Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/obJDPQwcPA0leVXTw5bNCgen-TU.roa
File: obJDPQwcPA0leVXTw5bNCgen-TU.roa (raw, json)
Hash identifier: jo+2f9/5ptOMFQFHngFAG65Jw0+UcEVLHRz7MHvcbu8=
Subject key identifier: A1:B2:43:3D:0C:1C:3C:0D:25:79:55:D3:C3:96:CD:0A:07:A7:F9:35
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0FDA6A1E130B7EFC2B5A673B963F41884
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/obJDPQwcPA0leVXTw5bNCgen-TU.roa
Signing time: Fri 02 Oct 2026 17:25:51 +0000
ROA not before: Fri 02 Oct 2026 17:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.185.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.106.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.196.0/22 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.52.0/22 maxlen: 24
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.136.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.172.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
152.234.192.0/18 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
177.3.192.0/20 maxlen: 24
177.3.224.0/19 maxlen: 24
177.202.64.0/19 maxlen: 24
177.202.96.0/20 maxlen: 24
177.202.112.0/21 maxlen: 24
179.67.128.0/18 maxlen: 24
179.236.128.0/20 maxlen: 24
179.236.144.0/22 maxlen: 24
179.253.64.0/18 maxlen: 24
179.253.128.0/22 maxlen: 24
179.253.132.0/22 maxlen: 24
179.253.136.0/22 maxlen: 24
179.253.140.0/22 maxlen: 24
179.253.144.0/22 maxlen: 24
179.253.148.0/22 maxlen: 24
179.253.152.0/22 maxlen: 24
179.253.156.0/22 maxlen: 24
179.253.164.0/24 maxlen: 24
179.253.168.0/23 maxlen: 24
179.253.170.0/23 maxlen: 24
179.253.173.0/24 maxlen: 24
179.253.174.0/23 maxlen: 24
179.253.176.0/23 maxlen: 24
179.253.180.0/23 maxlen: 24
179.253.182.0/24 maxlen: 24
179.253.184.0/23 maxlen: 24
179.253.186.0/23 maxlen: 24
179.253.188.0/23 maxlen: 24
179.253.190.0/24 maxlen: 24
179.254.64.0/22 maxlen: 24
179.254.106.0/24 maxlen: 24
179.254.128.0/22 maxlen: 24
179.254.132.0/22 maxlen: 24
179.254.136.0/22 maxlen: 24
179.254.140.0/22 maxlen: 24
179.254.144.0/22 maxlen: 24
179.254.148.0/22 maxlen: 24
179.254.152.0/22 maxlen: 24
179.254.156.0/22 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
191.217.192.0/22 maxlen: 24
191.217.196.0/22 maxlen: 24
191.217.200.0/22 maxlen: 24
191.217.204.0/22 maxlen: 24
191.217.208.0/24 maxlen: 24
191.217.209.0/24 maxlen: 24
191.217.211.0/24 maxlen: 24
191.217.212.0/24 maxlen: 24
191.217.213.0/24 maxlen: 24
191.217.214.0/24 maxlen: 24
191.217.220.0/22 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
191.217.232.0/23 maxlen: 24
191.217.234.0/23 maxlen: 24
191.217.236.0/23 maxlen: 24
191.217.238.0/23 maxlen: 24
191.223.136.0/21 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
201.8.64.0/19 maxlen: 24
201.10.92.0/24 maxlen: 24
201.58.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Oct 2026 21:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:a6:a1:e1:30:b7:ef:c2:b5:a6:73:b9:63:f4:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 2 17:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1b2433d0c1c3c0d257955d3c396cd0a07a7f935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:93:fa:8b:40:59:1c:9d:58:6c:42:7c:c4:
75:f3:fd:a4:c2:b8:39:07:2f:36:06:d3:b5:63:70:
70:95:2d:c5:39:8f:7f:f6:09:52:cc:d7:8d:89:ec:
b1:99:3c:14:19:62:59:db:6a:ed:d5:1a:7b:6a:5b:
cc:61:6c:90:46:a6:bb:00:b6:92:21:84:44:d9:e3:
4d:81:23:c6:8b:73:bd:ff:ad:a6:01:0c:81:1e:7d:
fa:13:96:04:3e:11:68:19:e1:7f:15:23:8f:de:a5:
22:a6:f8:ef:e2:cf:6b:e1:28:70:61:22:ee:08:aa:
49:4b:e2:7e:f2:7e:6e:94:f6:b1:d6:40:e0:0a:d9:
e4:5f:a1:52:f9:9d:7a:d3:d2:5d:7a:a1:13:6f:5d:
1c:09:c1:13:b3:11:1a:9c:2f:78:a8:3e:a8:bd:0b:
d2:be:9c:e7:62:56:96:dc:ec:8e:50:e6:51:5a:9f:
eb:9b:ec:e9:8f:23:39:f7:08:67:69:f3:4c:38:fd:
3a:9b:5a:f4:77:45:cf:18:70:57:a7:32:66:a6:ce:
28:c9:84:3a:4c:01:4e:aa:39:2d:cb:6c:b2:cd:6d:
4a:26:55:0b:c8:ca:3b:40:6d:a1:53:aa:3d:bc:2e:
55:aa:44:ae:c8:d8:aa:04:73:3e:ec:b3:fc:0a:66:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:43:3D:0C:1C:3C:0D:25:79:55:D3:C3:96:CD:0A:07:A7:F9:35
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/obJDPQwcPA0leVXTw5bNCgen-TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.185.0/24
2.26.187.0/24
2.26.208.0/21
2.27.103.0/24
2.27.106.0/24
2.27.162.0/23
2.27.167.0/24
2.27.196.0/22
2.27.228.0/22
2.27.239.0/24
13.143.48.0/21
13.143.72.0/21
13.143.136.0/24
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
144.31.110.0/24
144.31.160.0/22
144.31.172.0/22
144.31.235.0/24
150.241.69.0/24
152.234.192.0/18
177.1.176.0/22
177.1.201.0/24
177.3.192.0/20
177.3.224.0/19
177.202.64.0-177.202.119.255
179.67.128.0/18
179.236.128.0-179.236.147.255
179.253.64.0-179.253.159.255
179.253.164.0/24
179.253.168.0/22
179.253.173.0-179.253.177.255
179.253.180.0-179.253.182.255
179.253.184.0-179.253.190.255
179.254.64.0/22
179.254.106.0/24
179.254.128.0/19
185.207.135.0/24
185.216.104.0/22
191.217.192.0-191.217.209.255
191.217.211.0-191.217.214.255
191.217.220.0/22
191.217.226.0/23
191.217.230.0-191.217.239.255
191.223.136.0/21
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
201.8.64.0/19
201.10.92.0/24
201.58.128.0/18
Signature Algorithm: sha256WithRSAEncryption
67:80:14:f2:55:41:9e:35:b9:13:89:3d:9f:00:c8:73:5b:f3:
0c:9f:e5:f6:72:8b:bc:fe:4d:bb:5c:a1:ca:af:8e:c7:bf:bf:
84:5d:17:1d:db:8b:0c:c6:8c:78:02:32:58:e3:44:c0:6f:74:
9f:ae:a5:fa:83:52:4d:e9:63:6a:88:d0:a1:78:78:91:eb:8e:
84:a0:e5:00:b2:75:98:a5:ca:e6:36:f1:b3:d6:5a:b1:b2:85:
50:a8:3a:2b:cf:da:18:e8:9e:26:b0:db:de:13:57:e3:ed:47:
1b:eb:48:f6:ef:fc:ab:cd:be:ff:8a:a5:fc:74:c7:f2:a4:a1:
6a:6d:07:93:ae:94:3a:df:94:ac:84:4a:cd:66:c7:2e:37:21:
ff:89:45:8f:83:21:9c:ae:c1:f6:0b:2c:0a:cc:80:8c:b8:27:
88:76:a6:bd:6c:29:68:84:e1:39:a8:1f:3e:9b:9e:3f:b6:1d:
e2:fc:f9:46:b9:2b:61:f8:01:a7:a4:73:70:19:64:b8:0f:df:
95:2b:25:15:cc:78:22:33:ff:6c:18:ba:56:f2:4f:42:7a:67:
a9:09:0d:49:26:68:3b:37:38:06:c1:2c:7b:52:4f:66:0b:9a:
8d:ba:a0:bc:04:b0:54:3c:21:6b:39:dd:4a:c5:53:03:b8:39:
cd:15:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:28 2026 by rpki-client