Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: tatsRiPF+6YrztJzGSXFrTQvadVxVZ2Cfsj/Ss8yePM=
Subject key identifier: AB:35:2D:94:8F:AF:3A:A6:4E:13:4E:50:AE:61:7F:CA:9A:5C:22:A4
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3D4FF3C364F939BA7859948C7BF7035ABCE31B88
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199707.roa
Signing time: Mon 05 Oct 2026 09:00:26 +0000
ROA not before: Mon 05 Oct 2026 08:55:26 +0000
ROA not after: Mon 04 Oct 2027 09:00:26 +0000
asID: 199707
IP address blocks: 79.176.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:f3:c3:64:f9:39:ba:78:59:94:8c:7b:f7:03:5a:bc:e3:1b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:55:26 2026 GMT
Not After : Oct 4 09:00:26 2027 GMT
Subject: CN=AB352D948FAF3AA64E134E50AE617FCA9A5C22A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:bf:95:fe:22:f2:44:f2:9c:74:a4:1d:2d:
5b:99:ce:ec:1a:aa:67:5f:d9:6b:6e:e2:7c:0d:73:
39:d7:81:4d:36:67:c3:30:6c:e5:dc:16:9c:16:c1:
0c:9f:e4:08:b6:76:38:8b:09:5a:11:1b:51:b9:56:
17:ad:33:28:b0:c4:1b:a1:07:38:c1:44:d2:fa:6b:
3e:89:27:eb:d3:fe:bc:dd:53:88:31:38:fe:97:97:
c7:37:4d:ec:76:9d:57:bf:cb:f5:b6:ab:f8:fd:23:
b3:6a:89:91:ae:8d:ca:55:46:ec:9f:f9:1d:94:13:
0a:0c:c1:6b:11:02:e3:f9:59:3b:bd:18:7c:1f:e1:
c3:fe:ac:db:04:5f:c9:4b:62:3e:d8:ed:bf:20:64:
10:77:d1:19:c8:81:13:5a:35:70:fd:be:37:e7:d3:
18:ad:41:dd:da:0e:ca:e0:c7:05:39:1c:fb:e6:bf:
0f:84:60:40:cc:20:61:83:af:84:ba:7a:0d:69:fd:
0c:05:5c:dd:df:2e:1f:4c:a6:8d:c6:6a:42:1b:8e:
83:c9:4b:e1:70:86:05:6a:82:42:e5:2d:bd:33:e3:
19:78:15:f6:04:ec:42:26:c8:86:26:ae:a6:f7:2a:
e2:44:9f:6d:7a:49:e2:ff:1a:44:d2:a3:b9:73:fc:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:2D:94:8F:AF:3A:A6:4E:13:4E:50:AE:61:7F:CA:9A:5C:22:A4
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fe:51:17:fe:2f:2e:df:dd:1b:ac:73:65:6e:01:66:95:bc:
e7:83:9f:02:fe:c0:b0:76:44:e1:6b:ec:68:e4:9b:3d:b5:2f:
a8:56:6f:06:84:a4:ce:7a:ca:80:03:b1:5f:81:69:fb:64:17:
88:73:37:fa:8a:d4:a3:08:04:7f:0c:5d:4f:04:c0:06:2c:57:
43:03:b5:34:c1:23:03:6a:b1:38:e6:36:12:1d:13:1b:86:7e:
32:b7:aa:aa:c1:f2:c0:96:2b:76:f8:84:24:ad:41:62:ad:aa:
e3:fc:19:2b:6a:65:b8:d4:93:31:56:e2:ef:64:ab:ce:2c:22:
bc:8a:8d:de:df:3a:cb:0f:92:64:45:a0:4a:3f:95:cb:f2:0e:
88:58:60:eb:96:40:0f:28:95:4a:48:89:7f:8c:48:dc:f5:05:
51:7f:47:21:a8:1f:79:69:2a:9d:2c:b3:5b:f0:d1:e9:2d:8e:
66:12:fe:c2:e2:8c:31:da:38:3d:61:82:e2:bd:a2:2b:a8:23:
52:10:f6:3d:a3:fb:84:13:38:c7:e0:5d:7c:ce:9b:2c:aa:e3:
ce:9e:7b:ec:43:6e:27:8d:ec:b6:90:2e:4c:92:19:7f:57:23:
69:2e:49:d9:02:68:cb:56:46:26:ff:f7:29:9d:9a:5d:4e:4c:
51:07:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:06:52 2026 by rpki-client