Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: 535KEzgSPMDnhk/pXvTg4l3tQvjgnluxV1i1wDNXSU8=
Subject key identifier: 2D:91:04:F9:6C:44:9F:8D:73:21:98:AB:18:2D:D7:51:39:C1:62:D8
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 65A56FDFD5B9120035704662B5FE9DCE78EDC339
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS397373.roa
Signing time: Mon 05 Oct 2026 09:00:26 +0000
ROA not before: Mon 05 Oct 2026 08:55:26 +0000
ROA not after: Mon 04 Oct 2027 09:00:26 +0000
asID: 397373
IP address blocks: 79.176.217.0/24 maxlen: 24
79.176.249.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a5:6f:df:d5:b9:12:00:35:70:46:62:b5:fe:9d:ce:78:ed:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:55:26 2026 GMT
Not After : Oct 4 09:00:26 2027 GMT
Subject: CN=2D9104F96C449F8D732198AB182DD75139C162D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:fc:fc:8b:b0:79:8e:1b:4d:8f:e4:4e:e5:
d2:5d:b9:fe:d9:35:1a:31:0f:ce:c4:d6:ea:27:3a:
81:79:a3:c1:40:8f:89:cb:f1:1b:c5:5d:32:7a:19:
32:06:58:f7:a8:34:e6:2b:06:14:e7:18:ef:4e:c0:
8c:d8:b4:3d:ba:cc:5c:01:bd:ab:2e:41:f9:c3:dd:
99:af:d8:b0:23:47:62:d2:64:be:55:05:98:bf:b0:
54:14:5f:2c:61:18:e1:4e:22:cb:d8:82:90:10:72:
87:96:dd:77:c6:bf:74:8b:6b:3f:57:cc:0f:6f:46:
d6:cd:ba:d5:c9:e5:30:a2:b0:8f:8c:d1:96:4f:13:
c8:79:6c:cb:33:d3:8f:77:9e:8e:81:f6:cb:3c:ef:
fb:46:6e:b1:bb:a0:82:4f:70:30:05:de:a8:56:75:
60:46:63:08:22:cc:b2:90:f8:bb:91:29:cc:3d:06:
9c:7c:57:a7:b5:35:c3:46:bd:1d:c8:72:92:25:00:
f4:22:fc:69:91:36:ab:b8:c0:a7:9d:dc:19:a9:a0:
42:18:f2:73:04:e8:1b:3e:57:2f:5f:90:ab:d2:78:
10:d6:0f:c5:6c:ed:9f:47:f3:c5:02:b9:b5:c2:23:
a5:96:b1:f5:b8:5e:f4:e9:4d:b7:7c:9e:b0:e8:20:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:04:F9:6C:44:9F:8D:73:21:98:AB:18:2D:D7:51:39:C1:62:D8
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.217.0/24
79.176.249.0/24
79.176.254.0/24
79.182.255.0/24
Signature Algorithm: sha256WithRSAEncryption
53:27:06:e7:6d:0a:00:14:ce:a4:d1:82:a5:42:e6:45:f9:e4:
e0:3b:f2:59:aa:6e:11:b6:2e:a3:74:05:87:c2:80:51:a0:0c:
af:4a:b8:f2:4f:8b:37:d8:e0:2b:11:14:06:fe:60:47:ff:e0:
36:eb:7d:88:b4:c3:04:4c:cd:41:b8:69:58:75:79:ed:b2:96:
d2:3f:b0:ad:8a:9c:25:d9:8c:d6:01:e9:95:fd:f6:20:d0:57:
87:ad:d1:c5:60:d8:f4:4a:b6:a0:eb:13:1d:a6:17:62:7b:53:
75:95:f6:67:4b:c0:fa:8f:9a:e5:7b:3b:56:92:db:20:b4:47:
72:a0:ce:22:ab:e9:55:85:ef:42:13:e9:9e:50:f1:e3:e8:08:
cd:68:a4:77:79:f0:65:1f:a5:f5:01:81:17:bd:46:60:97:77:
09:4a:ab:88:93:dc:ff:53:0c:f1:59:5e:ca:ff:54:1f:c0:ed:
9a:b4:9d:a5:ae:f1:02:1b:70:fb:c3:07:56:c4:ce:db:a1:5f:
f9:55:4e:94:77:f9:93:57:79:63:11:f0:5d:89:4f:f0:75:c1:
6b:55:a0:70:ba:f4:44:4a:20:78:44:17:b7:73:ec:11:18:6c:
93:e9:5c:6a:2e:f3:40:be:9a:a3:1a:f5:3f:37:a4:89:ef:d6:
82:a3:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:32 2026 by rpki-client