Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/c6kgzOkZMGRoTu_LwihLp_E5OEo.roa
File: c6kgzOkZMGRoTu_LwihLp_E5OEo.roa (raw, json)
Hash identifier: n8S+AqU/5fVI16EE19FswMpTNCU+CdrZHP9r5o2heUg=
Subject key identifier: 73:A9:20:CC:E9:19:30:64:68:4E:EF:CB:C2:28:4B:A7:F1:39:38:4A
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 01A0F2E047D80520A56C4162B843A765127A
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/c6kgzOkZMGRoTu_LwihLp_E5OEo.roa
Signing time: Wed 30 Sep 2026 15:12:59 +0000
ROA not before: Wed 30 Sep 2026 15:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200651
IP address blocks: 37.156.68.0/24 maxlen: 24
37.228.128.0/24 maxlen: 24
37.228.129.0/24 maxlen: 24
85.193.77.0/24 maxlen: 24
94.198.190.0/24 maxlen: 24
95.133.164.0/24 maxlen: 24
95.133.166.0/23 maxlen: 23
185.10.68.0/24 maxlen: 24
185.100.84.0/23 maxlen: 23
185.100.84.0/24 maxlen: 24
185.100.85.0/24 maxlen: 24
185.100.86.0/24 maxlen: 24
185.100.87.0/24 maxlen: 24
185.146.232.0/24 maxlen: 24
185.146.233.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.168.0/24 maxlen: 24
185.165.169.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.165.171.0/24 maxlen: 24
185.192.128.0/24 maxlen: 24
185.192.129.0/24 maxlen: 24
185.192.130.0/24 maxlen: 24
185.192.131.0/24 maxlen: 24
185.219.128.0/24 maxlen: 24
185.246.188.0/24 maxlen: 24
185.246.189.0/24 maxlen: 24
185.246.190.0/24 maxlen: 24
185.246.191.0/24 maxlen: 24
185.247.224.0/24 maxlen: 24
185.247.224.78/32 maxlen: 32
185.247.225.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
188.240.231.0/24 maxlen: 24
188.241.54.0/24 maxlen: 24
213.218.160.0/24 maxlen: 24
213.218.161.0/24 maxlen: 24
2a06:1700::/48 maxlen: 48
2a06:1700:1::/48 maxlen: 48
2a06:1700:2::/48 maxlen: 48
2a06:1700:3::/48 maxlen: 48
2a06:1700:4::/48 maxlen: 48
2a06:1700:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Oct 2026 11:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:e0:47:d8:05:20:a5:6c:41:62:b8:43:a7:65:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Sep 30 15:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73a920cce9193064684eefcbc2284ba7f139384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:cd:38:7a:e7:59:f6:2b:9e:9a:74:91:f3:
f5:db:f8:84:16:dc:d6:8c:09:70:5a:85:fa:fa:a4:
93:7c:db:85:02:f0:b8:58:69:a9:bf:c0:c7:92:67:
23:b9:d7:ec:54:1d:57:ac:29:8e:13:c5:e5:35:87:
cf:b5:7b:52:1e:57:8e:d1:20:e5:eb:cc:9b:9e:d8:
0a:d9:76:6d:df:86:05:c2:59:b5:f6:f4:f4:2c:7b:
23:9c:fc:cb:84:68:f6:02:13:4c:f3:cd:2f:e2:42:
48:d4:ff:55:a8:dd:13:a8:7d:61:0a:a4:b7:1b:85:
54:ad:f0:a2:12:01:8c:00:58:d3:39:cd:a5:20:e8:
c7:8f:38:27:3b:00:c5:81:f7:79:4b:8d:4b:a1:26:
4c:86:23:97:01:51:e6:7e:ed:7f:ec:34:ac:de:85:
b4:6f:2f:dc:29:81:bb:2a:2d:ea:96:9a:4c:8c:99:
f5:4f:09:ca:36:4d:67:f0:5f:4e:28:31:b4:32:7c:
7c:0c:e3:fa:42:b6:c2:2d:5f:10:55:22:c2:6d:98:
97:5d:b8:cb:1f:fe:ca:b7:bb:db:66:13:b0:bb:59:
25:80:43:6b:54:e1:ab:94:ed:76:ed:f3:45:11:b2:
d3:f0:50:4e:73:e9:93:6a:96:2e:a0:ac:48:48:9e:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:20:CC:E9:19:30:64:68:4E:EF:CB:C2:28:4B:A7:F1:39:38:4A
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/c6kgzOkZMGRoTu_LwihLp_E5OEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
37.228.128.0/23
85.193.77.0/24
94.198.190.0/24
95.133.164.0/24
95.133.166.0/23
185.10.68.0/24
185.100.84.0/22
185.146.232.0-185.146.234.255
185.165.168.0/22
185.192.128.0/22
185.219.128.0/24
185.246.188.0/22
185.247.224.0-185.247.226.255
188.240.231.0/24
188.241.54.0/24
213.218.160.0/23
IPv6:
2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff
2a06:1700:100::/48
Signature Algorithm: sha256WithRSAEncryption
49:f6:a5:c7:14:8a:d1:f7:e6:3b:96:f3:0e:6f:6b:0c:a6:9a:
77:e1:51:e9:02:ad:99:82:8b:4e:e4:ee:f6:1c:49:16:f9:8d:
27:ca:39:51:39:be:5d:9c:ea:19:74:7c:2a:6c:78:c1:62:71:
80:c1:cb:d1:cd:f0:c6:46:f7:0e:e0:1c:a0:43:12:ab:dc:db:
28:f5:02:f4:0d:a2:81:c7:46:9f:e0:89:4a:62:c7:6b:5e:f2:
b6:e2:48:58:eb:19:f2:6e:6c:50:a8:46:a5:4f:06:da:9c:fb:
04:8b:06:01:28:30:74:b1:37:0b:66:dc:51:6c:b3:8b:0b:e5:
5c:44:ea:63:1c:36:3d:e0:a1:ec:7f:e5:24:80:79:25:7c:be:
a5:65:0e:5d:63:b5:59:93:f4:c0:b8:1c:9d:48:23:e1:68:aa:
71:8a:9c:2b:28:3f:fb:28:40:5d:91:1b:b2:3a:b9:f2:8d:c9:
c7:10:52:d0:1e:a9:c2:9c:17:39:e1:1f:e9:1e:ec:2e:73:e4:
50:43:b8:40:8d:3c:81:f5:fb:b7:7f:35:a1:b8:87:1c:ef:c1:
29:df:1a:46:c8:86:7d:99:6b:51:eb:9c:79:54:cc:8d:f6:3c:
e0:97:21:18:83:fe:0e:1e:70:d8:5f:35:49:7d:ed:95:67:8d:
53:c1:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:08:53 2026 by rpki-client