Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQxRJZ26KJSKZHGL9a8r-kUzwTw.roa
File: qQxRJZ26KJSKZHGL9a8r-kUzwTw.roa (raw, json)
Hash identifier: RknFNe7taAx9JKDrNk17Rf4jFiyBER97CWqexH8ppJI=
Subject key identifier: A9:0C:51:25:9D:BA:28:94:8A:64:71:8B:F5:AF:2B:FA:45:33:C1:3C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C23700CE31EFB1AC8063A86B6B1655FFC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQxRJZ26KJSKZHGL9a8r-kUzwTw.roa
Signing time: Tue 03 Feb 2026 12:17:51 +0000
ROA not before: Tue 03 Feb 2026 12:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 82.197.200.0/23 maxlen: 24
82.197.208.0/20 maxlen: 24
84.245.26.0/23 maxlen: 24
84.245.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Feb 2026 18:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:70:0c:e3:1e:fb:1a:c8:06:3a:86:b6:b1:65:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 12:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a90c51259dba28948a64718bf5af2bfa4533c13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:34:f1:b3:81:72:a7:4b:44:87:06:4a:e9:
c7:00:73:64:bd:bb:7f:69:72:73:01:64:50:bf:84:
57:8f:f8:9c:7c:c2:2d:27:cf:7d:cb:c4:71:25:bb:
16:a5:cf:c0:4a:a4:dc:ae:72:a2:7b:49:c3:4a:46:
9c:6b:03:50:60:0c:1a:27:bf:7e:53:1c:a3:73:4c:
96:a7:65:5b:79:f9:57:24:5f:a3:40:f3:03:2a:bb:
09:f0:2d:f1:3d:e3:fd:1f:e9:8f:eb:79:1a:7c:eb:
bf:e4:33:d8:02:7d:a1:4a:fd:1f:5e:b8:1a:89:38:
fb:78:c0:69:c8:b1:00:c1:7c:13:c9:88:3c:17:91:
1b:02:c3:6b:61:6c:00:f0:4b:40:1d:73:05:40:2a:
62:75:af:7e:a1:2c:8e:7a:3b:61:07:0d:5e:c0:c1:
3d:97:64:26:53:e3:32:e2:9e:e1:e8:8e:50:27:f4:
38:b3:90:ef:b2:53:85:d2:54:90:c7:69:05:e0:bf:
eb:93:bf:bd:68:be:ae:e2:54:a4:6a:15:b8:c2:7e:
ab:1a:7e:bc:ab:8f:79:65:0e:0e:28:69:3e:83:0d:
97:1f:6f:93:70:32:64:a4:d4:87:0e:18:44:f7:66:
ac:7f:12:ae:d5:34:e4:b2:db:b0:80:ae:6f:7f:81:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:51:25:9D:BA:28:94:8A:64:71:8B:F5:AF:2B:FA:45:33:C1:3C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qQxRJZ26KJSKZHGL9a8r-kUzwTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.200.0/23
82.197.208.0/20
84.245.26.0/23
84.245.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:6d:3b:9f:25:34:54:85:eb:6c:82:95:ef:76:b4:dc:d3:32:
cb:3c:ba:a6:15:09:72:75:c2:ec:6f:c9:45:f5:87:b4:5d:5d:
85:f1:ac:59:7d:7e:d5:87:db:6d:f0:96:da:64:bf:46:72:4f:
15:60:f6:05:56:2d:19:18:e4:90:3b:54:9e:a8:9d:f2:f7:43:
65:03:50:a4:48:88:65:e2:cb:ab:d6:d8:59:59:36:12:8c:e2:
3e:b6:5e:c7:3f:4a:42:b0:7c:72:5e:3c:19:b5:27:19:fe:5a:
b6:7a:07:0c:be:e4:7d:7b:b1:ef:dd:70:72:87:17:e4:45:43:
f3:b8:02:45:aa:ee:50:be:19:dc:63:75:af:8e:4b:15:5b:5f:
e4:cb:1c:c5:58:80:f4:68:82:47:be:5d:72:fd:22:df:a0:4d:
d6:31:fe:70:8d:31:06:b2:d1:ee:ce:b9:d5:0d:ab:51:d5:51:
f5:3f:d8:19:ed:4d:06:d1:4c:87:4d:d5:1a:26:c0:85:d4:4d:
4d:81:57:3e:4a:29:f1:da:6a:30:3e:68:bc:36:f5:29:9f:0c:
f5:ae:99:4a:0b:b4:1f:66:e6:12:ff:90:7f:ac:3c:64:45:3b:
33:f7:66:2c:72:09:9a:cb:35:24:10:4a:12:ab:3b:2c:e9:37:
b4:e9:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 08:13:42 2026 by rpki-client