Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0nSPHdD4fPdN5HAdmjp6eLGtdS8.roa
File: 0nSPHdD4fPdN5HAdmjp6eLGtdS8.roa (raw, json)
Hash identifier: 0HYbAimvpmeT2ztg1MtsF+gz9k1nKKqbPSZ0Tif+XzI=
Subject key identifier: D2:74:8F:1D:D0:F8:7C:F7:4D:E4:70:1D:9A:3A:7A:78:B1:AD:75:2F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CA743328CC87639F99A68A24B7801794
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0nSPHdD4fPdN5HAdmjp6eLGtdS8.roa
Signing time: Tue 22 Sep 2026 18:50:07 +0000
ROA not before: Tue 22 Sep 2026 18:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.224.0/24 maxlen: 24
62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Sep 2026 04:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:74:33:28:cc:87:63:9f:99:a6:8a:24:b7:80:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 22 18:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2748f1dd0f87cf74de4701d9a3a7a78b1ad752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:f7:91:e4:47:03:72:5c:d0:b5:3a:e8:ec:
fe:b3:48:ea:49:37:c2:c1:ac:91:ae:61:1c:ed:bb:
e9:b1:8d:e7:71:a1:28:ba:a2:4c:fd:bb:39:87:e6:
2b:c1:a9:73:77:70:ee:79:63:ad:6e:b6:d6:ef:aa:
b5:4a:23:23:17:b9:a7:03:e0:55:bc:31:f5:35:34:
b2:5a:a1:fe:5d:ce:b8:d8:61:1a:79:9a:dd:36:13:
39:e5:71:df:25:a9:c0:99:46:3d:01:be:0b:9c:23:
70:02:c2:59:3e:83:aa:cd:15:d6:1a:b9:c3:ea:a8:
6f:61:a5:8d:1f:e3:1f:1a:4e:bf:69:b4:b9:13:7c:
66:ba:bb:a9:9e:10:93:98:b9:4a:75:fa:b9:b7:1a:
72:75:04:d9:1e:87:00:ae:ba:2f:81:61:65:b0:53:
c2:d4:c7:54:57:59:84:b3:1b:f0:b4:83:98:bc:70:
ec:23:10:a9:d3:51:c2:bd:f8:fe:23:8c:df:e4:a3:
8f:4a:e9:68:39:bb:ca:f3:46:d5:74:a2:b3:74:02:
0e:33:6c:cf:22:69:0f:0a:07:1f:f3:3a:2a:c4:d4:
db:b5:ea:5b:26:29:b4:a7:98:ce:76:6b:55:14:63:
e0:e3:1e:59:d6:01:9a:b6:9f:95:3a:01:70:e0:bd:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:8F:1D:D0:F8:7C:F7:4D:E4:70:1D:9A:3A:7A:78:B1:AD:75:2F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0nSPHdD4fPdN5HAdmjp6eLGtdS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.200.0/24
193.124.202.0/24
193.124.206.0/24
194.58.67.0/24
194.58.155.0/24
194.87.1.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.10.0/23
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:6e:62:f5:69:e1:53:17:69:fc:85:da:bf:f1:68:6a:bf:b9:
4d:86:3c:f8:2d:2f:9d:05:c4:12:d3:a8:64:3f:3c:31:e0:e2:
99:ad:4a:9f:44:20:1f:e8:f6:b7:1e:05:c6:57:5e:40:d6:52:
30:5d:4e:e4:ac:9c:f0:13:77:10:d1:97:9d:80:27:9a:e3:bc:
f6:34:e3:ed:ed:2d:01:20:da:02:fa:20:85:f7:b1:7c:07:cb:
8a:e9:b4:ba:22:d6:75:72:74:2f:4e:bb:a4:f3:f8:1f:3d:c4:
7a:15:2a:b3:5c:92:5e:1e:c8:87:f7:cc:3c:17:a9:53:cd:d5:
f1:5a:6c:a8:07:19:41:95:91:74:91:66:69:09:73:9c:7f:bc:
d6:70:a3:1e:a5:64:9b:f6:b8:f3:59:2d:14:ce:51:76:33:ed:
b9:4c:9c:cd:78:49:fb:d8:fd:fc:8c:8f:37:b4:1e:b4:58:55:
41:02:78:9d:be:82:e7:49:84:bd:60:9e:6c:f3:27:cf:4a:ad:
ed:11:40:9c:51:55:ba:cc:fc:1a:ec:25:20:8f:f4:da:25:2e:
dc:d3:bf:30:26:38:31:e6:c2:c0:fb:0d:90:a9:6e:9d:d7:34:
09:c0:56:07:1c:25:94:04:41:22:af:e8:24:c4:65:50:7b:ab:
dc:cf:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:38 2026 by rpki-client