Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AWKEfMLkNy_cqCe1qOycQcBJvYg.roa
File: AWKEfMLkNy_cqCe1qOycQcBJvYg.roa (raw, json)
Hash identifier: 8C8k3W475hd4YR83HPJYNjvUds0SPRLHhBC+GlfiLJ0=
Subject key identifier: 01:62:84:7C:C2:E4:37:2F:DC:A8:27:B5:A8:EC:9C:41:C0:49:BD:88
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CB3F760C48609606F57FCA26E426CFEC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AWKEfMLkNy_cqCe1qOycQcBJvYg.roa
Signing time: Tue 22 Sep 2026 22:32:08 +0000
ROA not before: Tue 22 Sep 2026 22:32:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.185.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.26.222.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.136.0/24 maxlen: 24
13.143.146.0/24 maxlen: 24
13.143.148.0/24 maxlen: 24
13.143.150.0/23 maxlen: 24
13.143.168.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
179.254.92.0/24 maxlen: 24
179.254.95.0/24 maxlen: 24
179.254.97.0/24 maxlen: 24
179.254.104.0/24 maxlen: 24
179.254.106.0/24 maxlen: 24
179.254.113.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Sep 2026 16:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:3f:76:0c:48:60:96:06:f5:7f:ca:26:e4:26:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 22 22:32:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0162847cc2e4372fdca827b5a8ec9c41c049bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:e9:18:c2:3d:e7:03:b1:ad:0b:94:2e:a0:
fd:9c:11:34:00:84:90:d9:b6:b7:af:41:70:fa:b4:
77:8c:fa:81:07:4c:82:c0:57:84:95:2b:2d:01:05:
ae:8c:41:5e:2e:fc:b2:01:59:42:52:d9:ca:ea:a2:
69:94:22:bf:2e:bb:10:e6:d1:bc:7a:e4:27:df:6f:
77:27:da:c9:29:85:83:40:3f:92:05:8c:ee:77:01:
d9:7d:83:94:17:60:44:67:50:7d:35:4c:6d:81:8f:
85:10:72:24:de:cc:ce:c1:07:5c:11:f1:01:0c:28:
91:48:b2:25:cf:17:2e:e6:0d:04:03:f4:29:22:23:
bc:11:4f:fb:5c:3f:69:00:58:8b:3e:87:97:4f:9d:
7e:2b:37:1e:13:38:f6:bb:c3:01:49:2b:e9:54:b7:
4e:7f:cc:62:09:54:4d:02:78:6b:6d:64:c7:93:a8:
e7:81:61:de:ba:f2:c2:26:c2:d6:c0:15:ed:31:35:
81:a5:c7:21:e8:9d:b0:09:a4:46:cd:a9:e3:0a:d1:
67:c8:a4:00:b5:91:a2:2f:f0:c2:ae:5b:ff:f9:5b:
c5:7a:f9:0f:52:61:bc:54:8e:c8:89:64:f5:77:4d:
e0:49:9d:72:5e:18:26:0d:0f:2d:9c:b1:41:a2:a2:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:84:7C:C2:E4:37:2F:DC:A8:27:B5:A8:EC:9C:41:C0:49:BD:88
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AWKEfMLkNy_cqCe1qOycQcBJvYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.185.0/24
2.26.191.0/24
2.26.208.0/21
2.26.222.0/24
2.27.103.0/24
2.27.162.0/23
2.27.167.0/24
2.27.228.0/22
2.27.239.0/24
13.143.48.0/22
13.143.72.0/21
13.143.136.0/24
13.143.146.0/24
13.143.148.0/24
13.143.150.0/23
13.143.168.0/23
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.46.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
31.77.237.0-31.77.238.255
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.201.0/24
179.254.92.0/24
179.254.95.0/24
179.254.97.0/24
179.254.104.0/24
179.254.106.0/24
179.254.113.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
13:86:bf:18:b7:04:c3:c5:ef:25:32:59:00:86:87:34:80:0c:
4a:0d:45:32:9e:e2:76:cc:b0:db:e7:28:d6:c2:0f:3e:4f:4e:
e6:56:0e:01:01:3f:75:b8:f4:c3:4f:0f:20:74:de:2e:d3:b7:
92:e0:a6:e7:03:5e:e8:26:47:af:a5:57:3c:75:c3:57:60:de:
cf:09:13:31:e4:b4:a0:c6:d4:83:53:41:47:91:33:59:c2:b7:
8c:0b:2e:51:91:80:d9:a6:a4:24:60:c6:88:c9:95:23:fe:cf:
3d:71:d0:fe:c5:7b:b5:70:18:e0:d0:2c:7d:9f:0d:ba:be:ed:
76:51:b3:4d:bb:57:3f:eb:a7:bc:a7:e8:b7:81:03:e2:ea:0d:
b6:3f:74:c0:4d:a4:48:0c:65:e5:fb:65:e9:0a:2c:09:43:3f:
ab:d8:a3:68:71:3a:5c:82:8e:50:3b:6b:dd:59:43:ca:08:34:
b0:bc:34:b6:e4:e0:c0:b4:49:23:04:fb:37:6e:13:5b:f1:b4:
3e:c0:81:ab:7f:73:3b:f4:69:1a:0e:74:ce:b6:5c:42:50:ee:
f6:3c:1b:bf:2c:b9:88:3c:64:53:ac:79:6f:8e:fa:9f:af:a5:
d7:05:bd:fd:50:bc:91:b8:be:66:b1:29:3b:22:95:9c:93:ca:
1f:af:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:00 2026 by rpki-client