Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atl6s66Mp1c5tNpmS7-2U0vWG7s.roa
File: atl6s66Mp1c5tNpmS7-2U0vWG7s.roa (raw, json)
Hash identifier: JzMTzB7AegMWsR+pTb2HPYT3gqg58si7bM0xhCN1ks8=
Subject key identifier: 6A:D9:7A:B3:AE:8C:A7:57:39:B4:DA:66:4B:BF:B6:53:4B:D6:1B:BB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D2C26B096BD321DA05041F83A1E60351
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atl6s66Mp1c5tNpmS7-2U0vWG7s.roa
Signing time: Thu 24 Sep 2026 09:32:31 +0000
ROA not before: Thu 24 Sep 2026 09:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.109.151.0/24 maxlen: 24
87.82.62.0/24 maxlen: 24
87.83.47.0/24 maxlen: 24
87.83.115.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
212.134.16.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.99.0/24 maxlen: 24
212.134.110.0/24 maxlen: 24
212.134.120.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/24 maxlen: 24
212.134.143.0/24 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.185.0/24 maxlen: 24
212.134.202.0/24 maxlen: 24
212.134.219.0/24 maxlen: 24
212.134.233.0/24 maxlen: 24
212.134.237.0/24 maxlen: 24
212.134.244.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.251.0/24 maxlen: 24
212.135.140.0/24 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.150.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:c2:6b:09:6b:d3:21:da:05:04:1f:83:a1:e6:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 09:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad97ab3ae8ca75739b4da664bbfb6534bd61bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:23:7a:ba:f1:10:ec:71:0b:41:52:a2:44:
cc:57:ce:18:1f:08:1a:a6:da:29:49:89:e0:f7:fc:
c9:27:53:38:45:3c:d4:3c:d0:8b:98:86:1e:57:98:
c4:7a:02:29:23:ca:31:35:5f:09:de:c1:6e:eb:4b:
ce:1c:11:92:ae:bf:3a:47:d9:e4:e9:29:4f:07:b3:
02:1d:43:05:86:e9:b8:24:45:1f:d2:79:e6:a3:e5:
30:36:e1:24:3f:a3:0c:f1:71:2f:ae:22:1d:29:97:
69:a6:c3:fe:c6:34:5f:33:71:5b:91:55:61:4b:de:
a9:fb:d7:ca:fe:c5:cb:8a:8e:23:ca:42:aa:9b:dc:
95:db:d5:8f:9a:eb:2a:a3:fa:26:ca:41:e6:79:5c:
e9:f0:df:c2:19:e9:52:1c:5d:55:6e:bf:16:fc:37:
9a:8f:4d:93:c7:b2:3a:89:aa:4b:be:17:91:3c:ec:
9e:ea:67:52:17:53:94:65:fa:65:bf:f2:5a:d1:71:
21:a9:cd:db:0c:8a:18:7a:20:ca:3d:5d:5a:fc:35:
2d:8b:4c:78:20:6b:da:47:0a:a4:75:18:98:11:83:
c0:81:ef:e3:16:d3:ca:85:f4:d0:e5:5c:40:db:ab:
ce:f4:8f:14:f7:38:d0:54:4d:de:36:ed:c1:0b:70:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:7A:B3:AE:8C:A7:57:39:B4:DA:66:4B:BF:B6:53:4B:D6:1B:BB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atl6s66Mp1c5tNpmS7-2U0vWG7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.82.62.0/24
87.83.47.0/24
87.83.115.0/24
87.84.64.0/24
212.134.16.0/24
212.134.18.0/23
212.134.22.0/24
212.134.24.0/24
212.134.58.0/23
212.134.80.0/24
212.134.83.0/24
212.134.99.0/24
212.134.110.0/24
212.134.120.0/24
212.134.134.0/24
212.134.136.0/24
212.134.143.0/24
212.134.160.0/24
212.134.171.0/24
212.134.175.0-212.134.176.255
212.134.185.0/24
212.134.202.0/24
212.134.219.0/24
212.134.233.0/24
212.134.237.0/24
212.134.244.0/24
212.134.246.0/24
212.134.251.0/24
212.135.140.0/23
212.135.150.0/24
212.135.168.0/24
212.135.171.0/24
212.135.242.0/24
212.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:43:8e:50:cb:aa:00:ea:fd:66:8c:fe:d1:b8:92:99:5f:c2:
f7:b3:29:16:e7:5f:57:e4:aa:84:f0:d7:91:24:a2:59:f6:2b:
ec:79:0f:b2:6b:0d:c4:7d:b9:79:cf:0e:e0:cc:9a:96:ff:39:
d8:15:24:4e:88:a4:0e:b8:6a:f4:9b:f1:3c:47:d8:a9:86:ed:
44:62:93:d4:0b:ba:97:ce:2d:e2:0a:53:9b:10:e9:4a:fd:19:
43:29:da:eb:24:fb:a3:ae:13:e4:3a:22:82:54:0f:9e:2f:12:
d4:71:25:f9:a7:35:75:14:d8:33:12:66:ad:ef:45:40:e6:fb:
dc:cd:d0:0d:e2:0c:a5:64:c0:a9:94:94:ab:62:3a:a3:c8:60:
32:31:ae:2c:8d:20:4b:a0:32:62:4a:fc:36:cf:82:2c:c2:0b:
93:14:76:d9:3b:b0:46:92:1d:1b:e8:d1:8f:ef:83:c7:ce:65:
de:80:0e:33:95:c8:34:6e:76:35:92:75:de:8d:2d:f4:73:67:
e0:a3:d2:d5:f7:e8:74:22:0b:1a:d5:19:3d:d4:87:b3:2e:34:
4f:5e:41:47:41:51:65:d3:41:3a:db:fa:43:e4:77:35:1e:6a:
73:e1:60:2d:c7:1b:f9:0a:9b:a0:63:70:53:67:b9:c6:b7:2c:
55:7e:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:29:15 2026 by rpki-client