Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H8ocCr0_t7qZ4w00S7q8Ajt2bVA.roa
File: H8ocCr0_t7qZ4w00S7q8Ajt2bVA.roa (raw, json)
Hash identifier: TVQp3cF0/BpTykiOCO0cu76ABpc+Tte5eSuL0RBL4C4=
Subject key identifier: 1F:CA:1C:0A:BD:3F:B7:BA:99:E3:0D:34:4B:BA:BC:02:3B:76:6D:50
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F8E95427D0107468A6A25E7D2DE58B699
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H8ocCr0_t7qZ4w00S7q8Ajt2bVA.roa
Signing time: Thu 23 Jul 2026 10:46:14 +0000
ROA not before: Thu 23 Jul 2026 10:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.178.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jul 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:95:42:7d:01:07:46:8a:6a:25:e7:d2:de:58:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 23 10:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fca1c0abd3fb7ba99e30d344bbabc023b766d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:71:af:25:cc:2d:d9:9c:88:8c:c6:d5:b8:
98:a7:54:cb:4a:f4:a5:22:75:a7:3c:5c:88:03:0f:
56:cf:c0:02:31:a3:21:24:35:ac:0c:6a:fb:e9:f7:
e7:d0:c9:10:59:dd:f4:98:c8:b5:ce:84:af:d4:95:
67:4c:74:89:cb:89:88:34:c7:2a:f0:f6:9c:5c:78:
f9:90:40:17:89:ba:dd:68:be:d6:08:2d:98:7b:20:
30:8e:54:8d:6a:c7:e5:ee:df:1b:72:8f:cb:53:69:
38:52:e3:8a:26:40:b0:74:f3:f5:a2:e3:71:1e:12:
e5:c0:ea:6e:1e:71:e5:7b:ff:2b:68:ce:15:c7:ae:
4a:cc:ca:6c:f8:5d:6c:b2:55:db:ec:b8:df:a2:01:
c5:c4:eb:69:c7:81:42:19:57:cd:5a:3a:90:3e:41:
3e:1b:46:fa:6c:a7:a4:96:5e:92:4a:50:ed:56:68:
9d:3c:bb:bb:36:35:77:f0:7b:a1:55:7e:ec:cd:2a:
d6:65:63:fe:34:14:79:f6:1b:fb:e8:a6:53:13:78:
0e:a6:f4:74:5a:87:1b:f3:80:30:e1:34:52:00:91:
13:8f:78:b0:a5:91:65:cd:00:84:b7:fd:e0:be:fa:
fb:05:31:4b:47:28:2f:a6:4c:36:c3:1a:96:d1:c5:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:1C:0A:BD:3F:B7:BA:99:E3:0D:34:4B:BA:BC:02:3B:76:6D:50
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H8ocCr0_t7qZ4w00S7q8Ajt2bVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.178.0/24
45.74.242.0/24
45.74.244.0/24
45.131.0.0/24
45.136.4.0/24
45.141.148.0/24
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:f7:49:b9:15:77:64:f5:a5:ac:94:95:c2:4d:ea:2a:07:85:
5e:d5:51:b3:c7:a7:5f:6f:b2:a6:39:e9:a9:17:13:e3:5b:2d:
7c:f5:68:42:1a:7c:11:b5:45:0f:d0:1f:38:04:91:49:08:c9:
85:f4:8d:7a:2a:63:d1:5f:ed:2a:da:bf:61:62:9e:07:3f:b0:
47:d2:32:d3:b7:2a:6c:3f:b3:30:4b:2e:87:c4:bf:ff:ad:cb:
28:c3:57:db:51:5f:7f:bf:f3:29:b7:7e:73:ff:90:e1:a8:b1:
29:f3:7c:48:1f:f8:a6:a8:47:e1:ed:49:15:4a:73:8d:30:45:
9b:7d:09:cc:38:31:32:0b:0a:b4:42:6a:fe:7b:32:fd:af:c9:
b6:bf:1b:a3:f8:59:25:b3:a8:4a:30:43:20:80:f3:a0:e3:f9:
05:bf:73:72:66:4f:d7:dc:b5:f9:64:e8:bb:63:b2:50:ba:5d:
62:75:ad:04:98:a2:1b:cb:97:24:40:93:47:09:be:45:c3:4f:
34:e7:b7:7d:3a:3b:df:19:2e:e5:70:bc:c1:90:95:98:6f:31:
37:cd:2d:67:c1:a7:24:55:62:f9:e6:81:57:a0:5d:85:65:1e:
5a:44:82:be:2d:ec:a9:66:22:79:48:20:8f:bf:67:11:17:dd:
66:dc:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:49 2026 by rpki-client