Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/E9zIcVG4iOAyN_L3QxZxya0bsDQ.roa
File: E9zIcVG4iOAyN_L3QxZxya0bsDQ.roa (raw, json)
Hash identifier: ASRFUr9fG4+ap7v+EXxLFCWmWUqmNMKNagTjkvDszWs=
Subject key identifier: 13:DC:C8:71:51:B8:88:E0:32:37:F2:F7:43:16:71:C9:AD:1B:B0:34
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A0EEA0A1CE30A3213BAE502CA8E7285005
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/E9zIcVG4iOAyN_L3QxZxya0bsDQ.roa
Signing time: Tue 29 Sep 2026 19:24:59 +0000
ROA not before: Tue 29 Sep 2026 19:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.241.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
138.16.128.0/24 maxlen: 24
138.16.129.0/24 maxlen: 24
138.16.130.0/24 maxlen: 24
185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Oct 2026 09:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:a0:a1:ce:30:a3:21:3b:ae:50:2c:a8:e7:28:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 29 19:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13dcc87151b888e03237f2f7431671c9ad1bb034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:ec:50:b0:d5:66:fe:a1:c5:ba:de:8b:f3:
8a:cb:24:50:9c:2a:4a:b3:2e:9d:dd:9e:ac:a4:be:
84:63:0d:70:ca:fd:29:19:08:11:01:92:be:01:89:
0e:59:af:51:55:5e:4b:ce:14:ee:25:ad:5e:0f:d4:
32:de:44:68:64:08:69:99:d1:b7:ce:be:dc:50:ba:
8b:00:c7:cf:a1:75:1b:0d:f1:dd:2c:87:a2:55:6f:
74:59:93:eb:7c:37:4d:b2:24:e1:45:16:f5:99:df:
0d:cb:ec:83:49:0f:d9:88:e0:82:3f:c9:22:e1:74:
a8:de:d7:73:ac:e1:91:af:94:15:a5:b6:63:b1:18:
48:22:04:3a:d5:fb:4f:02:4d:95:9c:67:23:e9:90:
2d:2e:44:64:c6:26:fc:fc:6b:51:74:c3:29:31:84:
4b:8a:0d:43:2d:8d:19:e6:bb:ee:bd:6e:e3:9c:ea:
71:d4:be:1b:6a:93:cd:78:af:09:2e:b1:97:39:4c:
54:8d:c1:c9:7e:4a:30:e3:ba:04:94:a7:60:c5:76:
79:50:d0:78:22:95:7e:0a:17:72:ec:4c:52:b7:dc:
bc:83:8e:62:22:28:f4:7f:07:4e:e3:8e:ef:ef:29:
0d:83:48:b9:19:61:91:4a:45:6e:59:b6:6c:08:ab:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:C8:71:51:B8:88:E0:32:37:F2:F7:43:16:71:C9:AD:1B:B0:34
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/E9zIcVG4iOAyN_L3QxZxya0bsDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/22
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
138.16.128.0-138.16.130.255
185.42.24.0/24
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
05:67:35:d1:fe:0c:c7:53:ae:fc:03:d4:7a:85:56:83:35:11:
47:5d:9c:40:36:5a:6c:98:e9:70:f0:79:6a:ea:5c:07:4e:64:
e9:24:95:89:73:ef:6a:72:19:47:52:df:6d:96:b9:56:6d:3f:
ff:3d:1b:c6:6c:ff:74:e4:92:21:de:e7:cb:57:d3:c9:e8:e7:
55:c0:38:5e:a0:2f:6f:97:3c:38:3b:1e:e0:e6:74:8d:91:40:
bb:3c:6f:3a:50:a6:13:2f:00:41:d7:ab:50:c6:59:6f:74:15:
e5:a7:d3:b8:3d:f4:39:ca:b8:2b:63:fc:0b:cb:94:9d:20:64:
c7:b0:a5:68:5f:ad:29:33:fc:8a:de:72:67:d6:d4:7f:0c:a8:
10:2b:bd:96:99:03:f4:3d:22:10:7d:03:af:76:5f:59:dd:80:
80:0a:4f:49:75:45:27:7a:f6:31:46:4e:6d:a9:66:35:38:a2:
31:d0:13:49:4d:10:84:9e:db:07:42:10:22:2a:b5:c5:51:4b:
21:33:e1:5a:26:13:91:8b:1f:1e:3e:c2:78:6b:b7:4c:e0:8e:
df:8f:6a:af:46:af:ca:f2:1f:9b:8d:a4:fc:ae:f2:8a:5f:f1:
60:a7:d4:bd:35:ea:26:82:0e:e0:a6:9e:ba:9b:e8:fb:6a:15:
39:64:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:18:27 2026 by rpki-client