Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: N3kYMX4L8b0ITpxvv71NHSXa+YaWS0Nfz9aaORsHX7w=
Subject key identifier: BC:27:92:D6:27:C5:B5:FC:89:52:BC:A0:CB:3D:A1:48:F2:5F:10:F5
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 7F6F02D79F39873944BA8EE42AD88B3601D4DAD3
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402866.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 402866
IP address blocks: 109.64.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6f:02:d7:9f:39:87:39:44:ba:8e:e4:2a:d8:8b:36:01:d4:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=BC2792D627C5B5FC8952BCA0CB3DA148F25F10F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:0c:16:0c:33:b7:95:62:26:6d:6f:5b:05:
c0:52:e1:1b:d8:f8:82:40:65:a0:75:f3:e2:07:10:
88:2d:69:be:6c:94:f2:a3:31:2c:86:7e:75:e9:8d:
ac:d9:df:fc:43:e3:08:49:b4:e9:2b:ee:01:03:4c:
01:57:4a:79:bc:23:ec:85:f0:c3:31:82:54:78:34:
50:5f:c4:36:2f:66:a4:63:f9:5b:93:18:59:b8:fd:
83:c3:3a:61:35:a0:3c:5a:c2:83:42:c0:03:cc:7e:
d0:04:01:72:0a:0c:55:de:76:dd:ca:c2:b1:f2:1c:
a3:af:21:57:40:5a:0e:7c:7d:62:12:c3:6a:04:45:
8c:7f:7c:35:9d:9f:d9:02:ea:c1:fc:54:73:f4:3b:
3f:e1:07:f4:58:41:7c:d5:46:71:5c:f8:5d:27:fa:
7f:bb:8a:4f:9e:a7:25:dd:1d:1b:7a:f3:7b:ec:66:
9e:d2:e3:91:46:39:ac:bb:0c:53:37:9f:e5:17:c2:
dd:21:3e:61:b0:96:1c:6a:90:6d:5c:f9:6c:77:56:
ce:d2:f0:d4:07:d9:20:e0:4c:56:ef:64:24:90:20:
b5:7e:92:4a:89:87:b3:d9:4a:fe:b7:0d:53:6f:c0:
23:fa:60:ea:c1:ac:7f:9e:de:a2:0c:df:54:7c:7f:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:27:92:D6:27:C5:B5:FC:89:52:BC:A0:CB:3D:A1:48:F2:5F:10:F5
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.159.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f9:8e:d7:7d:e8:2b:5a:df:d9:f3:7d:6a:40:3b:b4:9c:00:
01:f9:b9:1f:f3:c3:ae:98:e2:3c:8c:57:e5:d5:41:39:bb:da:
01:b1:6b:e6:31:b2:13:1e:b9:b4:00:c8:b0:ed:bc:cb:6e:76:
bb:0b:55:8c:b1:72:20:a0:f5:68:82:b9:cf:a0:ac:c7:ab:3c:
f7:ed:f6:94:d3:5e:3e:9f:80:8e:5d:70:5d:3c:9c:91:8c:d9:
fe:e3:a8:d5:8e:e8:56:68:8f:6e:bc:93:d8:66:db:20:1a:af:
99:02:05:45:52:fc:8b:14:c3:a9:9a:51:74:3a:1b:b8:5e:01:
ee:ad:69:c5:f5:25:b3:fd:92:e8:35:fc:e5:cf:37:d4:79:87:
45:35:21:24:66:76:92:a9:a7:58:59:9e:ed:5c:a5:99:1b:f7:
21:93:09:3e:a4:5e:77:5e:af:a2:f5:10:87:0f:e5:ed:9c:e7:
64:57:c0:51:0c:62:df:18:22:d2:74:b8:70:9e:fb:76:61:cb:
47:5b:f0:ee:7d:98:a4:16:5b:34:b3:c3:f4:3d:c0:94:ca:17:
b9:f8:51:89:40:64:6e:6c:c3:f0:e1:10:ad:fd:c6:d4:77:6c:
d3:41:b8:43:06:18:ff:9d:f4:64:87:c0:10:c0:ba:51:08:b3:
f2:0c:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:32 2026 by rpki-client