Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZOF7JT9eCINjicZPMV86H9K_3kQ.roa
File: ZOF7JT9eCINjicZPMV86H9K_3kQ.roa (raw, json)
Hash identifier: hHCKy8Am5ICaCSZLoMDKhGEH2IMA45cG5e7SCTw7HBA=
Subject key identifier: 64:E1:7B:25:3F:5E:08:83:63:89:C6:4F:31:5F:3A:1F:D2:BF:DE:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A02102D3E06AA2F3D57A626C69D4252270
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZOF7JT9eCINjicZPMV86H9K_3kQ.roa
Signing time: Thu 20 Aug 2026 21:10:28 +0000
ROA not before: Thu 20 Aug 2026 21:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 2.26.64.0/22 maxlen: 24
2.26.64.0/24 maxlen: 24
2.26.65.0/24 maxlen: 24
2.26.72.0/23 maxlen: 24
2.26.73.0/24 maxlen: 24
2.26.121.0/24 maxlen: 24
2.27.1.0/24 maxlen: 24
2.27.48.0/23 maxlen: 24
2.27.49.0/24 maxlen: 24
2.27.50.0/23 maxlen: 24
2.27.192.0/22 maxlen: 24
31.76.40.0/22 maxlen: 24
31.76.56.0/22 maxlen: 24
31.77.192.0/22 maxlen: 24
37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.72.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/24 maxlen: 24
144.31.81.0/24 maxlen: 24
144.31.132.0/24 maxlen: 24
144.31.133.0/24 maxlen: 24
144.31.184.0/24 maxlen: 24
144.31.185.0/24 maxlen: 24
144.31.194.0/24 maxlen: 24
144.31.195.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
177.1.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Aug 2026 18:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:02:d3:e0:6a:a2:f3:d5:7a:62:6c:69:d4:25:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 21:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e17b253f5e08836389c64f315f3a1fd2bfde44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:cd:cb:49:20:4e:4d:d9:af:b4:92:06:53:
f9:d4:07:c6:c3:47:91:4c:6c:c8:4f:cd:02:6a:bf:
96:5b:c7:61:bc:64:43:4c:d5:8c:41:8b:f5:4f:58:
07:ca:ad:94:a2:67:8a:f2:84:c8:a6:f4:0e:70:41:
3f:78:16:74:a8:e4:79:28:de:31:e9:73:70:3b:86:
19:cb:70:a3:cd:02:ad:21:8b:0a:99:91:b5:3b:1d:
c9:8b:d6:23:95:60:69:ea:73:cc:08:92:42:6e:aa:
37:ff:fc:c2:c9:e6:60:cb:4f:36:fe:6a:fc:c0:e6:
01:96:02:9f:f2:b6:b0:3e:75:a6:6e:2d:0f:9a:f1:
6f:16:e1:92:c1:fb:31:16:a2:1e:1c:ea:1d:e8:5a:
cd:fa:20:35:29:ae:49:4f:c0:ac:d5:23:c7:e1:2d:
52:60:a3:d7:21:ce:d0:74:09:1a:01:3a:5f:34:95:
36:e5:4f:75:86:7f:0a:25:da:c2:af:45:92:32:89:
61:ff:75:1c:e1:2e:90:a5:44:68:7c:51:a3:45:fe:
7a:bd:c3:ac:69:fd:87:10:f7:a4:b5:14:b0:39:a8:
2f:9d:b0:c2:25:f1:d7:ae:b5:30:1b:86:86:39:3f:
d2:fe:87:ef:84:47:aa:82:0e:47:ea:53:a8:c5:6d:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:7B:25:3F:5E:08:83:63:89:C6:4F:31:5F:3A:1F:D2:BF:DE:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZOF7JT9eCINjicZPMV86H9K_3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.64.0/22
2.26.72.0/23
2.26.121.0/24
2.27.1.0/24
2.27.48.0/22
2.27.192.0/22
31.76.40.0/22
31.76.56.0/22
31.77.192.0/22
37.46.16.0/22
64.188.72.0/24
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.132.0/23
144.31.184.0/23
144.31.194.0/23
150.241.76.0/23
150.241.113.0-150.241.114.255
177.1.184.0/23
Signature Algorithm: sha256WithRSAEncryption
22:ab:ac:27:2d:8d:d5:5e:3f:30:1a:19:2a:4f:55:c4:d4:13:
5f:98:63:87:19:9b:14:65:af:e2:c9:75:39:03:3b:24:c6:ff:
3c:86:14:d1:5d:c5:ac:c3:2f:a4:71:09:6f:db:f4:21:55:ea:
be:0f:14:f7:46:be:0d:f1:9f:ab:f9:31:7c:50:c3:e6:52:6c:
3f:d9:eb:47:3f:67:46:d9:e5:df:0e:f8:eb:c4:64:a9:ab:34:
89:30:6d:e1:4c:25:60:f1:16:01:7c:f9:e4:1a:47:45:a0:dd:
54:fc:0c:da:b1:50:a4:36:04:fc:aa:4d:9a:82:42:e1:7c:15:
7e:e3:8e:34:31:aa:9d:4b:c1:e0:5b:a2:bc:58:f3:38:50:30:
af:63:56:64:6d:d2:ec:6b:13:9a:61:bb:a8:77:41:f2:36:11:
c5:a4:cd:a5:b7:b2:c7:ef:9a:3c:6f:b2:a7:d1:a5:f0:02:a6:
f2:08:12:58:ac:db:b8:8c:8d:a6:2e:05:f3:e0:04:ad:76:54:
3f:34:f0:35:8a:03:12:20:0e:cd:5f:4f:77:52:fe:06:e0:4f:
3f:93:05:d2:d2:a0:da:7d:31:a1:68:66:c8:8d:ff:cb:d7:21:
2a:85:b2:64:a3:13:93:ab:62:ec:a4:7d:c1:6f:0a:2b:f9:8f:
48:f1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:05 2026 by rpki-client