Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/wdlcghHaFjBg9miwVhfBtTm1gyY.roa
File: wdlcghHaFjBg9miwVhfBtTm1gyY.roa (raw, json)
Hash identifier: 0wwcVzuglC9MXrfZM5CyEXjj8UTs1IW/BCyl3V3syoM=
Subject key identifier: C1:D9:5C:82:11:DA:16:30:60:F6:68:B0:56:17:C1:B5:39:B5:83:26
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0C95EC8AB0D6511949ACFE609A0CCEE8A
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/wdlcghHaFjBg9miwVhfBtTm1gyY.roa
Signing time: Tue 22 Sep 2026 13:47:07 +0000
ROA not before: Tue 22 Sep 2026 13:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.200.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 11:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5e:c8:ab:0d:65:11:94:9a:cf:e6:09:a0:cc:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 22 13:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1d95c8211da163060f668b05617c1b539b58326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:9d:e9:78:9e:01:ad:94:53:e4:db:6f:ea:
54:70:f2:95:dd:df:31:8c:1b:fe:59:2a:3a:3a:df:
6b:de:f2:e6:be:84:fe:a5:2a:68:ee:a5:62:ee:a1:
dd:52:1e:32:e2:f1:04:a5:72:3e:0e:56:98:0a:99:
bd:71:82:10:2d:a5:5b:0b:40:a3:05:af:c1:6e:08:
1d:15:32:c0:42:8c:33:a0:de:21:ee:25:7f:99:41:
ea:e6:c4:af:4e:48:15:ba:80:1e:4b:00:0b:37:ea:
04:5c:42:2b:eb:2e:bf:82:2e:89:77:75:6b:af:4e:
be:bc:30:24:de:75:54:2f:59:d9:92:62:45:96:48:
54:1f:80:13:7c:6b:02:9d:eb:54:08:5a:36:d1:05:
91:07:86:66:41:f3:a9:0f:1d:53:b2:4d:10:64:bd:
1f:3c:1b:39:3b:d9:83:4d:a9:9e:a0:0c:87:e8:ef:
53:8e:c6:00:5b:68:72:d8:d5:bb:a8:8e:97:dd:5d:
7a:b6:ae:2f:a3:ec:24:bc:f6:b6:a6:0f:08:0e:43:
27:be:1a:c9:58:a3:44:0a:65:c0:6c:d5:34:f1:31:
fa:21:33:d5:61:1a:c5:4c:1c:78:95:2b:52:72:43:
04:83:2a:d1:d5:c2:c5:f3:21:37:6b:cc:fb:64:4b:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:5C:82:11:DA:16:30:60:F6:68:B0:56:17:C1:B5:39:B5:83:26
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/wdlcghHaFjBg9miwVhfBtTm1gyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.144.0/21
93.119.160.0/21
93.119.200.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:55:42:bb:26:4c:b3:9e:1a:7e:85:8b:1a:57:6a:3c:89:12:
81:58:c9:d8:89:13:18:4e:ad:93:46:a4:9d:cf:42:fa:39:40:
1d:e3:67:9f:de:e3:12:2f:aa:dd:12:94:3e:50:56:8a:96:fc:
96:fa:a3:29:2c:d9:b8:8f:49:7a:16:53:0f:94:f7:e0:47:7b:
b1:fe:c9:0e:74:99:3b:19:44:b3:61:fa:73:91:a3:e4:0a:bd:
ec:03:71:cf:1e:ba:d7:0d:70:78:84:3f:4c:3e:90:6c:3b:33:
86:4f:ff:0a:9c:dd:1a:e1:a2:d3:2e:8f:e3:49:41:c1:5f:c9:
4f:b1:03:fa:f9:fb:37:73:06:4b:7a:43:6b:ff:72:d4:73:4b:
3a:3d:2a:65:bd:b2:fe:e5:6d:5e:e8:e3:d6:00:a4:33:42:32:
17:d5:3e:26:fe:1a:8a:23:07:3b:60:e5:28:e1:9f:39:d2:e5:
0c:f5:9b:b2:b1:4d:36:61:48:8b:21:1c:f1:ac:87:ad:7c:e2:
cf:d6:87:60:2a:c9:05:5e:86:02:63:55:85:ff:e2:28:bc:9d:
39:38:59:ef:b1:3e:90:87:86:fe:b3:ef:56:4d:c1:5d:00:c4:
99:9a:89:b5:5a:88:05:aa:c7:e4:e0:76:9c:f7:f6:7a:80:c4:
fb:7d:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:23 2026 by rpki-client