Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: yM0kyS79tdl1aJc9c7ecCHi76AYBsCoARQWMXe3w6vY=
Subject key identifier: 93:5E:CB:98:1B:BE:2D:1F:4E:A0:CF:B5:E9:27:23:10:F4:7E:74:BE
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 759B341A2EB567C1D56705BC7C21583E4F70AB39
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS393942.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 393942
IP address blocks: 79.182.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:34:1a:2e:b5:67:c1:d5:67:05:bc:7c:21:58:3e:4f:70:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=935ECB981BBE2D1F4EA0CFB5E9272310F47E74BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:aa:6c:d0:00:0e:ca:5a:f0:5b:ff:0a:d8:
aa:73:01:bb:6f:69:7c:c1:67:03:70:a0:3a:74:19:
af:0b:8f:42:5a:de:28:0e:ce:09:4d:b8:99:9e:ab:
d4:f5:2d:26:2d:c7:ad:9c:35:da:4d:6b:b4:6d:6d:
fb:28:15:61:b8:03:8b:56:f7:8a:44:ee:58:44:7b:
61:54:18:eb:97:34:14:11:49:a6:ba:8b:61:a0:0a:
94:ed:04:37:fe:b9:83:e1:59:90:0d:9b:16:13:0d:
ca:51:9c:01:59:30:5d:2c:9b:c0:40:18:d1:03:64:
37:9b:3a:c5:0a:ef:90:27:7c:bb:9e:66:55:c7:8b:
5b:33:4b:c0:b8:9d:84:73:ab:32:e5:91:41:ed:a3:
ec:ce:77:f8:94:a1:88:95:c4:1a:50:e0:a9:3b:6c:
c0:15:f2:80:84:6b:a9:c1:cb:1f:49:dc:97:5b:9f:
c9:11:2c:a3:20:bf:7e:a2:d1:8c:25:54:62:ff:28:
78:6b:22:fc:b6:5a:8b:26:cb:b5:56:2b:9c:71:98:
0f:30:ed:d3:69:78:f7:c6:23:73:28:37:22:aa:a4:
5e:07:4a:b3:7a:d3:e7:48:39:40:36:7f:97:46:ae:
47:56:5d:68:dd:28:90:d5:ee:ba:df:e7:97:61:67:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:CB:98:1B:BE:2D:1F:4E:A0:CF:B5:E9:27:23:10:F4:7E:74:BE
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.56.0/24
Signature Algorithm: sha256WithRSAEncryption
16:47:2b:2e:a4:12:7b:c3:4f:a6:dd:ce:b1:a5:9d:f0:42:3f:
22:06:e3:d2:f9:af:96:97:ca:ce:c4:ab:1e:9f:04:9b:6a:35:
63:19:77:cb:85:e6:47:5d:5e:e2:3d:fe:91:f5:2a:20:6c:5a:
86:26:26:eb:72:5c:db:44:61:52:63:35:51:e4:db:8f:97:a3:
a2:ca:2f:29:b2:37:00:4c:32:ee:c9:ce:d7:b8:9e:b9:fb:a8:
9e:7a:7c:12:e0:b7:b2:fa:e9:b8:44:a4:06:e4:8b:c1:71:1b:
0e:78:89:d8:5a:cc:83:13:fa:f6:44:ea:28:54:53:44:d7:c8:
6b:eb:9d:0e:45:70:b2:2d:75:d8:69:1f:8d:6c:29:0e:e3:7a:
fb:f9:7c:41:56:ed:fb:29:7c:cb:6c:37:bc:85:58:9e:d0:01:
0d:6b:ca:31:13:2d:74:05:9b:68:66:e3:9a:69:bb:a7:22:8c:
42:53:b7:b1:75:d9:21:73:47:95:b7:2d:49:e2:9d:38:28:ad:
a1:d3:23:04:58:3f:f9:6a:d3:16:1e:63:bc:f7:57:26:fe:a5:
61:b7:4b:af:55:9d:6d:f2:d9:cd:23:70:d1:0d:ae:76:0a:86:
6c:1c:bf:2b:a1:38:7f:16:ed:20:2f:f3:d8:9e:9e:e6:40:fb:
1b:dd:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:42 2026 by rpki-client