Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9cAdhG1RYozkF2zuWaEy9EJlpCg.roa
File: 9cAdhG1RYozkF2zuWaEy9EJlpCg.roa (raw, json)
Hash identifier: IsniMXzTzjJmT7Ybfn8dIa0SNEXKC6ME/qSvGWzxs/4=
Subject key identifier: F5:C0:1D:84:6D:51:62:8C:E4:17:6C:EE:59:A1:32:F4:42:65:A4:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A07819F49A77AAE3C5798AA1FCFA7EAB60
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9cAdhG1RYozkF2zuWaEy9EJlpCg.roa
Signing time: Sun 06 Sep 2026 19:02:41 +0000
ROA not before: Sun 06 Sep 2026 19:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.26.24.0/22 maxlen: 24
2.26.76.0/23 maxlen: 24
2.26.162.0/23 maxlen: 24
2.27.24.0/23 maxlen: 24
2.27.28.0/22 maxlen: 24
2.27.175.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.160.0/23 maxlen: 24
31.77.162.0/24 maxlen: 24
31.77.226.0/24 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
177.1.186.0/23 maxlen: 24
177.1.188.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Sep 2026 22:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:19:f4:9a:77:aa:e3:c5:79:8a:a1:fc:fa:7e:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 6 19:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c01d846d51628ce4176cee59a132f44265a428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:4e:b6:df:b0:9b:d3:f2:96:e8:4a:94:01:
3c:db:29:56:4f:b2:bb:72:75:54:a7:eb:54:f6:ad:
24:7f:cb:6c:07:08:e9:0a:b4:be:55:7c:be:23:ab:
d8:fa:77:a1:4e:a4:88:12:aa:80:9e:46:f5:a6:83:
d8:b9:f3:71:9f:fc:7e:1f:34:1e:ad:4d:a2:79:21:
6e:fd:40:9f:bb:08:b0:18:f6:6e:b7:73:51:a9:36:
98:01:0d:ce:e1:f4:9e:6e:af:90:dc:07:7c:87:3f:
51:1f:ff:49:ee:ce:b1:da:31:ce:ed:c2:d5:80:0d:
07:94:44:74:51:a1:a7:1a:2b:28:58:d6:8c:d5:d5:
7b:e8:35:3c:e3:fb:9c:78:7d:fc:d3:15:07:99:51:
0a:71:f6:b0:87:11:27:d9:73:48:22:e1:9d:4d:54:
01:c5:2b:fc:47:bb:dd:85:c4:41:75:dc:12:3a:d6:
c8:a0:de:9a:d3:f9:1e:92:09:b4:bb:a9:f5:ba:00:
ad:26:12:e9:c5:2e:3d:f1:f0:c3:f5:78:af:96:d7:
3e:2a:6d:0d:5b:15:95:3b:ca:0e:b4:a8:83:cb:ff:
dc:0a:6d:10:1e:bc:93:21:15:84:73:c0:51:d6:a5:
a6:74:f1:18:2b:4d:b9:e8:8e:d0:12:47:bc:c4:c3:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:1D:84:6D:51:62:8C:E4:17:6C:EE:59:A1:32:F4:42:65:A4:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9cAdhG1RYozkF2zuWaEy9EJlpCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.24.0/22
2.26.76.0/23
2.26.162.0/23
2.27.24.0/23
2.27.28.0/22
2.27.175.0/24
31.77.105.0/24
31.77.160.0-31.77.162.255
31.77.226.0/24
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
177.1.186.0-177.1.189.255
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
44:20:92:b6:02:32:c6:f8:3e:4f:72:c8:5c:cc:0d:25:3b:06:
9a:39:0f:3c:00:4a:8a:9d:07:c8:58:1e:b2:a4:fc:82:ae:43:
91:99:c2:dc:d1:b1:29:8f:be:9b:5a:c0:e4:38:7b:1d:b1:da:
0d:8b:db:ba:41:7e:64:9b:3b:1c:b2:60:13:d6:f2:1c:37:88:
e7:ed:e3:e9:29:67:2a:3d:5b:14:c8:8d:cd:0d:b4:01:46:85:
9e:6f:dd:fc:52:62:e3:a8:01:98:47:60:5e:01:e1:e2:0f:28:
4b:da:42:29:93:ee:0f:14:e5:ef:5f:ee:90:ea:ea:27:85:14:
58:00:b9:44:64:10:0a:05:85:2e:3e:fd:b3:ff:6e:f5:69:68:
e1:b4:b7:08:da:b9:25:43:c6:e1:cb:fb:3b:d7:6f:77:ee:86:
b4:2a:01:d1:9b:7f:ed:e5:3b:b6:33:27:3a:7b:94:76:2f:20:
e6:5a:7b:d9:2e:0a:05:35:85:95:35:79:0d:a3:ce:2d:83:8a:
cc:d6:94:84:b5:2d:78:5a:21:57:44:2c:37:a6:51:d5:0c:ae:
e7:bc:ff:9b:3b:ca:fb:85:92:fa:1d:97:a4:3d:3c:75:38:ac:
36:a1:90:d0:10:63:e9:df:41:1f:a2:30:06:57:51:20:24:a1:
00:a7:cb:a8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAaB4GfSad6rjxXmKofz6fqtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA2MTkwMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWMwMWQ4NDZkNTE2MjhjZTQxNzZjZWU1OWExMzJmNDQyNjVhNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNlOtt+wm9PyluhKlAE82ylWT7K7
cnVUp+tU9q0kf8tsBwjpCrS+VXy+I6vY+nehTqSIEqqAnkb1poPYufNxn/x+HzQe
rU2ieSFu/UCfuwiwGPZut3NRqTaYAQ3O4fSebq+Q3Ad8hz9RH/9J7s6x2jHO7cLV
gA0HlER0UaGnGisoWNaM1dV76DU84/uceH380xUHmVEKcfawhxEn2XNIIuGdTVQB
xSv8R7vdhcRBddwSOtbIoN6a0/kekgm0u6n1ugCtJhLpxS498fDD9Xivltc+Km0N
WxWVO8oOtKiDy//cCm0QHryTIRWEc8BR1qWmdPEYK0256I7QEke8xMObpwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFPXAHYRtUWKM5Bds7lmhMvRCZaQoMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOWNBZGhHMVJZb3prRjJ6dVdhRXk5RUpscENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBvwQCAAEwgbgDBAIC
GhgDBAECGkwDBAECGqIDBAECGxgDBAICGxwDBAACG68DBAAfTWkwDAMEBR9NoAME
AB9NogMEAB9N4gMEAkC8RAMEAEC8SgMEAkC8aAMEAU3veAMEApAfEAMEAZAfPgME
AZAfVAMEApAfdAMEAZAfegMEAZAfhgMEAZAfigMEAZAfxAMEAZAf6AMEAJbxQAME
AZbxTjAMAwQBsQG6AwQBsQG8AwQAwRfFAwQBwRfSAwQBwRfaMA0GCSqGSIb3DQEB
CwUAA4IBAQBEIJK2AjLG+D5PcshczA0lOwaaOQ88AEqKnQfIWB6ypPyCrkORmcLc
0bEpj76bWsDkOHsdsdoNi9u6QX5kmzscsmAT1vIcN4jn7ePpKWcqPVsUyI3NDbQB
RoWeb938UmLjqAGYR2BeAeHiDyhL2kIpk+4PFOXvX+6Q6uonhRRYALlEZBAKBYUu
Pv2z/271aWjhtLcI2rklQ8bhy/s712937oa0KgHRm3/t5Tu2Myc6e5R2LyDmWnvZ
LgoFNYWVNXkNo84tg4rM1pSEtS14WiFXRCw3plHVDK7nvP+bO8r7hZL6HZekPTx1
OKw2oZDQEGPp30EfojAGV1EgJKEAp8uo
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:37 2026 by rpki-client