Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-veQ67xZip3OlIJna6UYqTlfzYA.roa
File: 1-veQ67xZip3OlIJna6UYqTlfzYA.roa (raw, json)
Hash identifier: 96ZDZNlGHOcIvxfMDY6XpSV07cxFunruPPc16j1AnUg=
Subject key identifier: FA:F7:90:EB:BC:59:8A:9D:CE:94:82:67:6B:A5:18:A9:39:5F:CD:80
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0CB90AE9AE9FBFC2AD5B3ABEE790A603C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-veQ67xZip3OlIJna6UYqTlfzYA.roa
Signing time: Wed 23 Sep 2026 00:00:51 +0000
ROA not before: Wed 23 Sep 2026 00:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.196.0/24 maxlen: 24
62.105.197.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.58.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.24.0/23 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.56.0/22 maxlen: 24
194.122.81.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
195.21.131.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 06:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:ae:9a:e9:fb:fc:2a:d5:b3:ab:ee:79:0a:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 23 00:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faf790ebbc598a9dce9482676ba518a9395fcd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:21:96:c2:11:78:25:be:e2:3e:42:ee:67:
9b:a3:c2:58:27:1e:45:df:16:14:96:35:09:af:c7:
90:fe:35:fc:f1:5d:c8:27:19:0f:18:52:80:3e:81:
13:01:78:5b:2a:61:89:39:23:6b:09:8f:77:88:75:
6d:2b:44:0b:34:9a:76:d0:25:1c:1f:eb:7d:f1:6e:
a0:fb:01:64:26:0e:ec:fd:99:35:93:c7:95:c5:7b:
17:67:dd:0a:15:cd:fa:c8:9e:8e:2d:09:a8:30:c1:
22:f1:78:51:22:7a:17:51:d2:2b:06:40:80:7e:ba:
e1:9d:7c:8f:da:d4:50:b5:b8:e1:df:f9:2a:b9:ef:
fa:9b:a5:35:7e:d9:27:5d:23:c3:e7:dc:f9:28:07:
91:1d:9f:9c:38:5d:af:38:f5:9e:04:0f:6d:ee:25:
db:f0:c3:89:88:eb:eb:fd:19:27:49:cf:51:2b:f5:
91:03:bb:34:bf:2c:c6:ba:bb:da:b4:db:b3:78:38:
97:29:c6:c0:2f:dc:b9:c1:90:64:63:99:0d:04:93:
a6:d4:01:68:a0:b8:5e:60:12:3a:e7:57:cf:c3:8b:
e1:44:1b:cf:17:86:83:4b:70:d4:f0:1a:7e:58:02:
cd:ec:12:29:78:f8:03:b4:c6:79:ac:fa:e1:a0:de:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:90:EB:BC:59:8A:9D:CE:94:82:67:6B:A5:18:A9:39:5F:CD:80
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-veQ67xZip3OlIJna6UYqTlfzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.196.0/23
62.132.116.0/24
77.67.58.0/24
77.67.125.0/24
193.141.2.0/24
194.45.47.0/24
194.77.24.0-194.77.26.255
194.77.56.0/22
194.122.81.0/24
194.231.128.0-194.231.139.255
194.231.150.0/24
194.231.152.0/22
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.131.0/24
212.189.57.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.91.0/24
212.189.95.0/24
212.189.103.0/24
212.189.110.0/24
212.189.115.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d3:f1:b0:36:3c:c7:dd:b0:67:b9:e6:09:30:39:fd:34:34:
ab:09:01:bb:6e:d9:5a:d2:ba:1b:fc:26:3b:b7:a3:60:1f:2d:
9b:df:e7:a1:49:42:19:ad:53:06:3a:6a:f2:ce:be:63:45:e2:
f3:ab:01:11:9a:ec:39:a6:2f:59:83:d9:1b:88:b4:6a:9b:29:
fe:9c:71:03:6b:e4:d9:87:a4:1d:20:e3:10:04:2a:b2:7f:97:
43:5a:5f:87:1d:a7:e1:d7:64:65:27:49:c3:8a:5c:af:78:09:
7d:2f:85:c9:a2:4c:3b:5b:87:5d:ec:88:87:cc:cb:76:77:53:
62:23:7e:08:9e:4a:36:cd:64:47:dc:42:53:9f:31:c3:d3:b5:
73:9b:dd:c1:83:e4:29:88:3c:f4:a7:af:34:3c:40:0a:09:d6:
30:f4:88:f8:4d:00:5a:19:a1:fb:f7:c7:99:cf:f0:69:2f:17:
e4:1d:c1:7e:d8:2e:81:a3:58:84:f9:dc:82:e4:44:1a:c0:d5:
e9:d5:30:2b:eb:59:1f:7c:d0:6d:17:96:a5:4a:35:00:2e:7d:
ff:96:59:d2:1b:88:60:e1:af:1d:47:63:d0:94:3f:ef:f1:7b:
91:2a:fc:77:55:5b:56:2e:30:17:53:1a:06:0c:1e:9e:07:fb:
17:12:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:10 2026 by rpki-client