Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_3OT3uqlfxOCtmoD-6Y2c2QEHNA.roa
File: _3OT3uqlfxOCtmoD-6Y2c2QEHNA.roa (raw, json)
Hash identifier: ZSaJRmyPf8nRYPOHU9KNwVcXYbTqqbTrETWik/Txeg4=
Subject key identifier: FF:73:93:DE:EA:A5:7F:13:82:B6:6A:03:FB:A6:36:73:64:04:1C:D0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BF3135108A8629B6BCFD6124E7C07F85
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_3OT3uqlfxOCtmoD-6Y2c2QEHNA.roa
Signing time: Sun 20 Sep 2026 14:21:07 +0000
ROA not before: Sun 20 Sep 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 194.231.135.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.99.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 08:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:31:35:10:8a:86:29:b6:bc:fd:61:24:e7:c0:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff7393deeaa57f1382b66a03fba6367364041cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:fd:8d:b7:e0:b4:85:fb:ad:4a:08:b1:49:
4a:3e:77:09:84:7c:d2:3d:1d:bb:59:f6:ba:1b:07:
da:9f:c3:ff:bd:bf:85:f1:1c:e1:2b:eb:76:bf:24:
20:c3:6c:32:93:fe:37:14:90:7d:1a:d1:31:3c:e4:
58:81:18:3c:46:b0:e9:d0:a5:5c:72:7e:73:ed:5b:
27:77:4e:b0:c3:7d:d4:e1:8f:81:2f:d2:9b:86:85:
00:43:0d:69:b9:08:5a:a9:96:01:4a:e6:99:3c:20:
a3:4e:60:18:dc:9a:fc:db:e6:42:60:5a:cb:84:19:
9f:7d:1f:7f:0a:79:5f:6e:1a:c2:4e:9a:e9:28:be:
67:4d:71:b5:02:ed:a4:37:41:49:70:00:e3:8f:02:
f3:e6:f2:a5:a4:e6:bc:08:30:7d:a5:48:1e:37:9b:
1f:62:3e:45:02:98:6a:7b:78:4f:bd:9a:8f:94:d2:
61:99:fe:78:d9:e6:f1:5a:c3:93:51:da:60:44:0b:
b5:a1:2c:18:c3:1f:c7:27:a7:cd:78:86:b6:1d:b7:
20:8b:a5:26:0e:1e:59:82:ea:fa:dc:c8:3e:44:aa:
b0:fb:8c:8e:26:d1:71:a5:bc:8f:2e:d8:07:d6:df:
a2:7c:e9:97:f7:5a:27:d4:fd:5c:e1:e6:8b:38:66:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:93:DE:EA:A5:7F:13:82:B6:6A:03:FB:A6:36:73:64:04:1C:D0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_3OT3uqlfxOCtmoD-6Y2c2QEHNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.135.0/24
194.231.138.0/24
194.231.154.0/24
194.231.157.0/24
194.231.159.0/24
212.189.89.0/24
212.189.96.0/22
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cb:dd:10:08:ab:a8:01:b5:81:6a:1f:05:73:0f:60:0e:ac:
9c:30:b9:25:b6:4c:3b:cd:71:64:04:42:3d:76:69:25:02:68:
46:be:33:29:90:ba:72:42:f6:82:c5:02:3d:0a:2b:c8:f5:45:
d7:20:eb:9d:28:f8:1c:a0:55:3d:94:77:bc:61:35:8d:8e:1b:
7b:ee:b2:14:e1:aa:72:bb:3d:d4:b3:32:70:96:57:ee:3c:3c:
3a:10:4b:95:92:c6:50:f4:ec:c9:f7:3f:4d:c2:76:b6:20:76:
52:11:c9:19:ae:c6:62:1a:29:ce:da:75:48:12:73:88:7b:9c:
a5:a9:92:e8:51:59:62:c5:a5:75:cf:a6:1a:ef:6e:83:31:90:
3d:da:ea:50:cd:4b:88:a5:f8:01:7d:dd:58:eb:63:43:da:3a:
fd:d2:64:15:4c:79:9a:cc:32:18:7d:ac:03:8d:ea:f3:3c:60:
d6:90:89:8b:5a:62:15:3e:b0:71:4b:6d:81:0d:43:e5:09:f6:
b9:ca:6f:e9:d7:87:dc:7b:ae:43:2e:47:9d:07:a1:71:fd:cd:
6d:9f:af:da:fd:a4:1f:1d:ba:0c:df:ac:a8:df:6a:49:b6:4f:
3e:ac:9c:98:77:23:f2:de:c8:61:e0:dc:fd:67:2f:d1:06:af:
6b:5c:a5:f1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaC/MTUQioYptrz9YSTnwH+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTIwMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjczOTNkZWVhYTU3ZjEzODJiNjZhMDNmYmE2MzY3MzY0MDQxY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlT9jbfgtIX7rUoIsUlKPncJhHzS
PR27Wfa6Gwfan8P/vb+F8RzhK+t2vyQgw2wyk/43FJB9GtExPORYgRg8RrDp0KVc
cn5z7Vsnd06ww33U4Y+BL9KbhoUAQw1puQhaqZYBSuaZPCCjTmAY3Jr82+ZCYFrL
hBmffR9/CnlfbhrCTprpKL5nTXG1Au2kN0FJcADjjwLz5vKlpOa8CDB9pUgeN5sf
Yj5FAphqe3hPvZqPlNJhmf542ebxWsOTUdpgRAu1oSwYwx/HJ6fNeIa2Hbcgi6Um
Dh5Zgur63Mg+RKqw+4yOJtFxpbyPLtgH1t+ifOmX91on1P1c4eaLOGb4TwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFP9zk97qpX8TgrZqA/umNnNkBBzQMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvXzNPVDN1cWxmeE9DdG1vRC02WTJjMlFFSE5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwueHAwQA
wueKAwQAwueaAwQAwuedAwQAwuefAwQA1L1ZAwQC1L1gAwQA2QjIAwQA2QjLMA0G
CSqGSIb3DQEBCwUAA4IBAQC4y90QCKuoAbWBah8Fcw9gDqycMLkltkw7zXFkBEI9
dmklAmhGvjMpkLpyQvaCxQI9CivI9UXXIOudKPgcoFU9lHe8YTWNjht77rIU4apy
uz3UszJwllfuPDw6EEuVksZQ9OzJ9z9Nwna2IHZSEckZrsZiGinO2nVIEnOIe5yl
qZLoUVlixaV1z6Ya726DMZA92upQzUuIpfgBfd1Y62ND2jr90mQVTHmazDIYfawD
jerzPGDWkImLWmIVPrBxS22BDUPlCfa5ym/p14fce65DLkedB6Fx/c1tn6/a/aQf
HboM36yo32pJtk8+rJyYdyPy3shh4Nz9Zy/RBq9rXKXx
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:28:47 2026 by rpki-client