Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/D25czj4gvMT7-S-nMTqeDw3BpGI.roa
File: D25czj4gvMT7-S-nMTqeDw3BpGI.roa (raw, json)
Hash identifier: VLb+O90m8H5Ly/Jy0sdd3bf2Mh14GfhF1cNPFSwkTEc=
Subject key identifier: 0F:6E:5C:CE:3E:20:BC:C4:FB:F9:2F:A7:31:3A:9E:0F:0D:C1:A4:62
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A07DF0FDB881B40321C4EF1C6395FFECE8
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/D25czj4gvMT7-S-nMTqeDw3BpGI.roa
Signing time: Mon 07 Sep 2026 22:15:40 +0000
ROA not before: Mon 07 Sep 2026 22:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215353
IP address blocks: 201.4.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Oct 2026 21:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:f0:fd:b8:81:b4:03:21:c4:ef:1c:63:95:ff:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 7 22:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f6e5cce3e20bcc4fbf92fa7313a9e0f0dc1a462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:ab:38:4a:85:cc:4d:55:d7:53:bb:b6:ce:
50:7f:57:3d:6e:26:34:af:1e:bd:63:86:20:e8:3b:
fb:b5:3b:e0:76:03:84:0b:af:31:7a:a4:5f:17:dd:
ab:4d:6c:76:3b:eb:01:a4:d1:21:be:d4:49:7f:bf:
ac:e1:dc:02:73:32:aa:a9:87:1a:99:4c:c5:39:6d:
97:1d:81:0e:ae:56:10:56:d3:31:94:0f:3b:db:96:
e1:cc:94:63:b2:92:ba:49:1e:dc:44:ff:3f:62:37:
1e:cb:96:df:f3:f0:91:12:63:f5:4b:c2:0a:54:9d:
50:f5:20:de:c8:3e:52:d2:9b:19:3f:cb:73:38:2f:
ee:b4:17:6a:d0:11:11:f6:14:d1:8f:11:6e:61:8e:
ba:36:89:c6:91:33:64:83:7d:7f:9a:3f:40:39:60:
58:c7:cc:78:23:fb:0f:48:aa:35:f5:8c:14:ab:ce:
3a:6a:2b:01:b9:36:16:77:b1:b8:96:8f:5c:7e:5c:
2e:be:da:f6:27:fd:aa:57:db:70:62:cf:db:ea:1e:
d4:25:3b:35:fc:0c:6f:d0:1e:a8:58:ac:c0:81:55:
21:70:cc:4a:4a:04:f4:ca:21:1f:69:b3:14:f0:b4:
60:56:ad:d6:d8:24:21:07:4f:a8:ca:92:67:63:3b:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:5C:CE:3E:20:BC:C4:FB:F9:2F:A7:31:3A:9E:0F:0D:C1:A4:62
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/D25czj4gvMT7-S-nMTqeDw3BpGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e3:25:b5:0d:85:9f:a9:af:b3:5b:2f:42:48:77:17:ef:a9:
02:77:09:68:10:13:d1:a7:9e:ed:40:74:e9:f4:ad:25:e7:23:
51:17:e8:0b:d3:c6:7d:16:41:b1:e4:20:df:22:1a:b5:26:59:
52:23:3c:14:57:31:fc:d6:fc:87:db:33:d4:2a:f0:97:89:f9:
cd:7f:75:5d:a3:19:e3:e5:62:65:d2:bb:01:55:63:7b:a7:91:
f7:47:c2:10:c1:cd:2b:44:38:ff:1a:cb:06:a3:bd:9e:db:e3:
62:0e:9f:52:fd:a6:76:13:a9:9d:8b:86:0b:cf:17:48:c2:b5:
ef:a6:40:2f:ca:51:17:9e:50:c4:f1:9d:37:d4:99:ca:5d:5b:
96:9e:27:aa:7e:07:30:47:c3:51:f4:ac:46:0e:9f:59:09:dd:
19:72:8a:ad:95:70:70:f6:07:7b:e9:fb:4f:90:dd:e9:34:a6:
8f:53:87:67:d8:8b:30:27:4e:47:6f:67:46:ec:8d:dc:85:bc:
20:e7:6e:9a:0b:15:49:d7:0d:2e:91:1e:91:f8:0b:7f:49:12:
09:ec:ba:05:6d:33:ee:b2:3b:9c:d7:7c:7e:ed:d0:7b:9a:59:
0a:84:92:3d:04:4f:6e:1a:d8:9a:8f:6b:f4:8a:a6:61:76:32:
92:55:e2:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB98P24gbQDIcTvHGOV/+zoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwOTA3MjIxNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjZlNWNjZTNlMjBiY2M0ZmJmOTJmYTczMTNhOWUwZjBkYzFhNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzterOEqFzE1V11O7ts5Qf1c9biY0
rx69Y4Yg6Dv7tTvgdgOEC68xeqRfF92rTWx2O+sBpNEhvtRJf7+s4dwCczKqqYca
mUzFOW2XHYEOrlYQVtMxlA8725bhzJRjspK6SR7cRP8/Yjcey5bf8/CREmP1S8IK
VJ1Q9SDeyD5S0psZP8tzOC/utBdq0BER9hTRjxFuYY66NonGkTNkg31/mj9AOWBY
x8x4I/sPSKo19YwUq846aisBuTYWd7G4lo9cflwuvtr2J/2qV9twYs/b6h7UJTs1
/Axv0B6oWKzAgVUhcMxKSgT0yiEfabMU8LRgVq3W2CQhB0+oypJnYztlwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9uXM4+ILzE+/kvpzE6ng8NwaRiMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvRDI1Y3pqNGd2TVQ3LVMtbk1UcWVEdzNCcEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQRCMA0G
CSqGSIb3DQEBCwUAA4IBAQAK4yW1DYWfqa+zWy9CSHcX76kCdwloEBPRp57tQHTp
9K0l5yNRF+gL08Z9FkGx5CDfIhq1JllSIzwUVzH81vyH2zPUKvCXifnNf3Vdoxnj
5WJl0rsBVWN7p5H3R8IQwc0rRDj/GssGo72e2+NiDp9S/aZ2E6mdi4YLzxdIwrXv
pkAvylEXnlDE8Z031JnKXVuWnieqfgcwR8NR9KxGDp9ZCd0ZcoqtlXBw9gd76ftP
kN3pNKaPU4dn2IswJ05Hb2dG7I3chbwg526aCxVJ1w0ukR6R+At/SRIJ7LoFbTPu
sjuc13x+7dB7mlkKhJI9BE9uGtiaj2v0iqZhdjKSVeKE
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:58:17 2026 by rpki-client