Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9om6vvyTpgvu3oihaqYv29cFYVY.roa
File: 9om6vvyTpgvu3oihaqYv29cFYVY.roa (raw, json)
Hash identifier: C7DakVUb4/pjlYT79fJ1geUMGSX1eaMJy6Ib694ABqs=
Subject key identifier: F6:89:BA:BE:FC:93:A6:0B:EE:DE:88:A1:6A:A6:2F:DB:D7:05:61:56
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C29E5D3607F6DA7B13FBD37E8B94C20EB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9om6vvyTpgvu3oihaqYv29cFYVY.roa
Signing time: Wed 04 Feb 2026 18:24:13 +0000
ROA not before: Wed 04 Feb 2026 18:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Feb 2026 17:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:e5:d3:60:7f:6d:a7:b1:3f:bd:37:e8:b9:4c:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 4 18:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f689babefc93a60beede88a16aa62fdbd7056156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:74:4a:df:f5:7a:6e:4b:8f:d1:97:91:56:
0f:53:57:3f:df:3d:bd:5f:ff:87:73:63:bf:d3:53:
eb:0f:c2:de:9f:85:0b:2f:e3:c9:0e:fd:bc:ee:2b:
64:22:75:49:7d:20:09:f1:68:22:17:d7:68:db:8c:
58:29:3c:0f:1e:08:da:47:c9:61:a1:de:82:57:b8:
bf:33:ea:69:26:4a:68:da:ed:7d:96:cb:c8:26:ff:
9e:ee:3a:f5:41:d2:7e:b3:bf:7d:c5:6a:af:3f:df:
a8:6a:08:ba:28:7f:60:e6:0b:09:82:83:52:f8:d6:
4c:7e:7e:62:2b:57:b1:ce:b2:57:22:0c:7a:35:e3:
27:2a:67:85:a5:f0:d0:b0:ab:ec:df:f5:b2:55:0a:
f7:e1:e7:23:69:e0:f5:84:95:57:fd:18:63:e4:23:
94:b8:c2:d4:f1:1d:7e:85:ab:06:e9:77:a7:96:60:
f9:3b:2f:e8:96:8c:55:c4:0b:19:8d:bc:ab:44:59:
18:48:49:a6:cc:8a:14:d1:59:79:75:fb:52:cf:23:
aa:fd:98:a7:41:3d:ae:54:ca:67:75:d8:32:d6:cb:
f2:24:10:4a:60:ba:62:ac:7e:ad:6d:03:11:81:ee:
1f:c3:65:ba:d9:d0:5f:db:de:37:e6:e4:07:36:c9:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:BA:BE:FC:93:A6:0B:EE:DE:88:A1:6A:A6:2F:DB:D7:05:61:56
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9om6vvyTpgvu3oihaqYv29cFYVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:83:c7:00:f7:f9:ad:29:72:bd:6d:b0:e3:b2:f5:a3:b5:0b:
6d:d2:c8:51:ad:72:2b:3d:f3:d6:7f:63:27:80:0d:d9:ff:df:
f9:36:cd:04:f1:09:1b:f7:9f:7d:3e:87:c9:b5:d6:c6:8f:9a:
32:ef:26:67:00:3a:a8:f4:22:32:28:79:a2:11:9a:7c:50:48:
25:9f:5d:f6:de:f9:d6:d8:3d:77:56:82:58:5f:3d:02:25:34:
33:f9:ea:33:59:a5:2e:61:a3:6c:e5:b7:11:64:f7:67:8a:a7:
6f:c6:c5:72:56:34:b7:09:5f:4f:11:81:1b:89:77:c8:5a:c9:
c1:75:f8:79:3a:01:b2:a5:8b:32:27:4e:ca:ca:b0:0b:84:e1:
ff:47:97:5c:f7:9e:6d:24:1b:ab:b3:cc:b2:bd:a6:34:1d:91:
82:7c:f5:fb:c8:ae:b5:ca:e1:63:a1:67:6a:57:73:4d:98:37:
66:5d:36:b1:38:b2:73:16:d0:c6:8d:c4:6d:b9:15:f2:12:3d:
04:94:72:1b:53:4c:da:99:33:76:86:1d:83:77:39:6f:54:a8:
3b:5d:4c:f5:94:3a:27:79:71:73:a7:93:3a:93:08:1e:2d:28:
cf:9e:f7:2d:cf:63:87:ef:a9:54:cf:19:b2:5a:36:79:93:48:
48:14:92:4b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZwp5dNgf22nsT+9N+i5TCDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMjA0MTgyNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjg5YmFiZWZjOTNhNjBiZWVkZTg4YTE2YWE2MmZkYmQ3MDU2MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01F0St/1em5Lj9GXkVYPU1c/3z29
X/+Hc2O/01PrD8Len4ULL+PJDv287itkInVJfSAJ8WgiF9do24xYKTwPHgjaR8lh
od6CV7i/M+ppJkpo2u19lsvIJv+e7jr1QdJ+s799xWqvP9+oagi6KH9g5gsJgoNS
+NZMfn5iK1exzrJXIgx6NeMnKmeFpfDQsKvs3/WyVQr34ecjaeD1hJVX/Rhj5COU
uMLU8R1+hasG6XenlmD5Oy/oloxVxAsZjbyrRFkYSEmmzIoU0Vl5dftSzyOq/Zin
QT2uVMpnddgy1svyJBBKYLpirH6tbQMRge4fw2W62dBf29435uQHNslx+QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPaJur78k6YL7t6IoWqmL9vXBWFWMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOW9tNnZ2eVRwZ3Z1M29paGFxWXYyOWNGWVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQLxzAwQA
Te9/AwQAkB9iAwQBkB+aAwQCkB+0AwQAkB/7MA0GCSqGSIb3DQEBCwUAA4IBAQAq
g8cA9/mtKXK9bbDjsvWjtQtt0shRrXIrPfPWf2MngA3Z/9/5Ns0E8Qkb9599PofJ
tdbGj5oy7yZnADqo9CIyKHmiEZp8UEgln1323vnW2D13VoJYXz0CJTQz+eozWaUu
YaNs5bcRZPdniqdvxsVyVjS3CV9PEYEbiXfIWsnBdfh5OgGypYsyJ07KyrALhOH/
R5dc955tJBurs8yyvaY0HZGCfPX7yK61yuFjoWdqV3NNmDdmXTaxOLJzFtDGjcRt
uRXyEj0ElHIbU0zamTN2hh2DdzlvVKg7XUz1lDoneXFzp5M6kwgeLSjPnvctz2OH
76lUzxmyWjZ5k0hIFJJL
-----END CERTIFICATE-----
Generated at Mon Mar 16 04:06:47 2026 by rpki-client