Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399275.roa
File: AS399275.roa (raw, json)
Hash identifier: u4vJcbpmMFZOrYBqtYKNkxuYLr9pLcGkqjpHTNqqI0k=
Subject key identifier: EE:AD:C6:68:47:B3:AC:5D:A1:8E:3D:70:B2:7B:73:31:6E:72:68:70
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 371377E756FC0619D3FB770C8877E0CFECD428DE
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399275.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 399275
IP address blocks: 79.182.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:77:e7:56:fc:06:19:d3:fb:77:0c:88:77:e0:cf:ec:d4:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=EEADC66847B3AC5DA18E3D70B27B73316E726870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:e2:e1:3e:56:20:39:26:a5:84:83:e3:c2:
b8:58:e6:ff:5e:f6:20:10:66:2d:5a:2d:95:35:58:
78:ea:20:55:a7:24:6f:47:50:4c:9f:54:d0:b6:60:
ad:b4:4d:bd:48:36:24:57:33:87:08:aa:8a:29:9b:
71:fd:b0:26:22:69:23:f7:15:4a:aa:e8:6e:e4:cc:
00:ba:92:b8:df:a3:55:f6:2d:a4:4d:18:1e:96:99:
aa:24:03:3d:db:f6:e8:ac:d7:a7:a9:be:47:48:04:
a7:0d:8d:0a:69:04:70:27:23:ff:69:12:96:19:5f:
45:2a:bb:78:0b:46:36:65:6a:be:44:8b:b3:67:a0:
9a:18:14:30:a0:21:44:5e:04:07:65:55:b7:67:fc:
84:3f:28:ac:e3:86:7b:c2:20:83:a2:28:c6:c6:26:
d4:d9:a3:2f:a4:a6:20:16:c2:cf:23:59:ee:2d:9a:
20:04:c8:ee:85:2f:42:4d:ef:72:b1:d4:ed:19:23:
d1:b9:67:68:62:22:1c:96:5e:29:72:5a:cc:3c:d4:
ac:d8:fc:88:da:07:30:85:f5:e2:60:7d:10:7a:1b:
a7:00:66:9d:5c:cf:e6:99:43:03:9b:de:24:a1:70:
70:19:26:47:cb:6d:67:3b:a8:94:71:d9:64:86:98:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AD:C6:68:47:B3:AC:5D:A1:8E:3D:70:B2:7B:73:31:6E:72:68:70
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS399275.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.17.0/24
Signature Algorithm: sha256WithRSAEncryption
47:00:9f:50:7b:88:8c:c1:71:20:29:78:3a:74:1c:03:f0:da:
09:32:57:2c:5b:cf:b7:95:84:90:d9:76:44:f3:7a:b2:b1:44:
30:7d:68:f5:ae:bb:7a:0d:82:31:4a:a6:14:00:53:c4:3a:0f:
b7:18:2d:f0:66:5e:3d:a6:3c:da:eb:9d:a4:05:3e:39:55:f4:
c8:e9:f3:c1:b6:51:2e:96:48:8c:22:52:54:b1:cc:70:5a:64:
45:95:25:3d:a9:a1:8a:1e:2c:b5:3b:00:65:b7:b9:83:b3:eb:
8d:bc:3c:cc:1d:9c:55:78:d1:d7:79:a0:13:3c:41:f1:61:13:
21:e3:0a:d5:e4:f3:b5:9a:b8:2c:7b:b0:a8:ea:db:8a:2b:12:
84:67:0a:41:db:6a:5f:4e:97:6f:9e:20:26:e1:ea:31:0d:45:
de:e8:3a:06:6c:0b:e2:7c:b9:21:87:ec:ef:b9:a2:0e:12:fd:
a8:1a:d1:e0:a1:26:ac:25:7e:2b:db:6a:54:b5:5b:a8:5c:39:
81:37:17:af:52:58:ee:75:d3:71:8c:f1:a2:a5:99:ef:79:27:
de:e6:04:46:32:fb:7e:bb:55:6e:e9:d6:d8:b5:41:0b:98:07:
b6:87:09:02:be:76:47:c6:ed:f5:fa:ce:01:66:e1:9a:54:89:
b0:7f:07:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNxN351b8BhnT+3cMiHfgz+zUKN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ3NDNaFw0yNzEwMDMwMDUyNDNaMDMxMTAvBgNV
BAMTKEVFQURDNjY4NDdCM0FDNURBMThFM0Q3MEIyN0I3MzMxNkU3MjY4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhOLhPlYgOSalhIPjwrhY5v9e
9iAQZi1aLZU1WHjqIFWnJG9HUEyfVNC2YK20Tb1INiRXM4cIqoopm3H9sCYiaSP3
FUqq6G7kzAC6krjfo1X2LaRNGB6WmaokAz3b9uis16epvkdIBKcNjQppBHAnI/9p
EpYZX0Uqu3gLRjZlar5Ei7NnoJoYFDCgIUReBAdlVbdn/IQ/KKzjhnvCIIOiKMbG
JtTZoy+kpiAWws8jWe4tmiAEyO6FL0JN73Kx1O0ZI9G5Z2hiIhyWXilyWsw81KzY
/IjaBzCF9eJgfRB6G6cAZp1cz+aZQwOb3iShcHAZJkfLbWc7qJRx2WSGmNMxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU7q3GaEezrF2hjj1wsntzMW5yaHAwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMzk5Mjc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7YR
MA0GCSqGSIb3DQEBCwUAA4IBAQBHAJ9Qe4iMwXEgKXg6dBwD8NoJMlcsW8+3lYSQ
2XZE83qysUQwfWj1rrt6DYIxSqYUAFPEOg+3GC3wZl49pjza652kBT45VfTI6fPB
tlEulkiMIlJUscxwWmRFlSU9qaGKHiy1OwBlt7mDs+uNvDzMHZxVeNHXeaATPEHx
YRMh4wrV5PO1mrgse7Co6tuKKxKEZwpB22pfTpdvniAm4eoxDUXe6DoGbAvifLkh
h+zvuaIOEv2oGtHgoSasJX4r22pUtVuoXDmBNxevUljuddNxjPGipZnveSfe5gRG
Mvt+u1Vu6dbYtUELmAe2hwkCvnZHxu31+s4BZuGaVImwfwel
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:16 2026 by rpki-client