Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS209557.roa
File: AS209557.roa (raw, json)
Hash identifier: cqB4D5lSmBB59+vNACki/Qrn7NtclMmjbjg0HYJjFmI=
Subject key identifier: 64:B9:07:44:1B:22:3A:F6:2A:68:D5:AA:84:B6:10:64:4D:13:39:4D
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 164D96D398526A2D24BB85E49B8EEC9437F97166
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS209557.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 209557
IP address blocks: 109.66.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4d:96:d3:98:52:6a:2d:24:bb:85:e4:9b:8e:ec:94:37:f9:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=64B907441B223AF62A68D5AA84B610644D13394D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:b4:97:6e:97:04:9d:3d:36:cf:82:b3:66:
d1:a7:6a:80:09:93:c7:1c:fa:7e:bc:ba:69:bb:45:
22:96:08:af:5e:42:a9:3a:a1:b1:5e:cd:79:87:8c:
aa:01:33:c5:74:54:da:64:fd:b5:b0:b8:fb:8b:79:
53:2c:62:59:d9:ac:91:3c:cb:28:8f:3c:62:68:92:
2e:ce:43:60:e0:1d:80:16:94:e3:9d:54:ae:52:b1:
18:d0:a1:cc:fe:e0:ab:0e:f4:36:b8:9c:2b:26:bf:
7c:a0:6a:0b:2c:93:3f:fb:4b:20:cc:76:2a:6d:94:
66:8b:58:5b:26:a2:9e:ef:07:a8:6b:71:68:f5:16:
8f:4f:ed:39:80:9d:b3:96:6e:f6:61:34:94:f8:d0:
82:f9:ca:75:43:e6:fe:ca:2f:9b:2b:0e:75:18:cd:
d5:99:76:3d:49:e5:75:6f:fb:fb:26:97:5d:9f:fc:
8b:15:3c:5a:40:2b:c6:90:15:bf:4d:49:0b:a5:f4:
f0:62:0d:6b:fa:9c:ee:ce:c3:c4:18:f5:a0:5a:fb:
32:8e:82:6a:27:90:7f:3d:02:7d:66:85:6a:eb:9d:
3c:ae:9b:64:f6:5c:2c:bb:2b:dd:6b:50:fe:61:17:
47:40:99:06:b5:eb:3c:89:a1:47:39:d3:37:0c:9a:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:07:44:1B:22:3A:F6:2A:68:D5:AA:84:B6:10:64:4D:13:39:4D
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS209557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:3b:b8:ad:35:05:65:3e:28:3b:46:b4:40:b2:c9:aa:02:ab:
b0:63:57:b1:e6:05:69:fc:5d:6d:59:e9:68:5c:04:0b:5b:91:
c5:b6:5d:0b:79:71:5a:82:2b:88:8e:64:e9:37:21:94:37:3d:
d3:de:d3:f0:a6:ae:ea:92:8b:09:04:8e:cb:b8:e4:af:bf:f8:
fb:b4:b2:72:13:d3:41:61:79:dd:2c:d4:bd:97:5d:c6:41:14:
5e:a2:07:d2:f6:d3:d8:6e:28:2f:c0:b8:17:36:9e:55:af:5c:
09:0e:07:50:bc:8a:b4:29:ce:42:f0:4b:dd:a9:3a:06:c9:42:
19:67:a0:fa:2a:85:9e:7f:d7:62:b2:19:c7:14:44:b0:68:dd:
82:c9:e1:cf:93:60:ee:26:28:42:d3:4b:0d:eb:41:fe:14:db:
7e:50:a8:f0:f5:05:04:52:cf:9a:42:6e:1b:a1:5a:3d:8c:12:
05:9e:08:f0:6e:1e:7a:32:c4:2c:04:ae:04:f4:ae:f6:82:1d:
92:6a:74:eb:bc:e6:65:f3:58:4d:cb:b7:44:f1:4e:8e:0b:bc:
f4:d6:e9:3a:03:a3:a1:1b:13:39:fd:3c:8b:36:92:95:69:3e:
7e:fe:ce:2b:ee:46:5f:85:d0:f4:5f:d5:72:c8:fd:c3:3f:85:
0b:22:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:12 2026 by rpki-client