Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zCNOHkL3oxqHjBVtzPET6dGl1p0.roa
File: zCNOHkL3oxqHjBVtzPET6dGl1p0.roa (raw, json)
Hash identifier: JC+yocH/68pe9iQpCZ4JY4u9q+iqWpTd7Bdan5/UKf8=
Subject key identifier: CC:23:4E:1E:42:F7:A3:1A:87:8C:15:6D:CC:F1:13:E9:D1:A5:D6:9D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CD63DBA063FF6DA22663923F3EC18D39
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zCNOHkL3oxqHjBVtzPET6dGl1p0.roa
Signing time: Wed 23 Sep 2026 08:31:08 +0000
ROA not before: Wed 23 Sep 2026 08:31:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 78.154.114.0/24 maxlen: 24
78.154.127.0/24 maxlen: 24
82.108.40.0/23 maxlen: 24
82.108.98.0/24 maxlen: 24
82.108.129.0/24 maxlen: 24
82.108.135.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.108.208.0/24 maxlen: 24
82.108.209.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.214.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.108.216.0/22 maxlen: 24
82.109.153.0/24 maxlen: 24
82.109.154.0/24 maxlen: 24
82.109.155.0/24 maxlen: 24
82.109.156.0/24 maxlen: 24
82.109.180.0/22 maxlen: 24
82.109.185.0/24 maxlen: 24
82.109.196.0/24 maxlen: 24
82.109.199.0/24 maxlen: 24
82.109.236.0/22 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.53.0/24 maxlen: 24
82.110.228.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.246.0/24 maxlen: 24
87.82.252.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.20.0/24 maxlen: 24
87.83.21.0/24 maxlen: 24
87.83.22.0/24 maxlen: 24
87.83.23.0/24 maxlen: 24
87.83.67.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.113.0/24 maxlen: 24
87.83.114.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.164.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.216.0/23 maxlen: 24
87.83.219.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
87.84.57.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.62.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.209.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.211.0/24 maxlen: 24
87.84.212.0/24 maxlen: 24
87.84.214.0/24 maxlen: 24
87.84.215.0/24 maxlen: 24
87.85.224.0/24 maxlen: 24
87.85.226.0/24 maxlen: 24
87.85.248.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.93.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
194.242.157.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
217.79.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 08:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:63:db:a0:63:ff:6d:a2:26:63:92:3f:3e:c1:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 08:31:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc234e1e42f7a31a878c156dccf113e9d1a5d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:0b:48:d4:ac:bb:d2:40:17:9a:86:d2:71:
0d:de:dc:37:17:26:83:75:c6:a5:db:73:9b:b3:45:
b7:53:30:80:ec:e2:d2:cd:b4:46:fc:57:79:f0:ee:
72:22:9a:12:fa:40:67:71:f9:e6:17:e8:06:dd:00:
60:e8:36:74:d8:ca:9a:02:6d:9e:a5:65:45:97:27:
4a:e3:2e:3a:70:56:10:64:0b:f4:3b:be:f1:d5:25:
22:21:bf:0c:27:c6:3b:3e:54:94:60:a6:53:7b:7e:
a6:e6:e2:27:f1:90:10:2b:87:18:32:f1:36:ba:35:
47:ee:6d:05:ac:a0:9d:55:d2:d1:75:0e:cf:a4:f0:
7c:93:f7:88:92:12:d1:b8:00:d7:c2:c1:08:f6:8b:
a1:fc:87:24:11:76:79:02:64:c4:4b:7a:47:e2:06:
60:71:04:3b:72:91:b5:13:fc:db:f1:82:10:9f:69:
7d:eb:b2:1e:06:ab:e3:b3:5c:49:68:46:4d:ce:8d:
27:fa:ec:f9:63:77:94:35:8e:c0:d1:ef:4b:4c:7c:
35:62:73:ca:55:81:26:c2:f8:c5:45:f7:19:ef:4a:
84:48:7f:1c:67:74:0d:fc:aa:2d:0f:ef:bd:cc:57:
96:83:97:08:32:2a:b4:64:0d:45:6d:63:4d:0c:c5:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:4E:1E:42:F7:A3:1A:87:8C:15:6D:CC:F1:13:E9:D1:A5:D6:9D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zCNOHkL3oxqHjBVtzPET6dGl1p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.114.0/24
78.154.127.0/24
82.108.40.0/23
82.108.98.0/24
82.108.129.0/24
82.108.135.0/24
82.108.202.0/24
82.108.208.0/23
82.108.213.0-82.108.219.255
82.109.153.0-82.109.156.255
82.109.180.0/22
82.109.185.0/24
82.109.196.0/24
82.109.199.0/24
82.109.236.0/22
82.110.50.0/24
82.110.53.0/24
82.110.228.0/24
87.82.194.0/24
87.82.232.0/24
87.82.246.0/24
87.82.252.0/24
87.83.15.0/24
87.83.20.0/22
87.83.67.0/24
87.83.71.0/24
87.83.113.0-87.83.114.255
87.83.125.0/24
87.83.161.0/24
87.83.163.0-87.83.164.255
87.83.204.0/24
87.83.216.0/23
87.83.219.0/24
87.83.222.0/24
87.84.56.0-87.84.58.255
87.84.61.0-87.84.63.255
87.84.203.0/24
87.84.209.0-87.84.212.255
87.84.214.0/23
87.85.224.0/24
87.85.226.0/24
87.85.248.0/24
87.85.250.0/24
87.86.93.0-87.86.94.255
109.204.104.0/21
194.242.157.0/24
212.134.38.0/24
212.134.116.0/22
212.134.158.0/24
212.135.159.0/24
212.135.161.0/24
212.135.164.0/24
212.212.25.0/24
217.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:3c:80:99:51:8b:e5:a8:7f:45:c6:de:f6:51:59:47:22:
77:c1:c0:42:44:aa:7b:0d:cc:a8:db:33:a1:c2:8f:62:4e:da:
64:5b:d1:78:be:a3:c5:6b:ab:36:98:92:cc:31:db:f0:f5:45:
d6:5f:6b:11:c6:34:aa:95:4c:c0:00:51:b8:bc:06:df:b3:38:
26:9f:72:8a:8e:e2:10:49:31:e3:d7:0e:04:30:95:46:ac:a2:
09:2c:a0:7f:11:a3:6e:c1:87:90:de:18:f4:62:b3:19:0d:2d:
13:cd:3c:2d:8f:8b:5a:65:62:26:03:70:13:80:76:b1:f7:6b:
f5:29:51:42:69:b4:26:0d:12:3e:4e:48:f4:e2:1f:32:73:2a:
c9:e0:18:8a:1b:1f:37:67:07:3f:21:ae:28:ec:23:41:d2:5b:
7d:c4:d9:79:c4:f3:b3:7c:e9:33:b8:e1:30:4f:eb:9c:d7:2b:
a5:8b:67:79:c2:ed:e5:bf:80:58:f9:a8:fe:38:cc:c9:12:ae:
fc:cd:66:c4:db:68:5f:c2:51:52:d2:c1:ba:a2:dc:bc:1c:bc:
5d:c5:dc:91:f3:33:f1:c9:cb:65:11:93:1c:cf:60:b7:12:40:
36:7d:13:78:e4:de:0e:1a:2e:e6:d3:21:e9:63:16:eb:49:e6:
fc:cb:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:16 2026 by rpki-client