Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0_BRwLMcnPqzN-oE-6aAmUF_1Xw.roa
File: 0_BRwLMcnPqzN-oE-6aAmUF_1Xw.roa (raw, json)
Hash identifier: 1Vam8HAx+IWwnC/+OK/0e/qHFWi8VD1gVS6LCmc77mQ=
Subject key identifier: D3:F0:51:C0:B3:1C:9C:FA:B3:37:EA:04:FB:A6:80:99:41:7F:D5:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08D37F11C87B11A2FC0035FFEA0851E1E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0_BRwLMcnPqzN-oE-6aAmUF_1Xw.roa
Signing time: Thu 10 Sep 2026 21:27:28 +0000
ROA not before: Thu 10 Sep 2026 21:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
2.26.126.0/24 maxlen: 24
2.26.155.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.89.0/24 maxlen: 24
2.27.91.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.155.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.28.0/22 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.130.0/23 maxlen: 24
13.143.136.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
13.143.144.0/21 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.16.0/22 maxlen: 24
31.77.28.0/22 maxlen: 24
31.77.55.0/24 maxlen: 24
31.77.69.0/24 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.136.0/24 maxlen: 24
31.77.164.0/23 maxlen: 24
31.77.166.0/23 maxlen: 24
31.77.209.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.199.0/24 maxlen: 24
177.1.201.0/24 maxlen: 24
179.254.108.0/22 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 11 Sep 2026 17:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:37:f1:1c:87:b1:1a:2f:c0:03:5f:fe:a0:85:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 21:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3f051c0b31c9cfab337ea04fba68099417fd57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:66:df:c1:9d:32:68:8d:b9:b9:37:a9:a2:
59:08:31:8d:24:98:6d:82:53:24:e0:20:b8:41:2c:
b8:1a:8c:34:d3:ad:8e:cd:75:42:15:d2:1d:29:e3:
a2:ce:49:49:5c:00:b7:6d:24:a6:e2:8d:77:d1:ea:
77:91:f8:3b:f3:41:b9:00:30:f6:3a:bf:99:09:cc:
91:52:2c:e6:47:d8:99:6d:99:7a:2a:46:8c:6b:55:
dc:0e:ca:4e:4a:6c:f7:67:9a:d4:94:9c:76:3f:9b:
30:3d:81:f7:b8:40:e3:29:1c:27:c5:8a:e3:d9:6a:
9a:05:a2:99:60:f7:85:24:c6:70:bd:6f:73:2a:de:
08:05:24:53:79:38:32:ae:74:ba:30:02:aa:57:ea:
88:df:0e:d2:32:d3:42:9a:86:da:93:9e:d1:ac:c4:
a5:e6:13:a3:12:43:8b:f3:97:7d:6d:c9:a7:e9:e2:
15:5c:d9:84:80:d3:a5:fb:4f:fe:aa:6b:37:e9:6b:
90:c1:23:8c:80:58:aa:49:b9:bc:1d:43:fe:08:50:
ec:9a:9a:0c:34:1a:87:d8:aa:be:4a:83:67:a5:d6:
44:ba:11:cf:da:9d:ee:df:7d:7f:b1:a4:dc:98:f2:
97:81:8b:9c:60:2d:c9:41:c5:0a:d6:94:b3:4d:42:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F0:51:C0:B3:1C:9C:FA:B3:37:EA:04:FB:A6:80:99:41:7F:D5:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0_BRwLMcnPqzN-oE-6aAmUF_1Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
2.26.126.0/24
2.26.155.0/24
2.26.159.0/24
2.26.175.0/24
2.26.189.0/24
2.26.191.0/24
2.26.208.0/21
2.27.82.0/24
2.27.89.0/24
2.27.91.0/24
2.27.103.0/24
2.27.155.0/24
2.27.162.0/23
2.27.228.0/22
2.27.239.0/24
13.143.28.0/22
13.143.48.0/22
13.143.72.0/21
13.143.130.0/23
13.143.136.0/24
13.143.142.0/24
13.143.144.0/21
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.16.0/22
31.77.28.0/22
31.77.55.0/24
31.77.69.0/24
31.77.101.0/24
31.77.119.0/24
31.77.136.0/24
31.77.164.0/22
31.77.209.0/24
144.31.34.0/24
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.199.0/24
177.1.201.0/24
179.254.108.0/22
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e4:8f:fc:38:44:73:ef:00:8e:a6:bb:1d:0e:f7:2f:04:4c:
32:1c:94:fd:fe:b7:65:1f:df:2a:3b:84:1d:9d:3e:0b:27:a4:
a6:89:3e:a5:c6:2d:b1:36:f3:59:ac:35:38:f8:f5:5a:ef:c0:
c1:62:3b:5c:6b:81:79:af:44:b2:ee:ad:85:48:0c:0f:1b:21:
61:4b:e1:ca:86:e7:41:a1:70:80:5e:75:a1:c5:b3:99:70:f7:
73:48:4e:f7:16:68:6a:af:14:6d:f0:07:93:df:73:7e:d7:ef:
7f:48:db:16:24:cc:49:be:11:d7:d4:a9:1d:04:e7:79:c7:23:
56:21:3a:61:50:b2:57:f5:de:96:0e:6d:d1:75:1c:bf:2b:32:
4d:d3:37:6e:5a:d3:ab:21:74:ef:a6:c0:02:6b:fb:89:af:dd:
bd:43:a2:1e:5e:54:77:52:e5:37:c5:44:e4:86:be:0b:d7:68:
88:2d:9e:1f:5b:f7:5d:76:1e:fd:fd:d6:78:3a:d2:b0:7b:6f:
83:48:0a:a6:44:41:ce:0a:90:8f:d2:7d:4b:30:08:ec:10:12:
d4:2b:cc:d1:fc:b4:7a:ae:2c:6b:3b:44:ce:d2:91:68:66:0b:
95:d9:f3:9f:ea:23:82:29:17:56:19:54:79:12:03:59:6a:a4:
e9:4a:0f:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAaCNN/Ech7EaL8ADX/6ghR4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTEwMjEyNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2YwNTFjMGIzMWM5Y2ZhYjMzN2VhMDRmYmE2ODA5OTQxN2ZkNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1lm38GdMmiNubk3qaJZCDGNJJht
glMk4CC4QSy4Gow0062OzXVCFdIdKeOizklJXAC3bSSm4o130ep3kfg780G5ADD2
Or+ZCcyRUizmR9iZbZl6KkaMa1XcDspOSmz3Z5rUlJx2P5swPYH3uEDjKRwnxYrj
2WqaBaKZYPeFJMZwvW9zKt4IBSRTeTgyrnS6MAKqV+qI3w7SMtNCmobak57RrMSl
5hOjEkOL85d9bcmn6eIVXNmEgNOl+0/+qms36WuQwSOMgFiqSbm8HUP+CFDsmpoM
NBqH2Kq+SoNnpdZEuhHP2p3u331/saTcmPKXgYucYC3JQcUK1pSzTUJsjQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFNPwUcCzHJz6szfqBPumgJlBf9V8MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMF9CUndMTWNuUHF6Ti1vRS02YUFtVUZfMVh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB
RAMEAAIaXwMEAAIafgMEAAIamwMEAAIanwMEAAIarwMEAAIavQMEAAIavwMEAwIa
0AMEAAIbUgMEAAIbWQMEAAIbWwMEAAIbZwMEAAIbmwMEAQIbogMEAgIb5AMEAAIb
7wMEAg2PHAMEAg2PMAMEAw2PSAMEAQ2PggMEAA2PiAMEAA2PjgMEAw2PkAMEAB9M
JQMEAB9MewMEAh9MwAMEAh9M0AMEAR9M5AMEAR9M6AMEAR9M7AMEAR9M8gMEAh9N
EAMEAh9NHAMEAB9NNwMEAB9NRQMEAB9NZQMEAB9NdwMEAB9NiAMEAh9NpAMEAB9N
0QMEAJAfIgMEAJAfbgMEApAfoAMEAJAf6wMEAJbxRQMEArEBsAMEALEBxwMEALEB
yQMEArP+bAMEALnPhwMEArnYaAMEAMEXwAMEAMEXxgMEAsEXzDANBgkqhkiG9w0B
AQsFAAOCAQEAJ+SP/DhEc+8Ajqa7HQ73LwRMMhyU/f63ZR/fKjuEHZ0+Cyekpok+
pcYtsTbzWaw1OPj1Wu/AwWI7XGuBea9Esu6thUgMDxshYUvhyobnQaFwgF51ocWz
mXD3c0hO9xZoaq8UbfAHk99zftfvf0jbFiTMSb4R19SpHQTneccjViE6YVCyV/Xe
lg5t0XUcvysyTdM3blrTqyF076bAAmv7ia/dvUOiHl5Ud1LlN8VE5Ia+C9doiC2e
H1v3XXYe/f3WeDrSsHtvg0gKpkRBzgqQj9J9SzAI7BAS1CvM0fy0eq4saztEztKR
aGYLldnzn+ojgikXVhlUeRIDWWqk6UoPJQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:11:05 2026 by rpki-client