Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: W0OkVfToRdZDftjSHbJNarJLb5+DBtl6oG632JUpwzg=
Subject key identifier: 62:AF:1C:A3:0C:27:97:F4:28:DB:50:35:10:34:8E:55:5A:ED:70:E3
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 3515E9DC965D7EC9439F49FBB60641ED7F730CD0
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219427.roa
Signing time: Mon 05 Oct 2026 08:25:44 +0000
ROA not before: Mon 05 Oct 2026 08:20:44 +0000
ROA not after: Mon 04 Oct 2027 08:25:44 +0000
asID: 219427
IP address blocks: 109.66.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:15:e9:dc:96:5d:7e:c9:43:9f:49:fb:b6:06:41:ed:7f:73:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:20:44 2026 GMT
Not After : Oct 4 08:25:44 2027 GMT
Subject: CN=62AF1CA30C2797F428DB503510348E555AED70E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:8a:a8:60:7d:20:c1:1a:18:75:f1:a8:d4:
05:ac:93:18:46:5a:bd:51:51:63:02:24:6b:23:5b:
78:44:a9:e7:35:73:cf:35:0e:58:c9:d0:81:a4:f9:
74:f6:82:0e:68:df:ee:64:a4:49:20:5a:dd:aa:26:
60:f3:8a:30:c1:7d:21:f7:bf:50:0b:60:00:a5:a1:
49:c3:51:28:39:b4:16:f1:7e:2a:98:67:ca:c1:d9:
57:24:59:6f:b7:7b:89:7a:39:51:9e:84:28:bc:60:
54:7f:e1:f1:7a:89:5c:0d:94:19:45:ea:02:0e:11:
2b:84:04:33:4e:63:d6:f5:a1:80:fb:89:98:6d:42:
e0:f6:8c:c8:08:90:b8:35:13:5b:a8:da:d4:58:b2:
4f:71:00:03:f7:0e:4b:4b:d9:76:db:61:11:0b:96:
6b:65:e1:d4:fc:4d:59:11:78:5f:24:5d:ca:6b:f5:
bb:58:2d:ca:28:ff:a3:18:b0:b7:5b:3a:2f:c5:48:
f1:98:b1:38:c5:d7:0e:0e:41:a8:92:d6:1d:11:fd:
36:5e:13:c6:d0:18:02:14:29:b8:31:57:33:72:28:
30:fa:d9:48:85:09:f9:d3:a1:f7:5d:46:a8:b0:5e:
8f:33:10:d7:8f:19:9a:50:15:8f:9b:f0:20:83:bd:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:1C:A3:0C:27:97:F4:28:DB:50:35:10:34:8E:55:5A:ED:70:E3
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.16.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e2:71:f6:3e:a3:d9:fe:16:bc:f1:5e:7a:cf:bb:bc:02:e0:
60:18:54:1d:1d:1f:1f:bb:07:e4:84:e4:73:cb:27:5e:f4:64:
bd:13:b3:4f:e3:15:51:b7:f2:19:9e:54:e4:46:a1:cd:ae:8c:
7c:2e:a4:11:89:7d:41:fd:f6:98:56:1e:d2:ea:06:f8:07:4d:
bb:57:ca:f3:c6:cd:2e:d0:0f:36:d9:ac:dd:2f:6f:05:a9:83:
2b:3a:dc:c3:b3:e2:c4:44:b6:5f:c2:7b:e8:e5:ba:98:da:4b:
57:e7:9d:82:09:49:a4:7a:ab:57:c0:f9:36:9e:99:d5:13:bf:
29:1f:42:d1:ee:1a:2a:13:02:fc:87:ed:76:d3:5f:a6:2e:b5:
9b:a2:9d:99:b7:da:0e:3f:46:b4:d1:f9:35:41:2c:eb:22:e7:
b5:7c:e2:2a:26:b3:74:86:95:2a:03:82:03:ac:41:d3:0a:c2:
92:4e:34:18:6d:ec:24:89:27:02:92:29:19:7b:44:22:26:2c:
6f:8f:b0:fc:ee:d0:87:b3:be:e6:6a:1a:97:aa:53:8d:a4:f4:
9e:f2:f3:76:48:d3:07:75:5f:25:e7:f7:ad:cb:82:f6:a0:16:
5c:37:79:69:b9:d0:f9:46:53:89:33:a6:92:95:ed:4f:bb:3b:
1c:14:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:28 2026 by rpki-client