Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS216075.roa
File: AS216075.roa (raw, json)
Hash identifier: KRH/9ZauMlLORZbmBSbXsvc9UWDPgndl1Qw6vhclWeQ=
Subject key identifier: 41:69:FD:45:62:63:74:E8:C2:FF:BD:D3:C9:DF:F1:5B:8D:C9:67:CF
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 16E85334EF8E51D07171F48F42EDBC59EF120313
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS216075.roa
Signing time: Sun 04 Oct 2026 21:35:53 +0000
ROA not before: Sun 04 Oct 2026 21:30:53 +0000
ROA not after: Sun 03 Oct 2027 21:35:53 +0000
asID: 216075
IP address blocks: 109.65.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e8:53:34:ef:8e:51:d0:71:71:f4:8f:42:ed:bc:59:ef:12:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 21:30:53 2026 GMT
Not After : Oct 3 21:35:53 2027 GMT
Subject: CN=4169FD45626374E8C2FFBDD3C9DFF15B8DC967CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:d4:9a:e1:b6:13:c7:55:9d:8c:f9:8a:a2:
96:23:39:85:63:4a:6a:ea:d5:69:2e:9c:2b:f7:b4:
83:05:f8:40:ed:81:75:4a:c0:08:d4:33:91:ea:0a:
02:f9:76:b5:ec:d6:0f:ec:3b:d2:6d:19:9e:a6:62:
52:aa:ba:13:0b:db:12:1d:09:7b:8f:06:d6:59:b7:
29:48:9f:0d:f0:2e:6c:5e:2b:af:55:7a:52:30:2f:
4b:df:84:3b:03:fe:1e:74:25:c0:ed:a5:0b:3e:8b:
0e:7a:ab:14:a2:bf:22:8a:0b:68:4d:76:ed:8e:06:
ac:ee:4f:60:0a:60:50:11:77:31:ef:10:46:13:c8:
35:a3:2e:64:d2:37:c7:18:6c:13:1b:61:0a:aa:6c:
b5:e9:ab:26:64:ed:5c:d0:f5:5e:9b:5a:fa:1a:e5:
7b:89:6d:c5:e0:95:b2:54:3c:d7:98:e7:96:8d:1d:
f5:33:dc:57:74:e6:65:d4:e1:9b:51:12:5f:a1:fc:
02:8a:76:22:7d:4d:da:8b:42:43:b1:1d:86:23:58:
be:26:cc:2b:0b:c8:76:4d:19:9d:ea:02:3b:b4:40:
b6:aa:48:8a:ee:1c:4e:77:c6:97:ff:02:8a:7f:6c:
90:32:09:f0:a6:47:5a:6e:1f:90:60:c8:f3:00:e1:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:FD:45:62:63:74:E8:C2:FF:BD:D3:C9:DF:F1:5B:8D:C9:67:CF
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS216075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ea:72:99:32:c8:b5:ac:20:4e:bb:32:02:4e:ff:51:21:41:
ec:f9:84:cc:8e:aa:0c:76:52:d8:ef:81:d9:64:2f:e9:30:f6:
61:0a:01:5f:93:47:f2:26:de:e2:20:28:16:7f:92:e2:f7:7c:
cf:33:4d:39:81:04:16:f5:a5:9a:e5:82:7f:c1:25:61:36:2d:
82:ba:95:5b:ee:75:f4:4d:c8:c6:96:87:40:51:8c:fd:de:6a:
a5:54:a7:fc:59:0f:6e:60:0c:c7:6f:4b:64:34:e0:65:ea:af:
8a:cc:2f:96:3a:9a:f0:12:38:cc:7c:f7:d9:59:72:d3:a1:34:
da:fd:9d:24:9d:f8:b5:a5:24:fe:87:b5:b2:e2:30:67:b8:dc:
f1:b8:81:65:59:b0:5e:2f:ae:04:70:81:7b:20:ae:03:ef:82:
6a:58:e8:35:da:f1:25:fc:88:4c:f2:93:90:d3:83:fc:2b:8a:
fd:b7:e8:70:71:4b:c7:23:5b:33:6e:8c:eb:0e:4f:0a:f1:cc:
10:61:47:d1:f9:06:38:f5:a2:83:16:a0:46:c8:cf:b0:60:56:
5f:91:e8:75:3b:93:41:bb:c9:8e:06:33:77:97:4a:f0:71:b8:
f9:c6:87:f8:35:df:93:c1:bc:d6:79:eb:b4:33:0a:5e:68:90:
fb:22:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:19 2026 by rpki-client