Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qpHUiMGcGFgytbf0szl43HYvW7I.roa
File: qpHUiMGcGFgytbf0szl43HYvW7I.roa (raw, json)
Hash identifier: y1JT4W2jUFRZwTXVio7OsU/ORU4y+M8ugEr+F0LDvX8=
Subject key identifier: AA:91:D4:88:C1:9C:18:58:32:B5:B7:F4:B3:39:78:DC:76:2F:5B:B2
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0B12D3E044B9785B05451763019A3DA47
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qpHUiMGcGFgytbf0szl43HYvW7I.roa
Signing time: Thu 17 Sep 2026 21:02:07 +0000
ROA not before: Thu 17 Sep 2026 21:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:e::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:17::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Oct 2026 18:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:2d:3e:04:4b:97:85:b0:54:51:76:30:19:a3:da:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 17 21:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa91d488c19c185832b5b7f4b33978dc762f5bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:11:0a:50:08:0e:a4:21:22:40:a3:40:26:
a5:ad:c7:10:97:38:35:f3:f7:3f:51:34:28:81:b1:
06:de:b4:f8:f3:33:30:a1:8d:18:9e:1f:9f:94:8d:
e4:2e:43:be:cc:88:b2:47:01:04:13:d3:44:17:aa:
57:1c:72:b3:14:a4:d8:7c:8e:26:ad:c2:58:19:91:
4f:f7:18:11:a4:3f:be:00:a8:1c:77:eb:b2:3c:07:
38:95:c1:d9:10:51:ef:3e:07:df:3f:58:49:35:1b:
5e:c0:bf:22:ff:f8:23:41:62:f1:35:f9:3a:9e:d4:
cd:c3:67:03:ea:8a:00:53:66:8c:78:4c:8c:2a:67:
7e:cc:74:37:93:34:3c:01:48:64:42:6d:90:7f:c2:
b3:d3:84:2b:06:b8:89:90:56:e5:d1:98:85:67:df:
d1:6d:a3:98:55:67:b3:d9:51:2f:0e:4b:e4:e0:77:
d8:a5:3b:37:11:7d:c8:6e:c5:19:86:b1:a1:78:1e:
ec:7a:99:75:bf:db:02:41:05:f1:1b:80:3b:e2:3a:
0d:8c:06:eb:f8:ad:0c:40:c8:88:13:68:c3:0d:e1:
c3:dc:16:6e:6a:ba:8a:3e:38:cf:1c:12:65:ce:8b:
b5:78:2f:8a:15:eb:f6:ab:be:24:51:d5:83:46:ca:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:D4:88:C1:9C:18:58:32:B5:B7:F4:B3:39:78:DC:76:2F:5B:B2
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qpHUiMGcGFgytbf0szl43HYvW7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:e::/47
2a10:fa80:17::/48
2a10:fa80:19::/48
Signature Algorithm: sha256WithRSAEncryption
0d:0b:d1:19:19:26:81:1f:c5:3d:d8:cc:43:85:c6:aa:be:83:
20:82:89:59:23:c3:26:b3:af:1c:70:2d:d9:df:42:68:1e:cb:
95:d1:ab:fb:19:61:25:00:dd:6a:f5:fc:ce:8d:f5:37:3b:dc:
c2:c5:07:c0:53:8e:ec:8c:5f:6b:e3:1f:d8:8b:52:66:2f:bc:
0c:d9:3a:81:cb:b0:0b:d7:91:7b:95:65:c4:23:89:81:5d:9f:
dd:98:54:69:10:cb:aa:92:7a:9f:86:cf:86:11:ee:17:6d:64:
c3:40:7c:01:46:48:f5:79:bf:78:43:8d:2d:5d:05:03:b8:e6:
94:41:58:8f:22:89:7e:47:69:3e:9a:8f:99:f2:2b:75:a5:7d:
b8:c1:0c:d7:4a:b8:0c:61:75:18:5d:da:6a:fc:bd:bd:2b:4f:
b4:c3:d1:60:82:19:be:f9:af:63:7f:37:02:90:c9:17:b7:da:
6d:4c:ec:bb:89:87:4b:db:a0:40:42:44:1c:32:0c:f5:90:67:
1d:f2:ad:16:d7:a1:71:47:2e:6f:54:e8:29:cf:5e:74:8f:c3:
c5:68:01:d1:8f:36:74:40:28:d2:fb:d6:ce:13:38:30:20:f6:
95:65:68:c5:8b:9d:77:b7:25:db:93:fe:9b:70:f3:c9:d2:2a:
9b:e9:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:00 2026 by rpki-client