Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: KmAVXyYA/AimVTQHfEFa0FcIczN3eeu2sHvdQyWb6Z8=
Subject key identifier: DD:63:EB:10:33:2D:43:A2:2C:67:40:B0:F2:6C:06:B4:CB:52:19:BA
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1855D1D02F4ADF607F16B1FC234559C12E3A5785
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219075.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 219075
IP address blocks: 109.66.28.0/24 maxlen: 24
109.66.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:55:d1:d0:2f:4a:df:60:7f:16:b1:fc:23:45:59:c1:2e:3a:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=DD63EB10332D43A22C6740B0F26C06B4CB5219BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:d3:88:2c:a7:0c:e0:7d:20:fe:5a:c6:16:
e2:1e:2b:b0:c6:d4:e0:6e:cc:7d:23:fc:b2:be:2a:
d5:7b:01:e7:f2:dc:c6:e2:d3:fc:8b:65:3c:19:3d:
9f:b7:70:82:9b:1e:94:3a:44:78:ad:6e:ef:05:dc:
ca:b0:31:d5:75:e6:0c:05:ea:c4:79:0b:04:6b:6a:
78:28:92:fb:e9:36:77:a8:7d:bd:77:ee:a0:de:80:
98:fd:7f:43:65:da:1d:f6:4f:a1:34:b5:7f:56:f8:
37:e2:d3:1d:00:f0:7d:f6:55:14:d3:cd:5d:4a:48:
7b:07:de:6f:7d:db:7b:39:e9:a5:9a:c6:0d:67:4d:
aa:f7:0c:3c:f5:df:dd:94:5b:0f:25:08:d8:b7:dd:
4d:b4:f1:55:ef:0e:55:ea:b2:1b:7f:15:60:6f:7b:
57:61:b5:c4:d4:41:96:aa:e3:c5:33:35:17:28:91:
e8:e2:37:36:22:e0:71:97:cd:d4:01:a8:94:5c:09:
8b:c3:ac:8e:de:ce:40:cc:fe:ba:b9:68:e4:76:d6:
f1:dc:57:ef:e9:e0:59:d9:4a:d9:cb:92:f8:04:f6:
ba:f0:a9:1d:a9:c4:8f:2e:53:18:aa:7f:f8:9b:30:
7b:a2:3c:da:1c:9e:4f:1b:8f:6c:01:d4:c8:42:f4:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:EB:10:33:2D:43:A2:2C:67:40:B0:F2:6C:06:B4:CB:52:19:BA
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.28.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a1:b4:7c:c9:48:2c:a6:0d:32:ab:25:4f:8c:18:0d:75:70:
51:06:99:c5:3e:da:0c:38:6a:9b:4d:cd:10:37:bb:ca:9f:47:
f0:2d:60:42:ee:b1:1a:0e:b1:c3:e6:8a:ed:77:55:98:5a:9f:
1e:98:8c:94:af:56:4a:91:fc:fd:b4:5e:1e:8c:39:6b:ac:f1:
6a:d6:61:48:7d:0c:65:3f:e9:2b:88:b5:a4:67:e7:2e:ef:a8:
77:82:8e:af:1d:74:b3:ed:b4:45:ee:27:2c:d9:2a:e2:08:d2:
45:7f:bf:10:f1:01:c0:18:16:61:eb:cf:70:e3:4e:f5:d7:5b:
4d:88:c5:aa:32:0f:da:9c:9b:0d:4f:cb:ed:79:59:f7:ad:60:
0a:a1:d1:4d:49:83:86:a0:0a:fd:47:e6:83:6b:9b:26:89:7a:
fe:6d:a0:2b:c5:a8:d1:eb:9d:95:1a:e4:c0:a3:bb:02:36:7c:
8d:54:80:c7:4c:3d:f3:30:3b:96:20:32:dc:6d:d3:72:96:f6:
1d:9a:4c:38:1e:58:8f:c6:95:a9:fe:dc:da:a7:0e:24:b9:d5:
22:eb:08:df:4b:67:66:ae:90:13:af:09:7c:7f:d4:0b:29:7f:
1e:d7:8a:60:2b:e3:21:b5:2e:38:80:92:51:fc:86:11:db:e9:
53:be:a6:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGFXR0C9K32B/FrH8I0VZwS46V4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDUwODM5MjVaFw0yNzEwMDQwODQ0MjVaMDMxMTAvBgNV
BAMTKERENjNFQjEwMzMyRDQzQTIyQzY3NDBCMEYyNkMwNkI0Q0I1MjE5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJONOILKcM4H0g/lrGFuIeK7DG
1OBuzH0j/LK+KtV7Aefy3Mbi0/yLZTwZPZ+3cIKbHpQ6RHitbu8F3MqwMdV15gwF
6sR5CwRrangokvvpNneofb137qDegJj9f0Nl2h32T6E0tX9W+Dfi0x0A8H32VRTT
zV1KSHsH3m9923s56aWaxg1nTar3DDz1392UWw8lCNi33U208VXvDlXqsht/FWBv
e1dhtcTUQZaq48UzNRcokejiNzYi4HGXzdQBqJRcCYvDrI7ezkDM/rq5aOR21vHc
V+/p4FnZStnLkvgE9rrwqR2pxI8uUxiqf/ibMHuiPNocnk8bj2wB1MhC9MsTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU3WPrEDMtQ6IsZ0Cw8mwGtMtSGbowHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMjE5MDc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUIc
MA0GCSqGSIb3DQEBCwUAA4IBAQAkobR8yUgspg0yqyVPjBgNdXBRBpnFPtoMOGqb
Tc0QN7vKn0fwLWBC7rEaDrHD5ortd1WYWp8emIyUr1ZKkfz9tF4ejDlrrPFq1mFI
fQxlP+kriLWkZ+cu76h3go6vHXSz7bRF7ics2SriCNJFf78Q8QHAGBZh689w4071
11tNiMWqMg/anJsNT8vteVn3rWAKodFNSYOGoAr9R+aDa5smiXr+baArxajR652V
GuTAo7sCNnyNVIDHTD3zMDuWIDLcbdNylvYdmkw4HliPxpWp/tzapw4kudUi6wjf
S2dmrpATrwl8f9QLKX8e14pgK+MhtS44gJJR/IYR2+lTvqZF
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:02 2026 by rpki-client