Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/iRdzy9lnP9O1JH2f4g9tvITUOXo.roa
File: iRdzy9lnP9O1JH2f4g9tvITUOXo.roa (raw, json)
Hash identifier: rP+qwU0G7mYvpxopzo3d9n1aMuqWSFz7F/1cmWDrLJg=
Subject key identifier: 89:17:73:CB:D9:67:3F:D3:B5:24:7D:9F:E2:0F:6D:BC:84:D4:39:7A
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A13489D6BAA0EB38E2328A1632E8BCA727
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/iRdzy9lnP9O1JH2f4g9tvITUOXo.roa
Signing time: Tue 13 Oct 2026 09:13:30 +0000
ROA not before: Tue 13 Oct 2026 09:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
85.137.248.0/24 maxlen: 24
85.137.249.0/24 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
131.123.32.0/19 maxlen: 24
131.123.32.0/24 maxlen: 24
131.123.33.0/24 maxlen: 24
131.123.34.0/24 maxlen: 24
131.123.35.0/24 maxlen: 24
131.123.36.0/24 maxlen: 24
131.123.37.0/24 maxlen: 24
131.123.38.0/24 maxlen: 24
131.123.39.0/24 maxlen: 24
131.123.40.0/24 maxlen: 24
131.123.41.0/24 maxlen: 24
131.123.42.0/24 maxlen: 24
131.123.43.0/24 maxlen: 24
131.123.44.0/22 maxlen: 22
131.123.48.0/20 maxlen: 20
131.123.50.0/24 maxlen: 24
143.246.192.0/21 maxlen: 24
143.246.192.0/24 maxlen: 24
143.246.193.0/24 maxlen: 24
143.246.194.0/24 maxlen: 24
143.246.195.0/24 maxlen: 24
143.246.196.0/24 maxlen: 24
143.246.197.0/24 maxlen: 24
143.246.198.0/24 maxlen: 24
143.246.199.0/24 maxlen: 24
143.246.202.0/24 maxlen: 24
143.246.203.0/24 maxlen: 24
143.246.204.0/24 maxlen: 24
143.246.208.0/24 maxlen: 24
143.246.209.0/24 maxlen: 24
143.246.210.0/24 maxlen: 24
143.246.211.0/24 maxlen: 24
143.246.212.0/24 maxlen: 24
143.246.215.0/24 maxlen: 24
143.246.216.0/24 maxlen: 24
143.246.217.0/24 maxlen: 24
143.246.218.0/24 maxlen: 24
143.246.219.0/24 maxlen: 24
143.246.221.0/24 maxlen: 24
143.246.222.0/24 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:600::/40 maxlen: 40
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f46:1000::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 21 Oct 2026 09:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:89:d6:ba:a0:eb:38:e2:32:8a:16:32:e8:bc:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Oct 13 09:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891773cbd9673fd3b5247d9fe20f6dbc84d4397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:14:b7:e4:cd:fa:ac:7b:38:5a:8d:a2:0e:
31:6b:f9:4b:48:a3:a9:83:2a:91:5f:29:46:4c:58:
83:14:db:6d:36:7c:67:70:09:b1:2d:d6:2d:8f:9e:
26:7e:83:6f:69:e5:53:4e:b6:dd:44:98:6f:71:f3:
e4:65:a5:6d:4f:d9:37:bd:e1:d6:6a:12:77:c1:32:
fe:86:a7:5e:48:61:c9:67:e5:72:64:85:62:bf:a2:
95:6a:d5:4f:7f:ce:61:55:5d:dd:24:3e:4c:c2:29:
bb:ea:a5:18:c1:2a:43:a8:f9:2d:cb:63:a3:cf:97:
36:46:2d:34:b0:95:fe:67:30:41:84:e2:b7:96:9a:
31:4c:f2:2a:6b:0a:90:56:da:9e:67:54:fa:dd:db:
bc:3d:85:6f:70:6e:81:89:d1:cc:6e:5e:9a:5e:2e:
6b:fb:ee:1b:c7:c9:f3:b7:cb:35:2f:42:98:6e:11:
78:4f:83:8f:ff:1d:fa:96:6c:85:d5:b5:c1:49:35:
03:93:a6:2e:5f:e4:a6:38:22:d4:1b:95:3c:d2:08:
4e:74:0d:64:f1:b8:b0:1c:40:b0:cf:86:62:fa:1d:
79:80:00:cb:27:cd:33:4f:34:15:cf:fa:06:cc:69:
f6:70:05:39:7a:bc:88:3d:67:e1:6e:28:49:42:5c:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:73:CB:D9:67:3F:D3:B5:24:7D:9F:E2:0F:6D:BC:84:D4:39:7A
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/iRdzy9lnP9O1JH2f4g9tvITUOXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
131.123.32.0/19
143.246.192.0/21
143.246.202.0-143.246.204.255
143.246.208.0-143.246.212.255
143.246.215.0-143.246.219.255
143.246.221.0-143.246.222.255
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
10:65:cb:53:22:b4:39:04:18:22:25:f0:d5:b0:53:9c:5e:ed:
ad:b3:5e:38:58:19:67:eb:aa:63:f2:0c:62:8d:a7:bc:ce:3a:
fd:fd:d9:20:da:eb:23:4b:33:4e:0f:6e:e0:a4:e9:d7:54:ff:
00:93:65:2c:2e:ea:28:4c:5c:0a:c1:ff:1a:bc:0f:1c:7c:85:
08:a0:68:97:4f:b9:9b:49:62:f3:34:fe:11:23:43:f5:70:42:
b7:df:9d:64:ca:4d:e5:28:1b:53:16:cb:03:71:c2:4e:3d:fb:
22:33:4e:ef:51:9f:87:fd:e4:da:f7:0b:d9:1a:b8:ba:36:9d:
1b:e2:fd:20:ad:32:b9:9f:67:f9:84:06:f1:3e:76:69:1e:ad:
3c:60:9c:98:da:4c:d8:9b:b3:d8:5b:73:05:ba:87:27:48:d8:
f7:b0:3d:ce:75:2d:a1:91:5d:3f:aa:c7:48:40:de:48:64:e1:
a9:5e:27:ca:10:b1:27:aa:f8:56:bb:c2:2e:f8:18:61:bc:7b:
00:8b:f1:88:52:6f:30:f1:94:1b:bf:43:9c:89:5b:c7:6f:33:
15:2e:f6:a2:02:89:6e:d0:0f:e7:f0:c9:72:fa:6e:80:10:61:
92:f1:52:53:b0:60:e6:45:ae:19:c5:24:cb:79:be:de:66:7b:
3b:01:53:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:45 2026 by rpki-client