Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JuJbrA6uPTyTjKMu-BX436k9E_I.roa
File: JuJbrA6uPTyTjKMu-BX436k9E_I.roa (raw, json)
Hash identifier: ykAGHZLF8i4/R8eOCUQuoncBWOtJL2ImKdln2SFjcXQ=
Subject key identifier: 26:E2:5B:AC:0E:AE:3D:3C:93:8C:A3:2E:F8:15:F8:DF:A9:3D:13:F2
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019C7D5289C97BC067818E92C250FD27D060
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JuJbrA6uPTyTjKMu-BX436k9E_I.roa
Signing time: Fri 20 Feb 2026 23:11:27 +0000
ROA not before: Fri 20 Feb 2026 23:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Feb 2026 00:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:52:89:c9:7b:c0:67:81:8e:92:c2:50:fd:27:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Feb 20 23:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e25bac0eae3d3c938ca32ef815f8dfa93d13f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:16:d8:f6:cc:92:c0:ff:0d:a2:3e:2d:cb:
fd:f1:05:88:b5:17:f3:da:64:33:26:c1:88:77:10:
bd:15:1e:e2:54:be:2f:76:94:0e:91:de:17:36:14:
7b:68:92:d9:dc:a1:4e:fc:ea:4e:b3:26:3d:3a:1d:
f9:57:22:f8:8d:a6:b0:99:e9:f6:63:4c:8b:6f:2e:
fd:cd:4a:9e:64:79:2e:fd:a4:c6:27:c0:78:b1:00:
95:56:2a:fd:e0:7e:1d:fc:37:1f:ee:bf:55:c5:5a:
bf:5a:87:2e:1d:9e:03:54:92:c9:d2:f3:36:bc:8f:
ad:a7:d6:5f:16:aa:92:58:91:3c:48:64:a6:38:67:
09:60:07:19:cb:76:4e:ff:4e:6b:7c:59:c7:d3:5f:
b5:3f:6e:21:39:7a:ef:e8:dc:4f:4e:d1:98:41:1a:
bd:5c:f1:44:12:39:d5:7a:6c:e5:6f:56:3e:12:2e:
c9:f1:34:16:c4:0a:65:58:47:2f:4f:21:4a:54:d6:
e6:9e:03:83:66:7d:dd:bf:78:03:82:8c:74:87:e7:
1f:75:32:49:16:f1:23:2b:2a:43:4d:db:28:1c:0b:
c8:1d:ea:33:34:a2:ab:d9:21:e1:24:7b:6c:17:82:
d9:20:59:93:75:4e:b7:31:e6:2f:d3:6d:4b:ef:e0:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:5B:AC:0E:AE:3D:3C:93:8C:A3:2E:F8:15:F8:DF:A9:3D:13:F2
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JuJbrA6uPTyTjKMu-BX436k9E_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
Signature Algorithm: sha256WithRSAEncryption
25:30:88:9b:47:fb:b8:c4:1f:bb:25:12:8b:88:b7:52:ee:78:
3f:80:46:51:78:ba:8f:0b:d8:d3:8e:97:3a:14:5b:c3:b4:7d:
83:0f:e8:0b:5e:a7:ee:59:d7:34:ca:f7:bc:35:d4:f9:15:17:
ec:6b:e4:d3:eb:04:e1:06:dd:a8:f3:96:5e:c5:89:51:57:d2:
a5:45:2c:98:b4:26:da:ed:7c:b8:f0:18:06:b6:01:43:54:4b:
1b:6a:0b:29:b3:ad:4c:f4:10:12:59:1f:47:f5:17:78:36:ba:
1f:c7:e8:66:b6:fd:ca:91:dd:09:70:58:5f:bf:ac:55:57:3a:
3f:00:ee:90:8f:78:5e:25:35:76:3e:d6:48:b3:3a:a1:4c:3d:
dd:81:57:09:26:fb:4e:33:23:9d:7d:a9:4f:6d:e9:5c:69:22:
fe:f2:6e:dd:2f:e4:ce:6d:47:db:6a:63:a4:72:af:12:a8:1e:
2b:7a:c5:4c:ce:68:2a:83:91:82:4b:47:41:24:85:ca:5a:f3:
b9:a0:55:aa:36:f0:47:de:a7:58:73:a0:32:6e:0c:1b:df:59:
39:df:1b:b6:84:f3:61:49:e1:17:9d:ff:46:20:24:c7:c5:5f:
3c:cb:8f:6b:8f:9d:e6:a0:08:cf:e2:53:88:5c:cd:b9:f2:8e:
ec:1a:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:10 2026 by rpki-client