Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G2ZzJrTmu7CfUWONC8r24hvIZsQ.roa
File: G2ZzJrTmu7CfUWONC8r24hvIZsQ.roa (raw, json)
Hash identifier: f8/CL1FyEZt8mtPidZuWOb06o58xkDlSMo7KTvAn5dw=
Subject key identifier: 1B:66:73:26:B4:E6:BB:B0:9F:51:63:8D:0B:CA:F6:E2:1B:C8:66:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A025ABC3B7F68829D24FAE47BB12C95DDB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G2ZzJrTmu7CfUWONC8r24hvIZsQ.roa
Signing time: Fri 21 Aug 2026 18:53:28 +0000
ROA not before: Fri 21 Aug 2026 18:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 2.26.148.0/24 maxlen: 24
2.27.244.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
31.76.22.0/24 maxlen: 24
31.76.23.0/24 maxlen: 24
64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/24 maxlen: 24
64.188.81.0/24 maxlen: 24
64.188.82.0/24 maxlen: 24
64.188.83.0/24 maxlen: 24
77.239.126.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
144.31.168.0/22 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Sep 2026 19:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:ab:c3:b7:f6:88:29:d2:4f:ae:47:bb:12:c9:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 18:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b667326b4e6bbb09f51638d0bcaf6e21bc866c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:b6:9d:e3:9a:e1:d4:56:e4:d3:9a:77:c2:
0e:5e:63:2a:77:ac:b5:de:35:3a:67:d6:09:ae:46:
9c:7e:f5:47:e3:4b:ce:cb:38:4d:26:df:c4:be:27:
77:2f:c7:80:45:0f:72:86:30:5e:52:e6:97:28:93:
c5:04:7d:58:37:e7:38:a4:3b:70:e7:03:bd:57:df:
55:23:eb:09:94:ab:e2:16:7c:1d:5f:bd:6f:68:d2:
75:9c:4f:55:80:17:c1:76:f2:82:6c:ac:eb:ba:0f:
21:0f:2b:89:ac:7e:b2:80:1b:d3:b2:46:bf:63:fa:
fd:79:25:e1:f4:d8:60:91:5f:b7:bb:8d:05:f3:98:
d4:0a:08:8a:1b:00:29:45:e3:16:79:e1:4f:c1:dc:
f2:b4:88:ac:56:21:34:db:05:a5:b6:ba:37:98:b5:
a8:e9:f9:17:c0:b3:14:52:b2:7f:ec:51:7e:55:0a:
b4:77:28:bf:cf:0b:18:09:cd:81:8e:70:30:7b:3d:
81:ce:59:3f:fb:85:1a:8b:b6:4d:59:86:57:ca:c5:
ce:e1:e0:ed:71:d0:d0:65:b4:e3:06:03:91:33:3a:
a0:82:fc:95:a4:2e:62:f5:a2:28:1b:27:ad:aa:31:
d7:94:6c:c8:62:70:7e:d8:9a:75:87:5c:2a:d7:6f:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:73:26:B4:E6:BB:B0:9F:51:63:8D:0B:CA:F6:E2:1B:C8:66:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G2ZzJrTmu7CfUWONC8r24hvIZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.148.0/24
2.27.244.0/24
2.27.254.0/24
31.76.22.0/23
64.188.76.0-64.188.83.255
77.239.126.0/24
87.251.16.0/22
144.31.168.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9d:39:0b:bf:a0:4c:9d:98:9d:b3:1a:74:51:de:c4:c6:3d:
a0:61:8f:82:d0:91:ea:31:2c:42:7f:4f:4d:b6:19:8d:c3:30:
b7:5c:69:5d:f3:92:5d:c4:cb:fd:91:da:99:44:b3:fd:03:b2:
86:a1:c6:bd:c1:58:50:c9:ab:38:4f:e9:5d:2b:59:5e:02:f7:
c3:3b:d1:ed:46:70:33:d1:72:fa:b1:c4:95:8c:3f:07:e2:86:
f2:9d:97:92:28:4b:be:8c:a7:91:72:dc:82:b6:9b:d8:de:5f:
df:d5:b4:59:9e:de:73:1a:57:dc:38:3c:aa:8a:4b:40:67:bc:
f8:48:45:6f:ea:68:2e:32:f2:ad:d1:58:4c:e2:a1:3a:82:d0:
d1:6d:e6:79:32:91:da:6d:be:7c:60:d4:f9:0e:60:a4:b9:17:
7a:1e:7b:70:d0:15:4c:e5:aa:4a:bb:30:cf:31:c8:1b:93:5f:
2b:78:86:e1:28:76:30:79:03:8d:c1:96:cb:c2:86:9b:ca:25:
ea:00:6c:90:10:e2:fd:d3:42:73:56:b1:49:29:92:1c:01:19:
56:7e:a2:fa:9d:e7:50:0a:d7:e9:cc:07:89:2a:56:49:94:2a:
4d:7f:73:a9:3e:37:e0:cb:48:19:99:88:7b:e2:a5:6b:bb:75:
4f:ec:18:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:22:54 2026 by rpki-client