Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: 1BolmdFwrYYHZaE1GxDQARmk63A4n1SKnbF583PaI60=
Subject key identifier: 12:90:8D:61:1E:8D:FF:80:7D:AF:01:13:73:95:98:3A:D0:49:EC:0C
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 6E4CE4D623EA599E5B95191FD497EDFB1CD9383C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS7459.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 7459
IP address blocks: 79.176.12.0/24 maxlen: 24
79.176.30.0/24 maxlen: 24
79.176.45.0/24 maxlen: 24
79.176.56.0/24 maxlen: 24
79.176.62.0/24 maxlen: 24
79.176.84.0/24 maxlen: 24
109.66.130.0/24 maxlen: 24
109.66.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4c:e4:d6:23:ea:59:9e:5b:95:19:1f:d4:97:ed:fb:1c:d9:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=12908D611E8DFF807DAF01137395983AD049EC0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:02:84:8f:17:a4:91:51:e8:04:e7:3b:29:
5b:42:7d:ab:bd:aa:79:1d:e7:93:32:cd:99:3f:5a:
cc:f9:14:0d:eb:47:3a:8b:68:65:7a:f6:b5:3c:66:
2c:90:8e:7e:49:b3:ea:81:ce:f2:40:54:a9:8d:43:
cf:84:80:24:fa:ea:d8:fd:67:51:15:d7:93:57:58:
fa:24:2b:41:16:f4:7c:a4:33:cb:ff:5b:70:df:15:
5a:15:3c:fc:cb:fe:ec:2d:fa:50:78:58:04:ad:f4:
15:e7:d4:0f:5a:19:a2:a1:0b:f3:05:fb:46:83:64:
b1:50:64:3a:3d:48:87:53:bc:cc:9d:e1:0a:74:f6:
50:89:78:16:61:b1:a6:16:f5:f2:0d:0c:ad:ee:e2:
7a:c4:c8:34:bf:45:4f:a1:ce:cb:9f:f2:c4:80:ae:
cb:cb:eb:a5:3b:c1:12:ca:c7:f1:db:4a:65:3d:a9:
62:02:29:de:3a:5e:9e:f3:38:7a:7b:98:7f:cc:63:
cc:f1:7f:a7:91:ed:68:f0:ac:47:7d:04:75:9c:8d:
e8:a2:02:c3:f4:a7:38:70:92:43:a9:aa:2a:c2:ca:
8d:da:b8:85:93:65:aa:f8:17:18:32:8e:46:c0:4d:
1c:42:0b:38:e0:5c:e2:e6:7a:62:ef:87:2c:53:54:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:8D:61:1E:8D:FF:80:7D:AF:01:13:73:95:98:3A:D0:49:EC:0C
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.12.0/24
79.176.30.0/24
79.176.45.0/24
79.176.56.0/24
79.176.62.0/24
79.176.84.0/24
109.66.130.0/24
109.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c3:10:bd:c2:b5:aa:8b:7a:42:a3:f5:8b:63:e0:fa:8c:f8:
f2:f0:4b:3b:1c:0f:d6:a9:7a:60:5a:97:5d:10:d3:1b:bf:73:
55:70:b1:26:22:98:5c:40:8c:40:c8:8d:07:0b:25:af:26:c3:
dc:ea:92:8b:d6:15:92:5d:60:f2:31:56:46:32:e1:90:d0:d2:
79:04:61:fe:04:bb:5a:13:30:3e:b1:d4:46:4a:6e:a0:48:ac:
f0:a8:ea:28:8f:4f:8f:41:8a:f0:7e:63:52:6f:cf:00:b9:a7:
0f:81:2f:71:ae:5e:10:99:14:e8:41:47:ac:bb:ec:e8:57:5a:
a1:32:86:f8:f7:81:c9:62:77:53:2f:d5:4a:25:06:9a:b0:15:
9b:d5:7d:2d:be:91:40:f5:f1:c7:9a:64:b6:60:87:dd:4b:a5:
e7:9b:d3:04:73:e7:d7:6a:f0:7e:d2:b9:66:46:86:a8:4f:25:
02:e4:51:e9:2d:1c:9d:5f:55:c6:5f:68:14:b1:1a:35:7d:4b:
c2:17:e8:91:a8:1c:99:54:dc:a6:89:c2:99:67:c1:6f:fb:81:
d5:bd:ac:98:42:5b:5b:09:6b:b1:5d:27:31:a9:71:a6:dd:d1:
75:a4:98:71:f1:b0:50:af:84:bb:f6:7b:68:d1:0e:88:51:b7:
46:95:ee:c5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbkzk1iPqWZ5blRkf1Jft+xzZODwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDUwODM5MjVaFw0yNzEwMDQwODQ0MjVaMDMxMTAvBgNV
BAMTKDEyOTA4RDYxMUU4REZGODA3REFGMDExMzczOTU5ODNBRDA0OUVDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZAKEjxekkVHoBOc7KVtCfau9
qnkd55MyzZk/Wsz5FA3rRzqLaGV69rU8ZiyQjn5Js+qBzvJAVKmNQ8+EgCT66tj9
Z1EV15NXWPokK0EW9HykM8v/W3DfFVoVPPzL/uwt+lB4WASt9BXn1A9aGaKhC/MF
+0aDZLFQZDo9SIdTvMyd4Qp09lCJeBZhsaYW9fINDK3u4nrEyDS/RU+hzsuf8sSA
rsvL66U7wRLKx/HbSmU9qWICKd46Xp7zOHp7mH/MY8zxf6eR7WjwrEd9BHWcjeii
AsP0pzhwkkOpqirCyo3auIWTZar4FxgyjkbATRxCCzjgXOLmemLvhyxTVHUTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEpCNYR6N/4B9rwETc5WYOtBJ7AwwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTNzQ1OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAE+wDAME
AE+wHgMEAE+wLQMEAE+wOAMEAE+wPgMEAE+wVAMEAG1CggMEAG1ClDANBgkqhkiG
9w0BAQsFAAOCAQEAIsMQvcK1qot6QqP1i2Pg+oz48vBLOxwP1ql6YFqXXRDTG79z
VXCxJiKYXECMQMiNBwslrybD3OqSi9YVkl1g8jFWRjLhkNDSeQRh/gS7WhMwPrHU
RkpuoEis8KjqKI9Pj0GK8H5jUm/PALmnD4Evca5eEJkU6EFHrLvs6FdaoTKG+PeB
yWJ3Uy/VSiUGmrAVm9V9Lb6RQPXxx5pktmCH3Uul55vTBHPn12rwftK5ZkaGqE8l
AuRR6S0cnV9Vxl9oFLEaNX1LwhfokagcmVTcponCmWfBb/uB1b2smEJbWwlrsV0n
Malxpt3RdaSYcfGwUK+Eu/Z7aNEOiFG3RpXuxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:55 2026 by rpki-client