Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u7ib-_H5QN77y5xo9Ih8IA_enyA.roa
File: u7ib-_H5QN77y5xo9Ih8IA_enyA.roa (raw, json)
Hash identifier: NQVIxTYYXQDMFj7AVeL23CixkY415g8oBxAxGOTW8GA=
Subject key identifier: BB:B8:9B:FB:F1:F9:40:DE:FB:CB:9C:68:F4:88:7C:20:0F:DE:9F:20
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0FDD293C78457EE13A01BAEDD3E52D415
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u7ib-_H5QN77y5xo9Ih8IA_enyA.roa
Signing time: Fri 02 Oct 2026 18:13:51 +0000
ROA not before: Fri 02 Oct 2026 18:13:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:e::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:17::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
2a10:fa81:1800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 05 Oct 2026 23:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:d2:93:c7:84:57:ee:13:a0:1b:ae:dd:3e:52:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 2 18:13:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbb89bfbf1f940defbcb9c68f4887c200fde9f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:46:e0:64:cd:95:ea:27:13:20:d9:b0:db:
9a:99:bf:3c:32:1f:4b:b2:24:c6:08:90:fa:b0:30:
57:bb:b7:f9:40:df:4c:d0:f8:f2:8f:31:ef:dc:25:
27:3d:df:a0:9f:3e:8c:c4:e1:bc:49:de:6a:a7:f3:
77:c8:14:d0:fa:f6:32:67:fa:32:f6:17:32:e0:41:
df:f4:93:7a:d8:b8:91:91:8e:fa:af:c6:fe:0e:ca:
e7:49:a8:12:25:8d:31:3c:85:48:57:53:ac:a3:32:
85:a5:9d:3a:fb:89:19:85:fa:a2:f3:15:2e:d3:ff:
3c:83:54:35:33:17:9d:4b:31:ab:44:aa:8c:83:a6:
17:6d:c4:3b:a0:7f:ce:ac:8c:98:95:68:79:4a:11:
37:b8:db:82:ce:ff:bf:24:69:7c:2d:75:11:95:b7:
58:36:00:10:1f:f1:4b:01:9a:f1:88:a2:2d:c8:bd:
e4:d2:79:09:8e:5f:ac:de:e0:ec:6e:5c:1b:0a:3f:
06:02:6b:02:d9:12:aa:3f:a6:1e:26:dc:f0:38:c2:
4b:c1:f1:f9:58:6c:fb:b1:93:70:1b:3d:d8:fa:20:
d5:5e:21:11:22:0c:82:d3:86:da:ac:77:ea:76:7b:
63:72:15:1c:9f:b3:d6:a7:8f:c6:76:bb:7a:47:19:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:9B:FB:F1:F9:40:DE:FB:CB:9C:68:F4:88:7C:20:0F:DE:9F:20
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u7ib-_H5QN77y5xo9Ih8IA_enyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:e::/47
2a10:fa80:17::/48
2a10:fa80:19::/48
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
84:5d:ef:7c:6b:a9:00:f8:7b:3c:f1:62:5d:fb:67:59:c2:8e:
9e:ad:77:23:bb:07:8f:cc:f3:18:4e:a4:d6:b3:b3:cf:64:5a:
98:f5:98:cb:91:9f:b1:3c:7b:94:fa:df:6e:88:3c:7c:ce:c6:
4c:68:57:c7:06:ad:0d:2a:fa:13:f9:d2:2e:60:99:28:2a:f4:
a7:b9:9b:f5:9e:9a:bb:a4:72:9d:7f:e1:cf:02:df:42:49:3f:
05:07:5c:7a:18:c0:20:9d:08:61:26:25:bb:3e:51:dd:9b:91:
84:94:be:48:ac:dd:4b:59:61:8e:ff:88:0c:1f:e6:ad:36:d0:
29:e6:da:5b:fe:bb:a9:a9:03:0b:ed:8d:40:a5:5f:c9:48:44:
89:3f:fd:e4:31:f4:ec:18:db:48:c4:2d:e5:2a:60:8c:bf:8b:
ff:14:f7:56:e7:1e:ff:d3:79:32:97:01:f0:69:07:8b:3b:88:
b8:e2:0c:d3:b0:f6:d4:ac:7e:31:f8:4a:a8:fa:2b:c1:70:f0:
c3:1b:41:55:08:f7:14:4e:77:c0:54:44:9d:f5:2e:0e:79:13:
56:cf:2a:28:2d:cc:c7:f6:97:31:7f:c6:3c:94:36:c0:8c:c1:
96:27:fe:7c:3e:b8:6a:b7:ea:50:24:1c:7b:6d:26:24:db:cc:
a0:65:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:46 2026 by rpki-client