Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/v76sQEijVG9e2JxYlNIZpIWN8FI.roa
File: v76sQEijVG9e2JxYlNIZpIWN8FI.roa (raw, json)
Hash identifier: F7fp5j/69rwtZcolizQI1RI6D68Uj/YHvsBhB5lZse8=
Subject key identifier: BF:BE:AC:40:48:A3:54:6F:5E:D8:9C:58:94:D2:19:A4:85:8D:F0:52
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FDAEAE287CA4DB9097E1AB96573B25D0B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/v76sQEijVG9e2JxYlNIZpIWN8FI.roa
Signing time: Fri 07 Aug 2026 06:30:54 +0000
ROA not before: Fri 07 Aug 2026 06:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Aug 2026 05:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:ea:e2:87:ca:4d:b9:09:7e:1a:b9:65:73:b2:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 7 06:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfbeac4048a3546f5ed89c5894d219a4858df052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:b3:20:04:a4:00:32:53:94:97:35:9f:c9:
3a:49:2e:d3:e8:fc:11:c6:eb:ff:a6:46:bf:9f:7d:
b4:2e:9b:90:0e:95:47:79:7b:0b:77:7d:34:5f:33:
79:6b:f9:b1:ce:91:b4:47:cc:4a:9a:32:8e:42:15:
cc:fc:d7:20:88:ec:86:0b:39:34:1e:84:6c:c0:01:
46:d4:2e:e1:58:c5:0a:21:74:03:c2:93:ab:cd:ab:
6a:b7:e6:99:a1:d5:43:d3:85:03:5b:56:2a:7c:ff:
e8:ca:91:b0:e7:ef:08:ab:f1:11:cc:87:97:15:1f:
c1:2b:c8:31:36:d1:8d:9f:53:a7:37:62:e1:9d:ab:
5c:aa:cc:9a:95:8b:ac:53:83:fd:a7:ac:b2:84:a7:
ff:b1:4f:59:55:d0:dc:7b:a2:53:bd:ef:2e:d4:ba:
00:17:5b:41:f7:9a:ea:c2:c4:57:3f:ef:c0:6f:80:
0f:7c:f2:c9:bc:7b:57:e9:c2:bf:29:be:4e:a3:55:
04:e0:8c:a8:00:01:2a:7b:0c:15:f3:cb:66:76:3e:
f5:cf:d4:68:67:ca:d3:86:d3:54:d4:49:b9:70:28:
49:cf:c3:37:09:92:56:2f:eb:4d:c0:f1:79:a5:60:
f3:63:cb:11:1a:bc:5b:51:c6:cf:4d:fd:31:b6:81:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:AC:40:48:A3:54:6F:5E:D8:9C:58:94:D2:19:A4:85:8D:F0:52
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/v76sQEijVG9e2JxYlNIZpIWN8FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.20.0/22
83.147.26.0-83.147.28.255
83.147.40.0-83.147.51.255
Signature Algorithm: sha256WithRSAEncryption
70:00:b4:22:04:47:3e:b1:b9:e2:f0:69:71:b4:ef:0e:bc:1c:
7f:b0:05:ba:7e:f7:2d:b0:d8:b9:75:1a:40:3c:c6:0f:6c:bd:
83:59:93:cc:50:ce:f6:c5:82:da:4b:29:0a:64:15:d9:13:50:
e8:50:ba:4a:84:9c:aa:62:fb:21:cc:dc:9d:30:a1:94:63:29:
20:2c:c5:19:1f:6d:34:b6:e8:ad:a5:51:5e:4d:08:a2:de:ad:
ef:95:70:42:fb:45:a6:9b:e3:21:ec:5a:3f:3b:dd:0d:56:fe:
52:19:17:8d:b5:01:e0:4f:09:45:1f:ad:f1:d3:ac:43:e7:60:
87:05:fd:27:22:db:35:46:aa:73:81:62:f7:7d:31:60:f5:20:
d0:02:a9:71:03:a2:ef:7d:66:2b:4c:00:84:ac:b5:8e:6b:ea:
3c:8e:38:03:1b:c2:e7:9a:a3:34:e5:9b:9d:ab:8f:f3:5b:90:
37:ef:6f:8f:8d:0c:9c:80:48:2f:19:52:da:14:b5:40:85:72:
0a:fc:23:f2:e1:5f:cf:16:60:b6:e8:71:ca:f0:1f:8c:15:b9:
29:44:be:e3:d2:f6:57:ee:80:5b:f2:18:fb:0f:f9:ef:55:6d:
c8:95:06:e6:c8:08:19:11:59:b6:46:57:18:4c:41:18:32:e7:
a8:b5:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:08 2026 by rpki-client