Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS41171.roa
File: AS41171.roa (raw, json)
Hash identifier: hBitULpstrFfy0qikOHr/Km+cqEoAQdqLD9qiqgvUWQ=
Subject key identifier: 92:0F:E1:0B:0F:A6:CD:DF:4B:FF:AF:CE:60:5D:06:76:B0:AB:96:97
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 148D1C345AAAF494CB40B908E0EA2254BE4699A2
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS41171.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 41171
IP address blocks: 109.66.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8d:1c:34:5a:aa:f4:94:cb:40:b9:08:e0:ea:22:54:be:46:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=920FE10B0FA6CDDF4BFFAFCE605D0676B0AB9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:f8:f7:33:32:bb:95:b4:2d:e1:30:ff:08:
3c:4c:69:02:ff:d0:61:53:3d:b8:f6:83:ae:b5:3d:
e5:fe:fe:b4:78:8f:f8:54:de:2b:83:32:96:d7:e3:
26:ab:e7:f7:e3:c7:ee:14:32:aa:e0:24:de:7d:b8:
3f:64:f9:8f:de:3b:9a:27:c5:03:74:4c:07:1e:ff:
70:05:81:b5:9e:e5:fd:f5:0a:08:ae:14:15:a6:b6:
29:1a:36:92:ec:1e:43:24:76:fa:36:ab:1a:e4:94:
2f:43:1e:d3:22:40:af:79:de:c2:8d:e9:cb:55:83:
1a:0d:d8:2d:74:5f:3d:4b:16:06:ea:56:36:af:f5:
9f:80:08:ca:02:c8:02:44:93:2f:66:a1:a0:01:8f:
ff:6d:e0:ef:2c:f5:3d:69:24:ce:92:97:b8:a8:35:
53:3a:4e:b9:a5:2d:ae:8d:a4:ac:67:0e:83:42:76:
a8:e1:db:a0:da:ab:01:5c:83:2c:ba:4c:68:bd:37:
d3:62:46:65:c1:7b:d6:10:70:77:3a:f5:9d:62:77:
fe:b4:8d:17:db:cb:84:81:ad:18:18:3b:f2:72:19:
e7:69:ea:7b:b5:9d:48:4b:60:1b:7a:a4:9e:e6:1f:
e5:0f:78:b3:98:13:77:13:58:36:39:16:d5:0e:46:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:E1:0B:0F:A6:CD:DF:4B:FF:AF:CE:60:5D:06:76:B0:AB:96:97
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS41171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.226.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ab:ac:3c:9c:a8:dd:86:cf:3a:1e:ce:b4:8c:da:ab:c3:32:
3b:14:b9:50:03:87:43:72:60:61:66:ca:f5:b8:ac:23:bf:65:
28:4c:85:d7:9a:dc:ad:c7:56:69:90:5a:e8:29:95:99:1a:a6:
9d:99:99:55:95:c9:52:28:b7:92:c9:a5:d7:24:05:8c:3d:63:
b0:33:02:9e:55:75:de:66:15:c3:9f:ee:2a:b5:ea:72:2d:5e:
e9:3b:e5:05:e4:68:05:cc:ba:22:d4:db:77:7f:db:9b:b3:28:
31:dc:df:5a:80:ec:a3:c1:12:b2:ae:d0:e3:f5:fc:e8:72:51:
f4:10:2c:b6:46:e9:38:35:5f:0e:4e:e0:f7:53:d3:2c:9d:69:
44:32:24:b9:b6:60:72:5a:b0:34:04:f3:55:17:e3:94:af:1d:
a6:eb:b5:53:d2:c7:62:a9:e3:26:ce:29:2e:ae:c5:e6:cd:03:
33:5a:21:00:33:99:dd:f8:92:f6:1f:8e:48:b0:ba:f2:af:b4:
8a:d6:5c:90:f0:fd:5e:f1:1f:d1:44:19:d9:6e:97:b8:ee:6e:
0b:db:88:24:3e:51:4c:7b:82:f8:47:ce:4e:be:24:e9:4b:20:
fd:97:a2:ac:42:93:d1:26:f5:03:b4:92:01:8f:1e:cc:02:a4:
4e:16:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:17 2026 by rpki-client