Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ecJViOaQ7F5BXPrKoCIV11N3Kz4.roa
File: ecJViOaQ7F5BXPrKoCIV11N3Kz4.roa (raw, json)
Hash identifier: QrqjI/R4eMHS0HigfiN4Q3Pk2EMtkFdgIU48aIFiNNg=
Subject key identifier: 79:C2:55:88:E6:90:EC:5E:41:5C:FA:CA:A0:22:15:D7:53:77:2B:3E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0BF8AEBCA2D82012845D435913DDE11BB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ecJViOaQ7F5BXPrKoCIV11N3Kz4.roa
Signing time: Sun 20 Sep 2026 15:59:07 +0000
ROA not before: Sun 20 Sep 2026 15:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 08:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8a:eb:ca:2d:82:01:28:45:d4:35:91:3d:de:11:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 20 15:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79c25588e690ec5e415cfacaa02215d753772b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:1f:a1:7a:31:20:8a:9f:5a:72:eb:ca:0e:
a6:df:b9:95:ab:12:9d:72:f6:98:9a:1f:f2:63:27:
43:45:f3:f6:3e:21:01:63:31:96:77:a8:89:29:58:
5b:33:68:89:27:5a:a2:c9:02:26:bf:27:6d:83:04:
64:1a:d6:8f:02:00:3b:90:d9:a7:a0:9c:02:a2:29:
0d:08:d1:54:b2:22:c7:be:37:3e:18:af:02:a5:2a:
74:6c:22:06:d1:c7:75:4e:7f:4c:94:c1:48:9e:df:
bb:db:e0:f3:08:8b:08:ee:0f:c1:29:5f:8d:41:ac:
2a:55:52:18:c1:c1:1a:f1:17:67:b7:4f:92:a1:a6:
bc:14:8f:27:39:3f:ac:c5:00:d2:36:d6:a0:e3:a3:
bb:6d:f8:1d:69:43:2f:88:00:4d:ad:a5:8f:02:0d:
f9:24:46:a1:b4:4d:5a:3d:84:38:b9:f0:9c:73:a9:
f8:5c:72:26:b2:38:9f:59:cc:db:e0:da:63:47:df:
c3:70:8f:f8:ba:cf:ce:9b:b1:f9:98:65:61:45:b3:
c3:b6:91:87:f6:72:78:99:cb:15:6e:60:28:48:a2:
0d:86:ad:75:d6:2b:b4:69:f4:b1:0f:57:8a:74:23:
cf:03:e3:d7:f8:e3:93:40:68:3c:a1:94:80:73:dc:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:55:88:E6:90:EC:5E:41:5C:FA:CA:A0:22:15:D7:53:77:2B:3E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ecJViOaQ7F5BXPrKoCIV11N3Kz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.54.0/24
163.5.56.0/24
163.5.59.0/24
163.5.90.0/24
163.5.112.0/24
163.5.121.0/24
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.200.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1d:61:e7:54:9f:0d:dc:0c:ad:f4:55:44:58:13:d7:38:ea:
51:a1:64:dd:27:71:28:09:9c:bc:e5:d4:29:b6:9b:79:6d:8d:
1e:7e:fc:03:fe:e8:b3:2d:bf:77:5a:c6:56:ad:09:57:ff:b6:
23:1c:10:96:37:64:63:c7:e8:6e:61:ad:86:48:5e:d8:c2:8a:
0c:8c:1a:7a:ab:fb:bc:28:ff:6b:31:e9:7b:65:74:93:8d:3f:
26:fb:49:52:d0:8a:98:ee:bb:2e:6f:6e:50:08:da:a5:ef:3f:
9b:fb:2c:b8:22:67:92:dc:d8:96:c4:0a:5f:fe:60:31:2e:75:
de:12:5e:a3:a6:6a:9e:32:1d:ee:07:57:0b:e5:11:44:e9:76:
26:46:28:7d:c6:cd:53:01:a4:dc:10:a5:a6:78:16:63:53:14:
6f:cf:19:82:4f:b0:d2:d2:3d:07:bb:30:9c:af:d9:c3:49:92:
fe:ab:44:cd:e9:28:ca:7a:1c:5e:d3:0c:f9:8e:21:2e:c4:93:
08:a3:28:57:45:a1:7f:2a:e7:b5:58:43:57:1f:06:d0:9b:51:
9b:76:44:84:cb:24:f4:39:24:55:ed:9c:e5:b6:bb:d2:0d:0b:
4e:1b:3a:6d:59:2a:c4:cb:f6:ae:f3:e7:d2:8f:90:c7:13:44:
f8:7d:64:12
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAaC/iuvKLYIBKEXUNZE93hG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwOTIwMTU1OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWMyNTU4OGU2OTBlYzVlNDE1Y2ZhY2FhMDIyMTVkNzUzNzcyYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtAfoXoxIIqfWnLryg6m37mVqxKd
cvaYmh/yYydDRfP2PiEBYzGWd6iJKVhbM2iJJ1qiyQImvydtgwRkGtaPAgA7kNmn
oJwCoikNCNFUsiLHvjc+GK8CpSp0bCIG0cd1Tn9MlMFInt+72+DzCIsI7g/BKV+N
QawqVVIYwcEa8Rdnt0+Soaa8FI8nOT+sxQDSNtag46O7bfgdaUMviABNraWPAg35
JEahtE1aPYQ4ufCcc6n4XHImsjifWczb4NpjR9/DcI/4us/Om7H5mGVhRbPDtpGH
9nJ4mcsVbmAoSKINhq111iu0afSxD1eKdCPPA+PX+OOTQGg8oZSAc9zn4QIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFHnCVYjmkOxeQVz6yqAiFddTdys+MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZWNKVmlPYVE3RjVCWFByS29DSVYxMU4zS3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBACj
BRwDBACjBTYDBACjBTgDBACjBTsDBACjBVoDBACjBXADBACjBXkDBACjBX0DBACj
BYEDBACjBYsDBACjBY8DBACjBZIDBACjBaADBACjBacDBACjBbIDBACjBcQDBACj
BcgDBACjBdgDBACjBdoDBACjBeADBACjBeQDBACjBekDBACjBfEwDQYJKoZIhvcN
AQELBQADggEBACsdYedUnw3cDK30VURYE9c46lGhZN0ncSgJnLzl1Cm2m3ltjR5+
/AP+6LMtv3daxlatCVf/tiMcEJY3ZGPH6G5hrYZIXtjCigyMGnqr+7wo/2sx6Xtl
dJONPyb7SVLQipjuuy5vblAI2qXvP5v7LLgiZ5Lc2JbECl/+YDEudd4SXqOmap4y
He4HVwvlEUTpdiZGKH3GzVMBpNwQpaZ4FmNTFG/PGYJPsNLSPQe7MJyv2cNJkv6r
RM3pKMp6HF7TDPmOIS7EkwijKFdFoX8q57VYQ1cfBtCbUZt2RITLJPQ5JFXtnOW2
u9INC04bOm1ZKsTL9q7z59KPkMcTRPh9ZBI=
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:47:51 2026 by rpki-client