Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218616.roa
File: AS218616.roa (raw, json)
Hash identifier: Fj/RQ6XjeWtEy1B1WRMfCJQrTwhMU2yPyV5DM6D8bd0=
Subject key identifier: 78:73:D7:6C:6E:52:CB:29:6F:6D:38:91:99:B1:00:33:CF:D6:4D:7B
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 44488D4303C73B6FB6425316F97E9099DCA1785E
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218616.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 218616
IP address blocks: 79.176.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:48:8d:43:03:c7:3b:6f:b6:42:53:16:f9:7e:90:99:dc:a1:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=7873D76C6E52CB296F6D389199B10033CFD64D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:79:42:2a:92:17:e8:f4:c7:07:75:f3:7a:
a4:91:b0:ce:65:0e:7c:bc:33:36:02:44:f0:4a:39:
2f:b7:30:ed:48:f0:91:d1:e8:1d:99:63:65:97:0a:
0b:c0:df:65:23:6c:8c:83:f9:d3:5c:b2:1a:aa:9f:
a0:81:0f:1b:bd:67:95:70:3b:f0:f4:23:ea:11:54:
e1:8d:9f:15:40:fe:8d:cb:d1:76:30:78:56:3d:8b:
23:39:8c:09:72:f1:d8:55:25:91:88:96:17:6e:e6:
5d:c5:0c:99:77:13:3a:7c:32:a7:a1:a3:3d:19:76:
7f:0b:c3:d2:45:da:30:0d:fe:b9:d1:42:75:68:c5:
ee:37:b5:85:fb:aa:34:4e:fb:72:cf:8a:f4:45:11:
2c:ad:6d:0a:e4:bb:b9:b8:a6:40:87:9b:7e:be:88:
30:22:43:b3:bb:71:1d:5b:44:68:22:18:2b:0c:d8:
88:3a:b9:37:0a:c7:9c:bd:e1:44:99:72:8c:8a:4a:
51:e8:92:e7:f8:6a:39:a5:7b:dc:41:44:c1:b6:6c:
c8:a9:ef:96:47:b0:69:02:88:48:39:56:aa:e2:c9:
75:f2:9a:48:83:5c:29:e6:f9:7f:65:0a:33:0d:a9:
b1:21:27:80:de:25:b7:f3:86:6d:b5:e7:ca:9f:5a:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:D7:6C:6E:52:CB:29:6F:6D:38:91:99:B1:00:33:CF:D6:4D:7B
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS218616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.105.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:bf:e7:0b:7e:39:f6:c9:2b:9f:f4:a0:49:70:47:88:30:4c:
8c:9b:50:e5:61:d7:5d:a8:97:d3:cb:d0:55:fb:32:13:af:f0:
74:ba:22:be:fd:6a:da:18:71:ff:b2:9d:31:a6:f2:71:88:c5:
30:7d:21:0a:0d:9d:00:b6:f5:7c:e4:08:10:8f:a4:04:f3:9b:
e6:01:13:df:ef:1a:5a:dc:39:e3:a3:1b:98:e6:3d:fe:94:89:
6d:97:5b:72:2f:13:08:ff:6a:54:fd:f0:98:06:fc:51:b2:d2:
9b:b5:4f:59:95:c1:6a:38:20:d6:e1:e7:52:7a:93:41:56:95:
d3:ce:b7:2a:e2:dc:00:bd:3a:8c:e2:8f:25:ca:c6:b9:da:8d:
f0:57:e9:14:9f:5d:ff:19:25:cc:74:20:54:bc:eb:40:81:87:
b5:41:24:f5:4b:f8:97:23:cf:0f:60:b2:64:00:c7:83:07:8f:
42:70:de:67:28:54:ff:d1:c9:11:9d:32:70:49:09:f8:87:f7:
73:9c:51:65:ec:d5:51:0b:c1:58:5b:51:7f:3e:39:cd:9d:c4:
07:c6:89:1e:7d:74:a4:60:51:42:42:ea:03:fb:ec:e9:42:8c:
1f:2d:ea:35:bf:b5:8b:29:f9:9f:07:9e:5b:a8:29:79:d0:81:
70:65:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:06:55 2026 by rpki-client