Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T9FDrNYCDC9-P3Tcp1fUGIHrWak.roa
File: T9FDrNYCDC9-P3Tcp1fUGIHrWak.roa (raw, json)
Hash identifier: kNsADyAvDcHwVNZBK7ulDO4Uw0+paRbuaiw3mDY1W0s=
Subject key identifier: 4F:D1:43:AC:D6:02:0C:2F:7E:3F:74:DC:A7:57:D4:18:81:EB:59:A9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CF2D8E9ADBEFE0623A3773BFE342C9B5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T9FDrNYCDC9-P3Tcp1fUGIHrWak.roa
Signing time: Wed 23 Sep 2026 16:51:04 +0000
ROA not before: Wed 23 Sep 2026 16:51:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.185.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.136.0/24 maxlen: 24
13.143.146.0/24 maxlen: 24
13.143.148.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
179.254.95.0/24 maxlen: 24
179.254.97.0/24 maxlen: 24
179.254.104.0/24 maxlen: 24
179.254.106.0/24 maxlen: 24
179.254.113.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Sep 2026 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:2d:8e:9a:db:ef:e0:62:3a:37:73:bf:e3:42:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 23 16:51:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd143acd6020c2f7e3f74dca757d41881eb59a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:a7:e4:e9:7f:4b:c4:c3:5c:b7:94:c8:d5:
e3:3e:92:9f:b4:6e:93:9f:2c:93:60:90:0a:58:bf:
0a:48:ed:02:29:a9:d4:ec:20:0f:1b:a8:f1:b1:5a:
55:9a:9a:ab:ea:fd:eb:20:0d:59:ee:01:48:08:5d:
fb:17:c8:61:aa:a3:10:60:d2:48:39:33:91:7d:11:
a3:85:07:02:13:a9:fc:f4:8a:6c:5b:55:2f:3b:85:
f0:bf:c7:6d:35:8d:c2:06:79:23:22:2a:a0:d1:12:
92:a4:c2:86:d1:42:1c:56:eb:7a:78:08:7b:84:42:
31:c5:4e:6d:e6:a2:ae:7d:36:59:37:8a:76:98:af:
59:c7:86:4f:7b:a8:7c:9a:3c:78:32:b8:28:d9:9d:
6b:a0:90:e2:8f:55:20:fc:21:77:a8:0b:17:98:b4:
cd:17:0e:83:bc:b4:f1:7b:98:c0:94:36:ea:4f:c5:
34:46:66:36:bb:54:b3:68:c6:1d:45:56:9b:16:5f:
15:76:63:c2:8f:e5:b9:ef:0b:7e:9a:d8:20:ac:d7:
35:b6:48:83:9c:09:c5:cd:4e:2c:ac:2b:bf:d9:38:
c0:48:a1:be:b6:5c:5f:4e:20:a6:8e:fa:9c:aa:f1:
ee:c7:21:b1:04:3b:35:bd:ad:3e:56:f0:41:05:ce:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:43:AC:D6:02:0C:2F:7E:3F:74:DC:A7:57:D4:18:81:EB:59:A9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T9FDrNYCDC9-P3Tcp1fUGIHrWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.185.0/24
2.26.208.0/21
2.27.103.0/24
2.27.162.0/23
2.27.167.0/24
2.27.228.0/22
2.27.239.0/24
13.143.48.0/22
13.143.72.0/21
13.143.136.0/24
13.143.146.0/24
13.143.148.0/24
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.46.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
31.77.238.0/24
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.201.0/24
179.254.95.0/24
179.254.97.0/24
179.254.104.0/24
179.254.106.0/24
179.254.113.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
81:37:c0:a5:a6:03:73:f1:77:34:43:57:a1:90:ca:7d:e1:9f:
69:ad:2f:bf:b8:68:12:e8:84:10:48:12:97:ad:f7:47:18:7d:
87:a9:f3:d8:4c:4f:47:30:9c:eb:1d:67:71:74:0c:62:c0:89:
36:7d:13:e3:fc:18:b6:7f:ab:6a:44:c5:5c:c0:d4:68:19:ff:
f7:cc:07:5b:f0:06:41:22:94:33:7b:f2:48:a9:98:e8:d2:aa:
8c:33:fd:84:07:63:ee:c7:56:42:28:71:97:74:61:fa:f1:96:
4b:66:f3:36:e3:95:26:7f:14:a3:42:a0:27:0a:67:33:30:9d:
98:40:f1:e3:3a:c8:20:b3:c2:1e:08:96:03:81:e6:35:73:2f:
ae:83:39:6a:01:f7:49:d1:db:b4:f4:ba:04:06:9f:81:36:0c:
56:49:8b:41:04:e0:45:44:05:bf:a2:5b:70:c4:3f:65:72:32:
24:86:78:ae:d5:b6:95:82:fc:ae:9b:ff:ef:45:4d:81:34:93:
92:05:7c:d9:ad:aa:3b:90:95:69:8c:d6:2d:50:bd:6f:62:5c:
18:a0:bd:4b:1a:1f:78:d9:4e:6c:7c:b2:92:fe:b1:5d:ad:57:
5a:dc:c5:96:fe:3b:66:c1:57:45:59:cc:cf:5e:58:fe:17:ed:
27:7f:00:7a
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAaDPLY6a2+/gYjo3c7/jQsm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTIzMTY1MTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQxNDNhY2Q2MDIwYzJmN2UzZjc0ZGNhNzU3ZDQxODgxZWI1OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/+n5Ol/S8TDXLeUyNXjPpKftG6T
nyyTYJAKWL8KSO0CKanU7CAPG6jxsVpVmpqr6v3rIA1Z7gFICF37F8hhqqMQYNJI
OTORfRGjhQcCE6n89IpsW1UvO4Xwv8dtNY3CBnkjIiqg0RKSpMKG0UIcVut6eAh7
hEIxxU5t5qKufTZZN4p2mK9Zx4ZPe6h8mjx4Mrgo2Z1roJDij1Ug/CF3qAsXmLTN
Fw6DvLTxe5jAlDbqT8U0RmY2u1SzaMYdRVabFl8VdmPCj+W57wt+mtggrNc1tkiD
nAnFzU4srCu/2TjASKG+tlxfTiCmjvqcqvHuxyGxBDs1va0+VvBBBc6wpQIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFE/RQ6zWAgwvfj903KdX1BiB61mpMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVDlGRHJOWUNEQzktUDNUY3AxZlVHSUhyV2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB
CAMEAAIafgMEAAIakgMEAAIanwMEAAIauQMEAwIa0AMEAAIbZwMEAQIbogMEAAIb
pwMEAgIb5AMEAAIb7wMEAg2PMAMEAw2PSAMEAA2PiAMEAA2PkgMEAA2PlAMEAB9M
JQMEAB9MewMEAh9MwAMEAh9M0AMEAR9M5AMEAR9M6AMEAR9M7AMEAR9M8gMEAR9N
LgMEAB9NZQMEAB9NdwMEAB9N0QMEAB9N7gMEAJAfbgMEApAfoAMEAJAf6wMEAJbx
RQMEArEBsAMEALEByQMEALP+XwMEALP+YQMEALP+aAMEALP+agMEALP+cQMEALnP
hwMEArnYaAMEAMEXwAMEAMEXxgMEAsEXzDANBgkqhkiG9w0BAQsFAAOCAQEAgTfA
paYDc/F3NENXoZDKfeGfaa0vv7hoEuiEEEgSl633Rxh9h6nz2ExPRzCc6x1ncXQM
YsCJNn0T4/wYtn+rakTFXMDUaBn/98wHW/AGQSKUM3vySKmY6NKqjDP9hAdj7sdW
Qihxl3Rh+vGWS2bzNuOVJn8Uo0KgJwpnMzCdmEDx4zrIILPCHgiWA4HmNXMvroM5
agH3SdHbtPS6BAafgTYMVkmLQQTgRUQFv6JbcMQ/ZXIyJIZ4rtW2lYL8rpv/70VN
gTSTkgV82a2qO5CVaYzWLVC9b2JcGKC9SxofeNlObHyykv6xXa1XWtzFlv47ZsFX
RVnMz15Y/hftJ38Aeg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:57:30 2026 by rpki-client