Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/B210kWZHWoFPvx0mEyQm6L2f-zY.roa
File: B210kWZHWoFPvx0mEyQm6L2f-zY.roa (raw, json)
Hash identifier: TbcsmMYBNKtEBiO45d+OTrVy1a0OPk2Pttw3V/I0E8g=
Subject key identifier: 07:6D:74:91:66:47:5A:81:4F:BF:1D:26:13:24:26:E8:BD:9F:FB:36
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A116FAA124A3D656905253ACB47346F137
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/B210kWZHWoFPvx0mEyQm6L2f-zY.roa
Signing time: Wed 07 Oct 2026 15:28:06 +0000
ROA not before: Wed 07 Oct 2026 15:28:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.253.130.0/24 maxlen: 24
61.14.226.0/24 maxlen: 24
85.8.150.0/24 maxlen: 24
91.132.86.0/24 maxlen: 24
103.207.160.0/24 maxlen: 24
185.145.47.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.213.16.0/24 maxlen: 24
185.235.121.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
185.238.115.0/24 maxlen: 24
193.31.113.0/24 maxlen: 24
193.31.114.0/24 maxlen: 24
193.176.117.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
195.216.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Oct 2026 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:fa:a1:24:a3:d6:56:90:52:53:ac:b4:73:46:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 7 15:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=076d749166475a814fbf1d26132426e8bd9ffb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:1d:ad:e7:03:0b:e6:8b:8d:42:10:c5:df:
5a:0f:f3:19:6c:ee:c7:ee:33:cc:db:aa:8b:cb:3c:
19:e8:8c:b4:71:d9:d2:ae:0b:ae:34:b5:04:4c:d3:
61:54:77:7e:c5:2d:da:a2:de:7e:04:11:77:e7:27:
58:87:d8:b7:64:e8:9d:1c:1c:78:63:19:21:f7:80:
2a:81:5c:bd:7e:1e:33:98:01:c9:69:e7:7e:46:7d:
b7:8f:f1:8e:07:2d:52:a3:4b:98:f5:3c:da:60:fa:
8e:b8:6a:14:4b:8b:f3:48:df:cd:46:36:1a:97:4f:
1a:89:fc:f3:76:e5:67:59:64:58:28:5a:3e:e5:7f:
74:a5:bd:2f:d7:ae:2d:e9:f2:66:ce:66:d0:3b:2d:
b8:6a:da:aa:b7:e0:44:b4:13:eb:64:c4:ce:a9:21:
f2:1b:e6:34:a9:9b:fc:a2:2f:d1:c3:77:7e:c6:5b:
b1:3d:30:80:8c:ee:53:32:2b:5e:66:f4:ed:bd:88:
93:96:d8:d3:ab:12:89:9d:18:81:a0:d0:83:2b:c5:
9a:b2:4d:55:44:66:dd:20:2b:8d:62:9d:6f:76:ca:
f3:b8:f9:66:0b:63:79:05:fd:c3:34:e1:a1:b4:c8:
e4:fd:8c:62:33:07:88:4a:83:28:26:1e:3c:f1:45:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:74:91:66:47:5A:81:4F:BF:1D:26:13:24:26:E8:BD:9F:FB:36
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/B210kWZHWoFPvx0mEyQm6L2f-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.130.0/24
61.14.226.0/24
85.8.150.0/24
91.132.86.0/24
103.207.160.0/24
185.145.47.0/24
185.196.26.0/24
185.213.16.0/24
185.235.121.0/24
185.235.123.0/24
185.238.115.0/24
193.31.113.0-193.31.114.255
193.176.117.0/24
194.50.194.0/24
195.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2a:30:bc:7f:32:88:8c:70:0d:c0:37:c9:d8:64:7f:9f:fd:
4b:e4:e8:81:5a:ff:70:b9:f2:ec:f6:a0:b6:fb:6e:fe:d2:2e:
6e:f0:e2:e6:d4:92:5d:11:74:11:fe:1f:6b:35:b9:8e:d7:69:
02:7f:7b:50:4a:fc:db:a6:64:d8:da:d6:58:98:ef:35:99:1d:
2b:80:0f:ad:11:5d:f1:f1:a4:35:da:df:0c:6f:33:db:bf:af:
3a:27:8d:e8:1a:85:c9:05:e1:9d:6c:12:5f:83:9b:ab:7d:11:
75:c6:3d:b0:65:46:b7:58:48:a7:82:a3:5c:f2:f4:53:a2:5c:
e5:71:1e:4b:fc:2f:84:64:1b:ba:33:d2:52:03:c2:51:17:e8:
19:1f:71:b0:2d:44:9e:fb:20:17:bc:4b:3a:e6:aa:b2:a2:e8:
8b:0d:70:25:69:da:b6:bf:ee:24:a6:a4:69:44:e7:ab:be:48:
d0:66:72:bb:2a:72:5e:d6:cd:7e:93:e8:99:ce:25:f7:77:ae:
bc:a9:31:64:1d:78:9a:2b:d4:50:d1:eb:19:f6:2e:17:ad:73:
f7:27:c8:31:eb:17:2e:4b:ac:ee:86:65:11:63:37:fc:21:a4:
0f:6d:3d:de:e4:4c:5f:66:1a:36:33:55:9c:f1:0a:13:21:66:
9c:a2:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:54:37 2026 by rpki-client