Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y6OTO7LeXZYOK7JuPXD0qJieHQc.roa
File: Y6OTO7LeXZYOK7JuPXD0qJieHQc.roa (raw, json)
Hash identifier: zQoRCgfK/v41XpflWZ6GaghXZGQXaU91ZbU4gjLC5w4=
Subject key identifier: 63:A3:93:3B:B2:DE:5D:96:0E:2B:B2:6E:3D:70:F4:A8:98:9E:1D:07
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CD2FAB593DCB1FA17F7E91F2C3726851
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y6OTO7LeXZYOK7JuPXD0qJieHQc.roa
Signing time: Wed 23 Sep 2026 07:34:08 +0000
ROA not before: Wed 23 Sep 2026 07:34:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.189.0/24 maxlen: 24
82.109.192.0/24 maxlen: 24
82.109.193.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.222.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.132.0/24 maxlen: 24
212.134.144.0/24 maxlen: 24
212.134.145.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.195.0/24 maxlen: 24
212.134.197.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.255.0/24 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.142.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 09:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:2f:ab:59:3d:cb:1f:a1:7f:7e:91:f2:c3:72:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 07:34:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63a3933bb2de5d960e2bb26e3d70f4a8989e1d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:4e:bb:a6:df:98:0f:6e:60:51:66:3d:98:
25:7d:95:25:34:00:1c:4c:f6:b6:44:c1:3b:3b:73:
51:77:eb:8a:a8:a9:5f:20:a3:5c:ef:74:65:e1:d3:
e6:f6:46:a2:6d:37:87:a4:be:42:0e:b8:a9:66:a9:
69:ae:d2:d8:88:c4:ba:4a:b1:6f:3a:eb:bc:71:fe:
9f:75:40:89:45:04:82:a2:9e:b7:da:dc:0e:71:04:
04:c5:a8:d2:47:19:5d:b8:e2:8f:5a:14:18:88:a0:
26:26:52:8f:2f:89:aa:d5:6f:74:fd:a9:37:ea:b5:
33:36:1f:0a:5c:ff:d9:0d:60:f0:e2:ef:b2:db:8f:
dd:d0:15:f0:f6:48:14:96:47:17:8f:a7:1e:0b:71:
b6:9c:f7:ed:8d:1e:be:b6:1e:5c:96:be:7a:10:b7:
a8:a3:b0:ac:2e:65:51:26:9f:18:1b:35:58:a3:ec:
0c:5e:6c:ad:40:f7:98:97:ca:0e:db:ad:1b:b0:bf:
90:69:24:45:e1:e2:89:95:be:fb:7c:d0:ba:bb:43:
7f:26:d6:be:18:1f:c2:6a:14:30:ea:5d:bc:c0:fd:
15:22:31:ed:e6:71:67:e1:88:48:59:da:65:f6:c3:
24:b4:19:6e:9e:d5:ae:01:c7:40:bb:65:6c:8b:64:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:93:3B:B2:DE:5D:96:0E:2B:B2:6E:3D:70:F4:A8:98:9E:1D:07
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y6OTO7LeXZYOK7JuPXD0qJieHQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.189.0/24
82.109.192.0/23
87.84.79.0/24
87.84.128.0/24
87.84.132.0/24
87.84.154.0/24
87.84.158.0/24
87.84.222.0/24
87.86.174.0/24
212.134.45.0/24
212.134.55.0/24
212.134.129.0/24
212.134.132.0/24
212.134.144.0/23
212.134.179.0/24
212.134.195.0/24
212.134.197.0-212.134.198.255
212.134.245.0/24
212.134.255.0/24
212.135.24.0/24
212.135.26.0/24
212.135.142.0/24
212.135.144.0/24
212.135.149.0/24
212.135.241.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:a1:58:de:3d:71:f5:17:97:15:32:e4:a6:ea:5c:f9:0e:
0c:bf:74:54:a7:6e:22:0d:fd:f4:15:80:40:cd:ef:5a:36:d2:
f4:09:23:d0:0e:6e:30:f0:d4:20:1e:e2:27:fa:fe:06:84:66:
6f:d3:16:fc:7a:b9:43:bb:da:53:b8:95:00:e3:b0:d5:95:29:
64:c5:16:64:d4:14:f8:02:89:d2:66:9b:b9:3d:77:d7:38:6b:
59:49:a5:42:a8:ff:27:3e:2d:2c:8a:e6:81:79:b0:c1:e3:00:
07:a5:f8:4b:e6:50:7f:a6:18:01:e2:6e:d7:f2:bc:4f:41:37:
73:1e:7e:82:55:2f:2b:67:29:a4:1b:43:95:f3:03:b0:bf:22:
ef:2a:9a:c5:0f:1d:56:ba:35:8b:ab:f5:cd:06:32:40:a8:c3:
9a:04:b8:04:6c:b7:7e:22:90:38:99:0d:36:3a:76:36:85:e7:
36:54:31:fa:36:40:24:9b:cb:13:d4:12:f4:21:f4:11:be:62:
ee:65:e9:fa:e9:8d:78:4b:55:21:f8:f6:32:89:a0:11:b9:81:
5a:cb:f4:9d:29:84:0e:4d:2b:bc:96:ba:2b:29:4b:6f:cd:30:
8b:d8:3c:ca:b6:09:e5:c5:33:f1:bc:00:f1:fe:9b:1c:4e:f4:
34:f3:e9:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:08 2026 by rpki-client