Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: WJo/KjtZQ9K3xS64myuKHKssu6+gpkAaOeHrfDfqWio=
Subject key identifier: 85:3C:CC:95:07:65:46:7D:FB:06:39:AB:EF:1B:A5:EA:19:16:BD:8F
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 42FF926EEDC01DDF77847F6AD04744D697F2AB27
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402976.roa
Signing time: Sun 04 Oct 2026 00:51:03 +0000
ROA not before: Sun 04 Oct 2026 00:46:03 +0000
ROA not after: Sun 03 Oct 2027 00:51:03 +0000
asID: 402976
IP address blocks: 109.66.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ff:92:6e:ed:c0:1d:df:77:84:7f:6a:d0:47:44:d6:97:f2:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:03 2026 GMT
Not After : Oct 3 00:51:03 2027 GMT
Subject: CN=853CCC950765467DFB0639ABEF1BA5EA1916BD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:05:df:f5:3a:b1:f4:3b:77:43:84:e3:00:
2b:98:25:bf:6c:b4:76:74:05:30:ca:83:08:7a:8e:
bc:3b:0f:f2:d8:3a:c5:f6:d0:bc:9a:c3:53:ec:33:
54:79:96:d8:ad:f6:93:25:40:52:4a:99:d5:a7:2b:
b8:b9:b3:c9:6e:55:2f:9f:fa:4b:6a:a1:a4:a0:a7:
76:54:48:f7:8d:c0:7a:4f:8a:7e:7a:e7:d9:51:82:
2a:95:c5:c8:03:71:42:16:46:44:5b:ed:77:87:ca:
5c:7c:45:0c:11:ac:e9:36:b0:c0:43:36:00:ca:c8:
9f:20:4c:3c:ce:16:41:4e:c5:c3:88:1c:2c:69:f3:
92:12:57:9b:8f:31:d6:73:39:43:80:59:18:fd:56:
c2:0a:de:19:79:a7:25:08:a6:f2:f7:eb:c5:2e:bb:
d4:11:1c:11:75:9b:f6:75:0c:51:d0:be:13:73:22:
98:9b:92:f6:80:71:8c:a8:1f:aa:39:a0:f7:74:67:
19:94:45:7f:8a:e9:82:75:aa:dc:a8:5f:66:58:f4:
d9:2b:0e:45:42:3c:9b:d8:f2:97:73:ad:1a:47:bf:
fd:8b:bd:c7:8f:80:48:39:37:3b:23:d3:41:41:40:
b0:4d:f6:9a:ed:eb:2b:92:7d:a0:27:bd:76:97:66:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:CC:95:07:65:46:7D:FB:06:39:AB:EF:1B:A5:EA:19:16:BD:8F
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.44.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6b:3d:9e:da:7f:f8:db:31:25:1d:f1:f2:53:96:f0:d1:b2:
48:5a:1e:29:fe:22:9a:9c:0a:a6:80:db:2e:ab:23:b0:ff:12:
41:b8:f9:45:4d:65:a4:16:9c:ea:28:f7:47:af:21:ed:27:b0:
bd:4b:d3:41:95:20:3e:ef:6e:8c:9d:e3:13:81:5c:47:1c:11:
43:b2:26:96:39:19:4d:c5:a5:ba:c8:6e:ba:0a:aa:32:35:88:
d0:a3:97:77:34:1f:03:bc:38:a5:d0:1d:12:51:1d:c1:de:15:
8f:c0:9b:68:7c:e1:0e:27:9a:43:88:e4:86:64:a5:f8:82:a8:
cb:87:0b:65:c5:1c:fd:bd:44:3b:41:d9:d8:16:d5:6f:77:d3:
56:91:94:c6:36:e3:58:78:2f:74:6b:84:aa:e0:03:03:7a:36:
49:06:d8:eb:24:8a:4e:ef:20:b3:e4:63:47:05:fa:fe:58:8c:
db:b5:53:dc:09:e6:8a:50:e5:6b:46:5a:c6:95:c6:0d:07:a9:
fd:79:e8:bb:38:77:d7:7b:d9:51:ba:19:35:79:d3:c2:dc:23:
12:61:d7:e9:2f:f9:61:27:1b:9d:71:0c:7e:35:95:dc:3b:04:
85:1f:9d:36:13:1a:d6:ea:1e:61:44:5e:43:51:27:ef:d3:40:
c1:a7:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:09 2026 by rpki-client