Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS38186.roa
File: AS38186.roa (raw, json)
Hash identifier: deDgtWLw1BjLV71I3TUDvWiDIcUU7xv5U3FDn/TaHgs=
Subject key identifier: 1C:E6:CA:95:B0:71:1E:82:B7:B8:31:EB:A0:52:4D:48:82:8B:22:03
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 51976007481A92D15331CFBD2486FD9EBCB4B9AB
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS38186.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 38186
IP address blocks: 79.176.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:97:60:07:48:1a:92:d1:53:31:cf:bd:24:86:fd:9e:bc:b4:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=1CE6CA95B0711E82B7B831EBA0524D48828B2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:07:2c:0e:7a:4a:f8:0f:be:89:2e:05:7d:
be:34:da:68:56:ba:b1:fc:96:3d:75:a9:ca:31:96:
08:94:8b:40:9a:01:a4:27:16:f4:0a:4f:63:b6:05:
4f:c4:9c:ab:27:d0:36:c1:e3:37:d8:42:59:de:e9:
01:1b:4f:3a:3a:41:25:6a:c2:d5:65:9d:36:6e:20:
08:b9:f5:ce:19:cf:60:29:78:d8:d6:76:07:a1:99:
f5:c2:a1:b3:7e:c6:34:95:f4:76:bb:ae:d9:4f:7e:
b4:43:53:cd:bf:09:3d:9e:95:47:f8:c8:b9:00:13:
35:98:79:b5:9b:d1:7c:3a:ad:53:b2:6a:b1:ec:a9:
16:eb:26:e7:a9:82:b8:ed:da:0e:f9:fc:f1:19:9b:
ec:ef:2f:bf:c6:dd:90:9b:b5:a1:3d:99:d1:85:27:
6c:c7:d5:82:f3:7b:42:e3:03:0f:e2:96:0d:10:4a:
f3:cf:7c:6e:41:7f:f8:70:c5:d4:e8:26:df:0f:01:
51:b1:a9:a8:0a:32:b9:bf:8c:6e:35:bb:af:1c:d4:
91:5b:05:8a:7a:aa:2d:8b:cb:14:d5:47:5b:c3:b1:
80:6f:00:af:62:ba:ab:74:f5:f5:27:11:b6:6a:98:
a0:37:fd:b6:ca:5d:98:be:e4:89:ce:22:e6:94:35:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:CA:95:B0:71:1E:82:B7:B8:31:EB:A0:52:4D:48:82:8B:22:03
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS38186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:57:96:16:72:ae:9e:6a:35:6a:46:cc:20:03:0c:25:bf:43:
4d:3b:7d:5c:54:18:64:7e:8b:e1:25:19:3d:fb:04:8d:3f:ce:
88:33:76:0b:6f:8d:59:4a:c3:4d:9e:6a:93:d0:9f:b6:b9:8c:
24:f2:c7:34:d0:23:75:b2:49:db:53:80:6f:5d:70:28:90:53:
d6:a4:35:92:2f:07:3c:42:86:23:d9:a2:ef:8f:f1:38:8e:29:
35:25:ec:aa:f3:b8:b4:80:b9:1f:34:62:ef:f2:c5:b9:40:22:
1c:0e:75:e8:7a:f9:85:b3:5a:2c:0e:5e:ca:36:a6:10:2b:ff:
8d:96:e9:70:56:c6:69:c6:76:ec:0b:f3:bf:50:14:79:04:0f:
9b:62:2e:84:70:f4:4c:a0:05:74:92:8b:28:57:b9:88:02:8d:
91:df:3f:1a:66:4a:c5:9b:85:9c:d4:e1:1f:75:b6:91:37:96:
1e:6e:4d:a4:b4:9e:c5:7c:53:13:eb:35:69:e0:e2:2b:0d:43:
51:8d:58:f6:e9:a5:2c:e1:99:93:57:f0:c5:cf:8a:01:45:d9:
43:2f:78:9f:f7:0f:19:18:21:59:43:da:eb:4d:4b:98:51:cd:
a2:b4:8f:ef:a0:ff:70:ea:87:9f:31:08:8f:ed:28:28:d8:db:
49:30:f3:7c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUUZdgB0gaktFTMc+9JIb9nry0uaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ2MzdaFw0yNzEwMDMwMDUxMzdaMDMxMTAvBgNV
BAMTKDFDRTZDQTk1QjA3MTFFODJCN0I4MzFFQkEwNTI0RDQ4ODI4QjIyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPegcsDnpK+A++iS4Ffb402mhW
urH8lj11qcoxlgiUi0CaAaQnFvQKT2O2BU/EnKsn0DbB4zfYQlne6QEbTzo6QSVq
wtVlnTZuIAi59c4Zz2ApeNjWdgehmfXCobN+xjSV9Ha7rtlPfrRDU82/CT2elUf4
yLkAEzWYebWb0Xw6rVOyarHsqRbrJuepgrjt2g75/PEZm+zvL7/G3ZCbtaE9mdGF
J2zH1YLze0LjAw/ilg0QSvPPfG5Bf/hwxdToJt8PAVGxqagKMrm/jG41u68c1JFb
BYp6qi2LyxTVR1vDsYBvAK9iuqt09fUnEbZqmKA3/bbKXZi+5InOIuaUNTlNAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUHObKlbBxHoK3uDHroFJNSIKLIgMwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMzgxODYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABPsBIw
DQYJKoZIhvcNAQELBQADggEBAAtXlhZyrp5qNWpGzCADDCW/Q007fVxUGGR+i+El
GT37BI0/zogzdgtvjVlKw02eapPQn7a5jCTyxzTQI3WySdtTgG9dcCiQU9akNZIv
BzxChiPZou+P8TiOKTUl7KrzuLSAuR80Yu/yxblAIhwOdeh6+YWzWiwOXso2phAr
/42W6XBWxmnGduwL879QFHkED5tiLoRw9EygBXSSiyhXuYgCjZHfPxpmSsWbhZzU
4R91tpE3lh5uTaS0nsV8UxPrNWng4isNQ1GNWPbppSzhmZNX8MXPigFF2UMveJ/3
DxkYIVlD2utNS5hRzaK0j++g/3Dqh58xCI/tKCjY20kw83w=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:26 2026 by rpki-client