Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: nmR7g4cdHIySDUxNXDxDBZV8JRNB7E5rdMqSjUtTRwY=
Subject key identifier: 72:D9:5C:D8:C1:08:47:FA:E5:08:49:C7:23:49:9A:D7:2A:F8:60:04
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 26D8071C12104E7994D2040AD63A2B2999D54550
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2914.roa
Signing time: Sun 04 Oct 2026 00:51:05 +0000
ROA not before: Sun 04 Oct 2026 00:46:05 +0000
ROA not after: Sun 03 Oct 2027 00:51:05 +0000
asID: 2914
IP address blocks: 109.66.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d8:07:1c:12:10:4e:79:94:d2:04:0a:d6:3a:2b:29:99:d5:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:05 2026 GMT
Not After : Oct 3 00:51:05 2027 GMT
Subject: CN=72D95CD8C10847FAE50849C723499AD72AF86004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:8e:74:72:93:36:18:e1:54:1c:bc:3b:70:
a8:7f:c7:08:b2:49:e0:e5:90:1e:16:3b:53:9b:14:
22:fd:f6:c1:e4:8c:bf:5c:ac:6d:5f:1f:70:06:a9:
cb:29:50:ce:f9:4c:9e:75:cc:fa:ee:e4:3c:00:49:
8c:d6:29:73:16:62:cf:f2:9b:57:a3:28:62:0e:3a:
f6:73:aa:7d:5c:1d:2e:ed:9b:32:24:80:fa:8c:d1:
70:3e:a5:2f:b4:6d:f5:4c:4f:42:b8:71:12:ab:eb:
a2:18:c9:8b:45:e1:4e:57:d5:c6:4c:d7:bc:a1:ea:
45:6c:04:34:5a:5c:15:65:60:af:3f:22:b7:75:46:
d8:86:19:a5:79:68:c9:44:7c:53:9e:13:16:76:fc:
84:e7:4c:36:67:5c:c6:6b:f4:6b:94:8a:9f:c9:c6:
07:0a:ea:28:85:08:03:8c:62:5d:b5:db:8f:8d:69:
96:43:06:91:b2:d5:25:a2:aa:22:e4:c4:dc:27:96:
f5:4a:01:93:af:7f:0f:28:45:ca:a2:d7:52:43:7c:
d7:e6:db:c2:f9:0e:3f:f0:63:48:79:9c:0c:71:66:
df:5c:ca:7a:48:36:54:3f:c8:dc:5b:6d:f8:ba:87:
a2:ca:98:1e:c4:81:d9:33:80:b5:d5:25:11:8e:03:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:5C:D8:C1:08:47:FA:E5:08:49:C7:23:49:9A:D7:2A:F8:60:04
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:1f:c1:47:df:c1:33:17:74:7d:f9:dc:e1:e3:a1:dc:0c:fc:
cc:07:98:61:38:bf:b7:1e:d8:84:57:45:ac:b3:50:46:f3:23:
72:24:47:43:53:c2:80:01:5d:b9:a7:d1:66:33:77:b7:ca:70:
45:99:47:1a:b9:f1:f6:23:de:a5:d8:1b:29:7f:2e:00:5b:77:
6b:06:34:76:01:9c:2a:73:62:74:aa:14:bd:0e:0c:b5:64:4a:
70:c1:d6:13:4a:17:e3:5a:80:a4:4a:fe:f0:94:69:7c:1e:2d:
a3:9b:1d:dc:29:c0:c4:23:87:7c:f1:21:d1:23:5a:3e:a6:6c:
d3:66:7e:f7:c2:6b:1a:73:56:fe:97:a2:00:2d:d4:f2:c6:05:
5d:4b:82:58:51:17:95:e8:67:df:0c:0e:59:14:ef:db:27:22:
35:32:99:dc:1e:2b:ec:1d:ba:42:9c:bb:71:c9:a5:8c:f9:75:
86:a2:43:e5:ba:ba:fa:5b:c5:54:5a:59:45:a7:63:c3:b9:9a:
01:01:ed:b0:65:1a:46:9b:5a:48:14:a9:d9:8d:cf:cf:0f:b2:
90:cb:a7:77:44:08:bf:3c:84:39:f7:51:60:40:56:9e:82:88:
ef:eb:b0:0b:5a:f6:c1:a9:1e:0e:00:d3:78:fe:59:4c:fe:a6:
17:4c:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:59 2026 by rpki-client