Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/9NN4sneYX5yFX2nF57cB-7DOgUU.roa
File: 9NN4sneYX5yFX2nF57cB-7DOgUU.roa (raw, json)
Hash identifier: CB5iAR6CvTXyfF/elT5SFgoyb5AIIBMWafvdFh1FrK8=
Subject key identifier: F4:D3:78:B2:77:98:5F:9C:85:5F:69:C5:E7:B7:01:FB:B0:CE:81:45
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A0F759498A0CCD3B40A2A7BA4E86809D93
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/9NN4sneYX5yFX2nF57cB-7DOgUU.roa
Signing time: Thu 01 Oct 2026 12:03:38 +0000
ROA not before: Thu 01 Oct 2026 12:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Oct 2026 10:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:59:49:8a:0c:cd:3b:40:a2:a7:ba:4e:86:80:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 1 12:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4d378b277985f9c855f69c5e7b701fbb0ce8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:d4:09:0f:f7:59:2c:8d:f9:0a:59:60:7e:
ad:8e:3d:32:d3:95:c4:0f:c9:c6:7f:9a:f9:ea:f1:
f2:ee:9c:5e:87:e0:33:e1:8d:74:f3:df:e8:51:cb:
cd:61:bb:d8:67:61:9e:29:c4:fc:ad:4d:45:01:4c:
f6:c0:d1:8f:10:a3:b5:26:fb:24:02:4c:c2:39:31:
3e:d9:5c:e6:7f:b0:54:e7:36:60:56:91:41:59:45:
77:2e:f7:db:1e:9f:83:2a:f2:6f:c4:e8:06:87:68:
26:12:93:ce:f8:22:f1:f0:21:39:b9:ea:af:53:04:
1d:4e:ba:1f:e4:21:33:b8:35:5a:ed:6f:55:0c:40:
1a:50:36:57:c3:4c:a6:10:0c:a2:2b:5b:8b:e5:87:
91:55:7e:6a:52:8e:17:e9:f3:22:c5:62:e1:60:c3:
ef:f3:43:7a:8d:a3:2d:1c:bc:1a:aa:ae:a8:77:c1:
a8:05:f5:5e:68:6f:f3:2e:d2:39:5a:75:c2:05:09:
d9:e7:1f:f2:9e:a0:05:92:0c:fc:f2:df:fd:97:eb:
79:92:81:b4:4a:4c:73:2f:1b:d2:b6:db:a0:96:4d:
4f:b3:c2:ef:f3:97:f9:3f:54:7e:bf:12:97:08:f3:
2f:db:03:9b:06:d6:87:d8:67:5c:7a:59:98:2c:9c:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:78:B2:77:98:5F:9C:85:5F:69:C5:E7:B7:01:FB:B0:CE:81:45
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/9NN4sneYX5yFX2nF57cB-7DOgUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/23
80.93.196.0/24
80.93.198.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
15:18:8c:aa:e0:d7:13:f5:c4:38:8e:83:75:80:c4:f6:cd:0d:
a3:8a:a4:03:98:66:31:e6:81:05:5a:ee:7d:b5:ff:df:02:87:
70:2e:f4:09:c9:0b:ed:68:84:bc:a5:b4:be:e4:f2:31:a4:3b:
a9:eb:5a:f5:17:33:88:2c:b1:bc:ed:fd:10:cc:5e:b1:d8:e4:
76:d4:5c:8a:5f:26:1d:34:b0:da:99:34:36:7d:41:eb:3c:35:
e9:39:44:0b:df:f6:a2:09:ef:dd:25:10:b2:9e:5e:e2:6e:2f:
52:2d:15:5e:3b:68:c4:2e:65:85:9a:3d:1c:37:00:cc:a1:6c:
36:a5:cd:59:5b:f5:5c:55:92:de:16:e5:00:a8:ab:5e:63:76:
4b:df:ed:0f:0c:83:93:53:d1:1c:0f:85:28:7c:9f:d0:e4:f5:
68:45:9f:6f:4f:a1:d5:d5:08:81:dd:8a:28:f8:74:92:6c:a9:
2e:f8:79:80:61:3b:fa:f7:84:0f:1a:2c:a4:0f:d3:0e:af:58:
7f:59:d5:f5:ad:1c:4a:3e:85:f7:06:b4:2c:33:9d:2f:90:66:
fd:d2:b4:ac:7e:2f:02:fb:8b:41:53:86:43:e8:57:d0:0a:2a:
44:90:62:1d:2e:cf:27:70:99:ea:43:7e:8d:39:3c:40:1a:cc:
a8:c0:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:22 2026 by rpki-client