Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: gP9kP21H3zfrrBzjiRVtDha9mN1FmDHMTSkhrYp9wGk=
Subject key identifier: 5E:37:D5:19:16:D2:71:6C:0B:7E:ED:35:17:3D:18:D6:6F:81:3A:A1
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 7C8B728AC1F9ABBCD56E43B230E1C6B341B1F469
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS197537.roa
Signing time: Sun 04 Oct 2026 00:52:10 +0000
ROA not before: Sun 04 Oct 2026 00:47:10 +0000
ROA not after: Sun 03 Oct 2027 00:52:10 +0000
asID: 197537
IP address blocks: 79.180.4.0/22 maxlen: 23
109.64.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8b:72:8a:c1:f9:ab:bc:d5:6e:43:b2:30:e1:c6:b3:41:b1:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:10 2026 GMT
Not After : Oct 3 00:52:10 2027 GMT
Subject: CN=5E37D51916D2716C0B7EED35173D18D66F813AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:d4:cb:1b:cc:5b:21:1f:e5:48:f4:05:89:
ce:2b:26:99:ad:61:e1:42:9b:a3:d3:af:9d:90:39:
39:4d:f5:f3:3a:19:ba:9e:f9:03:de:d5:63:75:1f:
54:ad:2b:33:68:95:d9:93:a6:d2:18:0c:46:32:f5:
60:d6:1e:9a:71:08:43:c9:9f:b1:3e:55:73:aa:0a:
d0:4b:06:02:d1:98:54:e1:03:44:cd:c2:36:d1:75:
ab:05:4a:e7:ea:06:fe:e0:9f:02:f9:be:81:cb:87:
4b:ed:9a:09:28:e6:68:c4:81:72:02:9a:50:5a:8e:
7f:db:02:82:58:d3:fe:c5:7f:d0:98:ae:2a:e8:d1:
21:7d:36:39:b2:14:d6:e5:7d:85:69:5c:94:bf:b3:
7f:4e:b0:6b:0f:e7:4a:1a:c4:d6:00:c7:2b:5b:bc:
40:e1:c2:76:13:65:4a:e3:97:cf:2e:ba:23:6d:44:
ec:65:72:3c:a6:5b:80:ce:f6:80:3f:42:aa:3c:64:
c8:38:3c:58:e8:e2:9e:b6:23:6c:a1:d3:23:de:3b:
e3:97:18:a2:83:19:18:b2:1c:86:d9:96:f5:b4:e9:
26:5c:d1:6e:27:40:82:85:31:a6:a1:b8:37:ea:23:
5f:e6:5e:d1:61:ea:b6:07:0e:57:f5:e1:07:08:d3:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:D5:19:16:D2:71:6C:0B:7E:ED:35:17:3D:18:D6:6F:81:3A:A1
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.4.0/22
109.64.194.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:f6:e5:83:a2:9d:96:9b:0c:9e:aa:6c:ad:64:4a:17:db:d3:
b0:66:8e:e7:d5:6b:05:4f:28:54:5b:8f:f3:f7:ef:0d:d0:49:
6c:30:04:5f:8d:e7:c8:c5:e5:7a:4e:0c:1e:77:f0:75:56:c5:
7a:00:d4:30:bc:68:2f:54:03:95:47:da:72:75:8e:3d:37:f1:
35:07:25:85:c5:2a:c0:b8:75:a0:ee:90:6c:72:f0:f5:ae:c9:
6c:e6:4d:3e:fc:be:da:3f:9f:52:a5:ab:ff:87:06:0c:a9:10:
88:8d:9a:62:47:19:80:cb:5a:ee:b5:30:95:98:1b:fb:30:2a:
f7:52:da:6c:33:d9:f8:99:65:51:66:ec:79:38:ac:62:75:04:
11:ab:4e:ca:80:01:27:05:cd:0a:f1:da:72:67:cf:cc:81:ae:
2d:05:80:da:a3:7f:6e:fb:d3:7f:7c:41:77:2b:d7:76:eb:91:
85:f1:a3:0a:0d:43:10:ad:b5:3a:8b:22:44:a1:58:fa:e5:d8:
a8:68:24:63:d8:3f:92:60:41:73:6e:f9:2d:02:c5:b8:7f:51:
61:f3:62:a0:64:0d:9c:e0:a6:a5:52:61:4c:0d:f0:cd:c7:2b:
86:dd:64:ef:2b:77:5c:cf:d2:8f:2a:cf:80:41:07:45:d2:d0:
0f:ff:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:46:59 2026 by rpki-client