Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa
File: g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa (raw, json)
Hash identifier: cCsbxJn1kuXwBFR424p3Oksv32Sv4ObeGj7WrOyvMhY=
Subject key identifier: 83:92:A8:E4:C9:78:DC:E3:47:02:2F:1D:29:F3:B0:85:11:C3:BD:34
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019B79EC67832D438AD080BBC0316AC1F9B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa
Signing time: Thu 01 Jan 2026 14:18:14 +0000
ROA not before: Thu 01 Jan 2026 14:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/23 maxlen: 24
144.31.194.0/23 maxlen: 24
150.241.76.0/23 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jan 2026 23:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:67:83:2d:43:8a:d0:80:bb:c0:31:6a:c1:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 14:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8392a8e4c978dce347022f1d29f3b08511c3bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:6a:93:45:9f:d3:61:14:bd:ce:92:2a:75:
c8:99:53:a9:c6:2a:fe:47:41:2f:97:31:45:38:ba:
92:59:3b:d4:b1:70:96:fe:77:79:11:dc:6b:29:f7:
fd:49:4d:a8:cd:82:f3:be:ca:1f:d5:8e:15:31:8a:
41:f5:a7:45:64:4d:a4:51:09:ea:13:31:fa:fe:3e:
69:2b:3d:2a:30:74:94:8a:f9:52:93:dc:80:71:16:
6c:5e:17:3f:bb:5e:c3:d3:88:11:7d:36:80:7a:f1:
fa:b3:20:6d:9c:77:13:07:0a:b1:dd:77:d4:1b:d5:
9a:a8:e8:f3:79:89:ac:f0:d8:d0:d2:c0:ef:e4:7c:
c4:60:db:77:45:3e:10:31:bc:19:a8:34:c6:38:6b:
a9:78:09:07:94:89:1c:41:dd:b4:55:ab:8e:4a:1c:
47:04:7c:49:9a:c4:ef:a7:c1:db:89:26:42:30:7c:
3f:d9:10:46:49:54:88:62:f5:f1:8c:9b:95:5b:94:
0c:52:2e:41:03:34:89:0b:62:01:92:3f:fa:09:4b:
8b:00:7e:61:0e:12:7e:e9:84:77:cb:f5:14:65:76:
5e:be:47:eb:ee:9e:9f:5d:53:45:94:94:42:5f:59:
ca:fe:21:c4:2a:ae:24:41:27:40:a4:bf:43:14:d4:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:A8:E4:C9:78:DC:E3:47:02:2F:1D:29:F3:B0:85:11:C3:BD:34
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g5Ko5Ml43ONHAi8dKfOwhRHDvTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/22
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.194.0/23
150.241.76.0/23
150.241.113.0-150.241.116.255
Signature Algorithm: sha256WithRSAEncryption
43:21:f3:e7:d5:10:9f:92:70:85:e5:b8:28:db:d1:14:72:ee:
0b:04:fa:33:6c:5d:50:e5:59:15:83:ce:c8:bc:bd:83:96:ad:
d5:e9:a9:b4:a8:8b:f7:25:2b:e4:9a:84:58:d8:f8:29:70:ec:
55:cc:7f:23:3a:f1:c2:3d:96:26:e2:ed:26:38:25:11:ca:79:
f7:7d:11:95:b6:20:6e:64:09:15:49:10:6c:65:a6:ba:09:ef:
d8:ab:51:95:e4:54:d0:ec:a5:fc:2b:54:8f:8c:4d:dc:b1:d9:
f4:55:5a:44:22:de:77:d8:11:4f:c2:49:93:07:05:c7:e5:14:
d7:43:bc:61:65:0c:92:9d:c4:4e:0c:0a:20:f9:8b:75:f7:49:
59:31:90:32:d4:63:35:77:89:9d:12:a1:ea:61:8b:1d:6a:61:
f2:cd:80:b2:0d:4d:7b:c1:b6:5f:0e:8c:d2:69:24:7e:04:d8:
5e:93:d0:bf:ca:5f:b5:5f:ba:30:b7:ae:39:77:ff:17:1a:9b:
8c:91:01:bb:45:05:6a:f3:0d:6b:9c:c5:33:5b:19:a4:65:11:
34:b8:eb:e2:a1:5c:10:e2:e0:be:9a:64:3f:4d:03:76:94:0a:
bb:0f:ab:22:5e:af:27:b8:1c:98:f3:c9:15:60:02:16:b6:f0:
01:39:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:58:33 2026 by rpki-client