Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/7PNNjkWLOEaobLtqOro7YfcqUxc.roa
File: 7PNNjkWLOEaobLtqOro7YfcqUxc.roa (raw, json)
Hash identifier: b1TImTr0hcNgSGExdtXJsO9maM0RiaV6oE898rsOgww=
Subject key identifier: EC:F3:4D:8E:45:8B:38:46:A8:6C:BB:6A:3A:BA:3B:61:F7:2A:53:17
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019F4AF16BEDA7CEC9FEEC221D5F729B231E
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/7PNNjkWLOEaobLtqOro7YfcqUxc.roa
Signing time: Fri 10 Jul 2026 07:32:43 +0000
ROA not before: Fri 10 Jul 2026 07:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
77.243.128.0/20 maxlen: 20
80.70.0.0/23 maxlen: 23
80.70.6.0/23 maxlen: 23
80.70.6.0/24 maxlen: 24
80.70.7.0/24 maxlen: 24
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
91.197.248.0/22 maxlen: 22
91.217.201.0/24 maxlen: 24
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
94.137.128.0/20 maxlen: 20
94.143.8.0/21 maxlen: 21
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
109.71.56.0/21 maxlen: 21
178.251.0.0/21 maxlen: 21
178.251.1.0/24 maxlen: 24
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
185.25.140.0/24 maxlen: 24
185.25.141.0/24 maxlen: 24
185.25.142.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
185.134.28.0/22 maxlen: 22
185.154.240.0/22 maxlen: 22
185.204.248.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
185.223.24.0/22 maxlen: 22
185.235.52.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
193.223.248.0/22 maxlen: 22
193.239.96.0/22 maxlen: 22
194.150.112.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
212.97.140.0/24 maxlen: 24
212.97.141.0/24 maxlen: 24
212.97.142.0/24 maxlen: 24
212.97.143.0/24 maxlen: 24
212.237.248.0/23 maxlen: 23
217.61.237.0/24 maxlen: 24
217.61.238.0/24 maxlen: 24
2a02:2338::/32 maxlen: 48
2a02:2339::/36 maxlen: 36
2a02:2339:4000::/34 maxlen: 48
2a03:2740::/48 maxlen: 48
2a06:eac0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Jul 2026 08:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:f1:6b:ed:a7:ce:c9:fe:ec:22:1d:5f:72:9b:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jul 10 07:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecf34d8e458b3846a86cbb6a3aba3b61f72a5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:81:9b:98:30:8f:e5:db:3d:08:eb:c2:aa:
72:d8:4e:31:04:96:28:11:f2:e9:7f:21:ba:c5:fe:
2d:b0:b8:95:90:21:dc:0d:cd:b5:9c:32:6b:8f:b1:
09:c6:c5:0a:91:f5:a4:bd:ec:d8:4b:4f:9d:bf:c7:
9e:1e:09:d1:7c:b1:18:53:60:72:56:26:33:24:ac:
1a:ad:21:80:cd:ee:23:14:0a:eb:1a:ee:65:38:a3:
98:d5:ab:a6:6f:ab:81:9e:83:c4:85:d1:29:0d:fc:
cb:f2:76:cb:80:b1:84:79:93:c5:b5:eb:de:a1:2e:
78:56:36:7f:f5:83:e2:05:03:a9:25:39:a3:5b:19:
d9:86:43:49:c6:d3:69:48:49:85:01:2b:22:82:a6:
6a:1c:5f:e2:00:6e:ab:0b:dc:d5:06:62:f2:46:07:
e9:b4:9e:5a:3a:6c:a3:87:20:be:b5:4b:8c:f7:f5:
d3:1f:cf:63:11:2e:c2:36:0a:85:b9:f5:73:9b:06:
d7:19:ec:1d:69:8c:87:14:99:ad:f1:88:15:be:c0:
e2:0f:05:41:98:e7:eb:e6:5d:30:39:69:b4:8e:61:
66:d4:2c:67:2b:32:aa:e0:a3:78:d8:0d:bb:a6:f1:
a0:af:6c:9f:05:59:0f:14:f3:b5:ba:81:76:7f:7e:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:4D:8E:45:8B:38:46:A8:6C:BB:6A:3A:BA:3B:61:F7:2A:53:17
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/7PNNjkWLOEaobLtqOro7YfcqUxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
80.70.0.0/23
80.70.6.0/23
81.95.240.0/20
89.188.72.0/21
91.197.248.0/22
91.217.201.0/24
93.191.152.0/21
94.137.128.0/20
94.143.8.0/21
94.231.96.0/20
109.71.56.0/21
178.251.0.0/21
185.20.204.0/22
185.21.40.0/22
185.25.140.0/22
185.134.28.0/22
185.154.240.0/22
185.204.248.0/22
185.221.36.0/22
185.223.24.0/22
185.235.52.0/22
193.223.248.0/22
193.239.96.0/22
194.150.112.0/22
195.69.128.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.237.0-217.61.238.255
IPv6:
2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff
2a02:2339:4000::/34
2a03:2740::/48
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:54:cf:87:c8:52:2e:0e:2a:4a:bb:ec:58:e0:b2:5a:5e:e0:
f5:bc:c8:41:92:f9:ca:40:e9:a1:a2:b3:40:97:c3:c3:7b:35:
ef:e8:2e:a2:81:bf:c7:41:f2:7d:dd:f8:3b:47:3a:da:c3:2f:
55:7a:72:26:6f:c0:62:64:3b:d1:65:04:4f:1f:8b:8f:4c:b0:
35:d5:06:b1:2d:38:1a:3e:a2:8c:46:52:66:8e:c7:e9:62:51:
44:3d:c2:17:91:a3:fd:1d:fc:07:16:3d:ed:8a:ac:eb:07:45:
dc:ff:20:fe:dd:76:25:22:f6:7d:78:b4:23:81:00:90:b2:d0:
87:d5:47:f8:ae:71:d6:e3:9e:c6:7d:2a:b2:81:d8:ba:c8:0a:
7a:1b:53:00:05:a6:c7:c0:f2:0a:90:70:80:28:36:1b:d3:16:
7c:a9:c2:81:81:5a:e3:a9:ad:83:24:9b:d3:a9:ea:f3:6f:d2:
0b:68:12:7c:49:1b:74:7c:5b:4e:67:aa:f9:51:bc:eb:69:80:
f2:93:5a:20:d5:b1:ec:0c:7d:5b:3a:0c:60:c8:c0:6e:8c:69:
cf:ce:0f:1e:d9:53:b1:e9:d2:98:e3:aa:00:da:ee:d6:89:86:
21:93:1e:c3:9b:4c:7e:82:f2:47:d6:3b:c0:82:fe:6f:74:d8:
53:e2:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:23 2026 by rpki-client