Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P6SvlSmm2gQRzH4v3Ng7knTHteM.roa
File: P6SvlSmm2gQRzH4v3Ng7knTHteM.roa (raw, json)
Hash identifier: YEQpPB8YWaKYZLSe6iACW4Oiv0a0iarzYaxS7SemiSY=
Subject key identifier: 3F:A4:AF:95:29:A6:DA:04:11:CC:7E:2F:DC:D8:3B:92:74:C7:B5:E3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CA0DA96160259AD18D3FBC2A7B5D7B49
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P6SvlSmm2gQRzH4v3Ng7knTHteM.roa
Signing time: Tue 22 Sep 2026 16:58:07 +0000
ROA not before: Tue 22 Sep 2026 16:58:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.189.0/24 maxlen: 24
82.109.192.0/24 maxlen: 24
82.109.193.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.222.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.132.0/24 maxlen: 24
212.134.144.0/24 maxlen: 24
212.134.145.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.186.0/24 maxlen: 24
212.134.195.0/24 maxlen: 24
212.134.197.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.255.0/24 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.67.0/24 maxlen: 24
212.135.142.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 20:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0d:a9:61:60:25:9a:d1:8d:3f:bc:2a:7b:5d:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 16:58:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa4af9529a6da0411cc7e2fdcd83b9274c7b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:f3:ae:9c:10:ac:d0:0e:53:98:a2:d4:86:
91:e0:cd:99:b5:73:df:32:ff:cf:52:13:9a:01:8c:
b8:3f:89:58:6a:b7:51:22:fc:c0:09:4c:72:13:e0:
bf:c7:ad:de:dd:ea:f5:15:57:bc:1c:06:7c:76:ba:
bf:18:77:64:a0:09:66:65:c9:2b:d5:ab:7e:8d:9c:
0c:ba:93:12:9f:2d:00:02:8e:21:aa:ba:3d:6a:7e:
3c:aa:93:2e:0a:9c:1c:b3:8d:8c:4b:c4:fb:61:e4:
db:82:c3:2e:e3:ed:23:fb:6a:75:01:1b:c3:b1:e0:
5f:0f:96:b2:38:12:52:c9:b1:c8:4e:15:38:9a:8b:
0b:14:c2:66:44:1d:61:c1:67:6e:79:b0:4a:e5:a9:
de:1d:f7:71:0c:9e:f6:18:ac:ec:e8:aa:55:03:cd:
0a:71:0b:64:e8:b2:03:cd:69:76:ee:50:a9:eb:ee:
dd:89:bc:e8:5b:dc:1f:58:89:25:87:89:02:aa:9a:
e4:81:93:31:89:83:0f:cb:58:d7:65:03:34:2c:9f:
cb:f2:54:36:0e:60:10:cd:43:cf:dd:0e:89:2e:7a:
c1:76:a3:e7:2b:5b:57:eb:f4:dd:20:c8:59:fc:e8:
32:b8:20:48:7a:74:b1:84:4c:c2:39:82:e0:57:64:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A4:AF:95:29:A6:DA:04:11:CC:7E:2F:DC:D8:3B:92:74:C7:B5:E3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P6SvlSmm2gQRzH4v3Ng7knTHteM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.189.0/24
82.109.192.0/23
87.84.79.0/24
87.84.128.0/24
87.84.132.0/24
87.84.154.0/24
87.84.158.0/24
87.84.222.0/24
87.86.174.0/24
212.134.45.0/24
212.134.55.0/24
212.134.129.0/24
212.134.132.0/24
212.134.144.0/23
212.134.179.0/24
212.134.186.0/24
212.134.195.0/24
212.134.197.0-212.134.198.255
212.134.245.0/24
212.134.255.0/24
212.135.24.0/24
212.135.26.0/24
212.135.67.0/24
212.135.142.0/24
212.135.144.0/24
212.135.149.0/24
212.135.241.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f2:31:51:15:5a:6f:9f:78:8e:ae:16:08:8e:f0:69:aa:6f:
27:f1:33:07:60:0e:93:96:6e:8d:2d:24:a1:b5:bd:16:81:91:
a7:5e:b2:69:c2:d7:43:1c:62:e7:6f:5c:dd:d9:61:98:cf:df:
92:8b:f2:e7:06:3b:d0:ee:9f:dc:be:d2:9d:b3:58:2b:f3:c4:
4d:cc:ca:0c:2a:ba:14:21:0b:bb:76:b5:65:62:10:15:7d:f4:
f1:9a:bc:e6:53:8c:aa:c5:a9:a3:cf:26:43:ac:1a:21:5a:f2:
10:ee:ec:1a:4d:9d:25:9e:c5:3c:d8:55:d3:79:29:3e:ef:78:
12:5e:2d:61:4b:20:b4:c6:69:d8:7c:24:68:34:5a:e5:40:c9:
0a:a9:b9:91:51:6d:7c:72:18:0e:52:eb:cb:3f:05:53:80:fe:
7f:93:61:2b:ed:b7:ba:92:44:07:84:7b:b8:ad:07:97:88:ee:
b6:52:0b:ca:28:8e:8d:a8:23:56:66:47:19:fc:15:f6:c7:ea:
93:c1:de:18:a1:e9:1a:9e:bf:6a:ad:7a:e0:52:14:d5:35:81:
31:2c:2a:7d:06:bf:a8:dd:62:76:b3:47:9e:6a:8c:15:46:a8:
48:32:e4:fa:24:d7:90:6d:00:6c:b5:a7:00:cc:9b:ad:e2:d1:
e8:7b:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:51 2026 by rpki-client