:32:9d:43:62:19:78:1a:1c:87:5f:a0:f1:bc:fc:5b:
dc:6e:5e:a3:87:e3:c8:6c:9e:ee:77:5b:85:a1:e7:ae:30:f4:
fd:dc:9c:4c:62:77:ab:0a:22:8f:1a:0d:05:c9:3b:a2:54:f1:
64:17:e4:9e:58:8f:cc:a2:71:7a:75:20:79:22:ce:dd:19:ab:
d0:a8:9f:7f:81:77:fe:79:bf:79:46:f2:0f:6b:20:9d:c1:6e:
7f:a9:1c:9b:c6:e8:94:58:00:3d:20:e1:c7:46:38:6e:38:30:
a4:08:91:98
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZzsbzgN6Cw/KR2Ljh1WyhO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwMzE0MTMwMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTk5YmI0YTVjMjExOTAwMTc4YmZiOWVmMDhkOTIwNWU0MWU5MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4glviv5ODLnTcEd9uXAqQcO1qBBO
xHwE0lW2fuXyeXZo6ULxDMjEKbb2xlQ+5p0zgbRas6zN8aotPWB/MwkOA6IWgmGP
f1SJlu0hv/4Mdl3cN35l9faTqmQhzahR92gfBO9rjG5K2g8TBVTigscy2v6rpc67
/yPMUmmM9RH29ZsG2DYFhj/AVUJFjhowAZjg2JrGU04Ehubg9nbyZBEqzgN2SOdz
10TuhNsLlftVeEQhrAcQQdeC0O3LFxLbZiGZi8XJKYpLy/DXjdoFkNgxbQXJxp+4
3X8Q1evUbmXHece5+LOjXjSLpgkSZg/4j+lALkBDcYlLtDmuYGwwpeNZ7wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFDqZu0pcIRkAF4v7nvCNkgXkHpM2MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvT3BtN1Nsd2hHUUFYaV91ZThJMlNCZVFla3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAFki
5AMEAFki5wMEAFkm5AMEAFkoUjAMAwQEWSpQAwQAWSpSAwQAWSpWAwQAWSuMAwQA
WSuPAwQBWS4CAwQAWS9jAwQAWS9zAwQAWS91AwQAWS93MAwDBABZL30DBABZL34D
BABdcbUwDAMEAV1ySgMEBF1yQAMEALllaTANBgkqhkiG9w0BAQsFAAOCAQEAYGtI
GJnQPESPV+ufrP/7PXuBzbnnIJSneZhsRBpNYVwCAsx/WOROscJDRETz00byoeN7
dIEpi9+s6+cVoMantYWB/DbnYng7qJLRiTuDMCqge7IifBiwoVs3GOBGDFqwUR1s
yZrok6JTJ4XOn/J6/rHoF/29yexlrhUOixlBAX7iUN8/f51Wu1nkPkFP/SEVcqoQ
Mp1DYhl4GhyHX6DxvPxb3G5eo4fjyGye7ndbhaHnrjD0/dycTGJ3qwoijxoNBck7
olTxZBfknliPzKJxenUgeSLO3Rmr0Kiff4F3/nm/eUbyD2sgncFuf6kcm8bolFgA
PSDhx0Y4bjgwpAiRmA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 05:12:25 2026 by rpki-client