Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208949.roa
File: AS208949.roa (raw, json)
Hash identifier: PIJmQX4Lb/doQP5bR1cEavOEglK4PNL4RBSFHdPmp0g=
Subject key identifier: 23:47:43:A7:F6:C8:91:09:AA:84:4C:87:A1:76:50:F3:CE:99:C8:70
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 67C0F83B40EF06F5589B0ABABC16830EBE607190
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208949.roa
Signing time: Sun 04 Oct 2026 13:27:03 +0000
ROA not before: Sun 04 Oct 2026 13:22:03 +0000
ROA not after: Sun 03 Oct 2027 13:27:03 +0000
asID: 208949
IP address blocks: 79.182.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c0:f8:3b:40:ef:06:f5:58:9b:0a:ba:bc:16:83:0e:be:60:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 13:22:03 2026 GMT
Not After : Oct 3 13:27:03 2027 GMT
Subject: CN=234743A7F6C89109AA844C87A17650F3CE99C870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:2c:11:ec:c4:63:88:e9:5d:e3:61:6d:5e:
0a:e0:52:1d:d6:57:5b:f9:23:1d:31:41:35:cb:11:
79:58:5a:44:e8:fb:48:79:fd:b6:a0:4a:32:5c:e9:
79:70:4a:40:0b:b4:b2:1b:93:5d:27:65:5f:27:40:
bc:14:0d:96:b5:77:d7:c7:d3:25:fd:f0:c8:78:f0:
cb:e0:0f:7e:c9:d4:2b:2b:b7:3a:34:a8:9e:a3:9a:
8d:2e:95:7f:67:d3:6b:83:33:5e:06:70:44:71:a6:
6d:83:fe:ce:e3:0f:15:6f:3a:cc:26:78:c5:31:e5:
cb:e7:a8:58:9d:7e:82:d2:eb:df:98:d9:cd:b5:f1:
0b:8c:3a:ed:42:17:07:f6:42:b3:d6:b0:ad:50:c1:
bb:de:0c:e8:32:33:98:28:75:a6:77:2c:e7:57:f5:
f7:a4:71:ee:d9:62:09:46:e3:d8:fc:7c:d5:be:8d:
a0:eb:d2:24:0c:dd:b8:3c:ee:70:aa:62:98:7f:53:
d6:40:99:a9:97:bd:23:c7:09:1d:33:68:ea:f7:ef:
54:ef:a3:b2:c6:34:d7:b5:a7:40:51:11:a7:4b:7b:
06:5e:75:4c:23:cf:af:2e:85:f8:65:ef:90:43:e4:
61:d6:89:9f:69:0b:b5:55:56:4b:db:39:ea:db:42:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:43:A7:F6:C8:91:09:AA:84:4C:87:A1:76:50:F3:CE:99:C8:70
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.13.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:b7:71:70:dd:02:e3:c4:6d:cb:f4:7b:28:0e:1f:b2:ba:
c5:1a:b5:5d:8e:ea:52:86:f1:49:6d:a1:4a:f1:d5:2e:ec:b6:
f3:95:55:01:bd:73:3c:35:01:fc:93:84:25:e7:bd:d2:07:fc:
75:d4:54:eb:34:6b:50:f2:00:c3:35:ae:a3:c5:ff:5e:55:14:
50:c2:8d:c2:f4:f6:e7:c1:90:c0:8f:87:e8:ee:9c:84:c9:b1:
09:2f:ed:3b:5b:e1:64:f3:7f:4b:68:0c:bc:50:54:c9:f3:41:
71:e4:37:83:65:47:f9:b2:0c:7f:8b:f2:86:19:23:fc:50:28:
b7:4a:0a:6f:71:eb:db:df:ab:90:d4:e6:e6:30:3b:f3:05:3a:
03:7b:64:12:f7:2d:28:3b:60:12:3f:60:bd:87:90:ec:4f:c6:
0b:65:5f:2f:7a:cf:6f:bb:b0:46:e6:01:a1:69:85:b3:9e:76:
66:7f:9b:ab:eb:6d:35:02:9a:4d:77:d5:fd:ac:ae:8a:dc:45:
9d:34:b6:33:55:a3:7e:6d:cb:25:81:bc:37:53:0c:0f:85:fd:
13:75:fa:f2:fa:f7:a0:78:bf:57:c3:24:b8:51:ec:e8:95:32:
41:85:e6:bb:fd:fb:41:1a:0a:2b:fc:6b:32:29:1c:af:a2:31:
d0:27:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:26 2026 by rpki-client