Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rcBb4JX6eQXHFaOumuffbzYJmmA.roa
File: rcBb4JX6eQXHFaOumuffbzYJmmA.roa (raw, json)
Hash identifier: MyO5A7gKelHUVJwqzSlzWAwkbAKZD4up5FmRhcUGKnk=
Subject key identifier: AD:C0:5B:E0:95:FA:79:05:C7:15:A3:AE:9A:E7:DF:6F:36:09:9A:60
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CA18A88CDD2C67EFBC515B04131CDD42
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rcBb4JX6eQXHFaOumuffbzYJmmA.roa
Signing time: Tue 22 Sep 2026 17:10:08 +0000
ROA not before: Tue 22 Sep 2026 17:10:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.185.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.26.222.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.130.0/23 maxlen: 24
13.143.136.0/24 maxlen: 24
13.143.146.0/24 maxlen: 24
13.143.148.0/24 maxlen: 24
13.143.150.0/23 maxlen: 24
13.143.168.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
179.254.92.0/24 maxlen: 24
179.254.95.0/24 maxlen: 24
179.254.97.0/24 maxlen: 24
179.254.104.0/24 maxlen: 24
179.254.106.0/24 maxlen: 24
179.254.113.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 22 Sep 2026 22:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:18:a8:8c:dd:2c:67:ef:bc:51:5b:04:13:1c:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 22 17:10:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adc05be095fa7905c715a3ae9ae7df6f36099a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:53:a0:19:a5:a6:5b:91:20:a0:a2:08:84:
cc:c8:6d:30:85:da:82:47:c7:3e:79:72:3e:87:9f:
31:b2:ca:fc:56:e8:a0:10:1c:56:31:33:29:8a:18:
15:b3:6f:ba:3c:74:33:25:6d:87:5c:6d:e6:1e:30:
4f:9e:10:b0:93:55:b5:78:dc:04:14:82:29:23:c9:
1b:1c:6d:f2:89:41:d5:77:63:54:f6:b9:8d:a8:4d:
de:75:9c:0f:18:7a:56:a7:04:d1:65:72:2c:c0:37:
77:46:29:83:bb:79:ba:c8:6a:15:11:17:a7:29:8f:
f1:e5:fa:91:a3:d0:73:82:97:2f:f7:aa:7a:11:a1:
ec:d1:2f:cc:cc:01:d2:d7:e2:51:9f:c4:48:c6:ad:
5d:be:bb:0a:b9:1c:a2:6a:20:46:9f:71:ae:d4:ca:
a8:99:40:9f:3e:0b:e8:2c:93:22:83:73:2d:76:f5:
1e:3b:b0:2b:2e:43:d4:a4:ae:62:a6:4e:2d:95:9a:
86:88:bf:6e:8b:cd:9a:81:3f:73:3b:e7:dc:e4:20:
9a:b2:1f:98:3d:08:ad:2c:29:9a:2f:37:72:ad:fb:
8a:9a:d9:23:ff:01:b1:78:23:a5:ab:ce:00:b1:c2:
72:36:85:14:c6:14:01:29:0c:68:3b:05:71:7d:e9:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:5B:E0:95:FA:79:05:C7:15:A3:AE:9A:E7:DF:6F:36:09:9A:60
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rcBb4JX6eQXHFaOumuffbzYJmmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.185.0/24
2.26.191.0/24
2.26.208.0/21
2.26.222.0/24
2.27.103.0/24
2.27.162.0/23
2.27.167.0/24
2.27.228.0/22
2.27.239.0/24
13.143.48.0/22
13.143.72.0/21
13.143.130.0/23
13.143.136.0/24
13.143.146.0/24
13.143.148.0/24
13.143.150.0/23
13.143.168.0/23
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.46.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
31.77.237.0-31.77.238.255
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.201.0/24
179.254.92.0/24
179.254.95.0/24
179.254.97.0/24
179.254.104.0/24
179.254.106.0/24
179.254.113.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:07:53:a8:44:67:36:0f:e5:56:97:37:f1:b1:f4:8b:91:00:
31:08:26:07:4a:a4:e6:f4:07:b7:5e:77:77:56:a1:ee:ca:25:
11:02:dd:29:4e:44:71:cf:6f:c4:e6:3a:81:01:80:19:1e:8e:
9c:8b:ad:11:99:29:2a:74:8b:c0:ce:64:3f:23:aa:94:89:1e:
1c:41:20:3c:fc:e7:a9:9f:fe:5b:1e:c1:5c:ce:ad:66:e1:55:
40:58:32:93:a5:19:36:87:00:67:4f:ef:81:b8:38:dc:a1:73:
fd:8a:99:30:2c:ae:80:f4:59:cd:d8:e5:f0:ad:3a:8d:e7:33:
ac:3c:74:35:34:2c:a6:44:83:6c:31:6f:3f:af:ca:e0:c3:3a:
7d:d0:49:65:9d:42:25:bd:8b:1c:4b:e1:43:e1:90:60:01:6f:
64:f8:94:f0:fd:72:5b:40:5c:73:44:df:2a:ec:6b:fb:04:4b:
94:17:9c:d7:a3:af:a2:e1:67:72:99:2f:44:be:7d:a3:5b:d5:
56:1b:ce:91:dd:cd:48:0f:f5:e9:56:21:80:7d:78:93:cb:f2:
f8:e3:db:3b:de:62:dc:b8:aa:80:ee:f9:fb:f5:b5:76:f9:d8:
6d:0d:5f:cf:52:57:fe:e0:68:c0:ac:4e:3a:62:b6:72:ba:1b:
81:4c:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:09 2026 by rpki-client