Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: fm5BPPgf+F/g+N10o9Rd0Tn19w9Jib8lR3x9JbohYmI=
Subject key identifier: 7B:73:DF:4A:47:16:A6:9A:E9:96:55:26:2D:F5:DA:56:EC:C4:A2:6D
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 5290173492447411B96D64DCE1A3562B47F53059
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS206092.roa
Signing time: Sun 04 Oct 2026 00:51:38 +0000
ROA not before: Sun 04 Oct 2026 00:46:38 +0000
ROA not after: Sun 03 Oct 2027 00:51:38 +0000
asID: 206092
IP address blocks: 79.176.10.0/24 maxlen: 24
79.176.79.0/24 maxlen: 24
109.66.24.0/24 maxlen: 24
109.66.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:90:17:34:92:44:74:11:b9:6d:64:dc:e1:a3:56:2b:47:f5:30:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:38 2026 GMT
Not After : Oct 3 00:51:38 2027 GMT
Subject: CN=7B73DF4A4716A69AE99655262DF5DA56ECC4A26D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:12:77:7f:84:b0:a2:42:ac:11:82:98:dd:
31:34:ef:04:9e:69:79:09:f8:96:86:61:85:07:6b:
d4:26:5c:21:c9:40:c6:3b:04:93:1b:e0:93:89:2c:
9d:d8:1a:d5:24:10:01:e5:d1:f3:43:f2:93:09:8d:
18:28:f2:bb:b4:f5:11:b6:85:6a:2e:72:00:ad:df:
11:32:8f:c1:f4:18:99:f1:29:9b:d8:78:7e:13:b1:
f1:85:ef:4e:2f:2f:65:c5:d1:e2:95:fa:7c:20:c2:
db:a6:07:8c:e4:c4:15:56:67:01:09:86:11:5d:60:
b2:c6:42:4f:54:1d:2f:ab:bc:44:fb:24:33:3b:97:
14:17:d6:bc:dd:0a:12:fa:fc:46:2d:31:4d:8f:13:
b5:64:62:3d:31:4d:f5:fb:ca:05:a3:d2:2c:0a:ac:
33:0d:2f:12:cb:bf:7c:d7:0d:7f:67:ea:45:61:32:
04:fd:23:c8:4e:a1:c5:bd:85:2c:9e:b3:c7:8b:3c:
5b:b1:b7:ad:e2:9d:23:f9:b8:d3:c4:e7:2c:26:46:
37:3b:df:73:3a:ba:c7:06:19:b0:73:04:58:e0:22:
a6:91:b3:71:39:ab:e8:e3:aa:26:46:3a:b8:c7:43:
e2:a8:13:e3:c1:21:2c:a4:4c:72:e8:00:fe:da:b6:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:DF:4A:47:16:A6:9A:E9:96:55:26:2D:F5:DA:56:EC:C4:A2:6D
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.10.0/24
79.176.79.0/24
109.66.24.0/24
109.66.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:80:06:65:ec:47:73:89:d9:e3:a7:ca:02:47:26:04:03:ac:
c9:d3:74:66:45:5f:c7:93:91:2c:41:a6:e1:c5:7d:df:21:29:
86:7d:a8:1b:33:13:70:33:c5:37:8d:ba:55:67:1c:6d:5d:f1:
6f:9b:c8:35:56:a5:ec:e0:36:0b:f4:28:c8:a5:b4:cc:7d:0c:
9e:ed:4e:7a:5e:0a:d3:6e:9e:fe:ed:6e:22:95:bb:df:c5:17:
1a:b9:f9:a0:81:43:3e:71:72:9c:81:5e:a0:4b:d4:15:2a:0c:
d6:9a:5f:73:25:89:47:a2:f4:09:ad:aa:22:51:79:7e:77:48:
50:2d:c9:0c:48:84:b9:e1:fc:ac:cf:1f:28:40:2d:ac:1f:c2:
80:0c:c9:0f:41:c8:23:ce:d1:0b:52:38:50:f7:e8:1a:3f:73:
5d:e9:e7:91:47:50:15:da:a6:fa:e8:34:12:d2:be:df:2c:26:
1d:99:ef:b2:f2:59:90:e7:fa:c7:a6:20:ff:6f:37:71:ee:5d:
e3:26:78:29:2c:ea:3e:67:c4:24:b3:cd:ae:4e:38:2c:15:ec:
71:af:f6:bc:a2:dc:23:d1:9b:63:87:6e:15:ec:4d:21:cf:f8:
f7:d2:d7:52:62:1e:e2:ed:a7:a5:b0:de:64:52:05:92:6f:3c:
b4:2f:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:30 2026 by rpki-client