Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Xr8xD7AXvc_NpDNbXXImHz1-T_E.roa
File: Xr8xD7AXvc_NpDNbXXImHz1-T_E.roa (raw, json)
Hash identifier: O9XLK98Rrx+wWOYoABEY4zrxCIQq8E3Z2Dq/mTA56c8=
Subject key identifier: 5E:BF:31:0F:B0:17:BD:CF:CD:A4:33:5B:5D:72:26:1F:3D:7E:4F:F1
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019D0467E02D404EAAE2267E0C62636EA830
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Xr8xD7AXvc_NpDNbXXImHz1-T_E.roa
Signing time: Thu 19 Mar 2026 04:43:29 +0000
ROA not before: Thu 19 Mar 2026 04:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 26 Mar 2026 12:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:67:e0:2d:40:4e:aa:e2:26:7e:0c:62:63:6e:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 19 04:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ebf310fb017bdcfcda4335b5d72261f3d7e4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:49:d0:a4:d6:c5:83:a7:15:b3:ba:d2:20:
e3:02:97:fc:a9:d1:f0:34:fe:e9:de:01:76:58:28:
d6:7c:d0:cf:f9:12:44:c0:1a:e6:10:ce:17:d4:67:
ff:5c:fe:48:b5:8d:4d:c6:50:89:c1:37:4c:74:72:
de:20:48:e9:e8:1c:f1:ed:25:73:68:9e:12:05:57:
3c:a3:15:76:a5:2f:86:17:d1:74:9a:ea:12:22:af:
f0:e7:04:72:65:6e:d1:e2:0b:4f:c1:a9:ec:c4:21:
ba:ab:97:99:ec:22:7b:e6:82:0e:f3:28:8a:3c:f8:
6a:7a:05:05:fa:e8:8a:b2:0d:dd:34:3a:1a:b4:92:
55:3c:6d:c2:2f:8b:95:ab:7b:97:26:b9:0c:6c:91:
e8:84:7f:07:4c:27:45:03:6f:24:52:1a:69:b4:7d:
9c:76:50:40:b9:da:d8:c8:06:93:09:47:ba:6d:67:
41:c2:80:93:ae:96:7a:c7:81:d7:cf:1a:cb:ba:3e:
17:06:07:3d:24:12:d3:71:68:28:e4:2b:78:52:02:
2e:06:1c:2a:51:1a:04:1f:a2:5c:c0:9e:8c:45:cf:
b5:e7:72:5c:60:42:43:2f:ad:b1:92:3b:b8:e6:29:
f4:ee:a3:75:8d:91:00:60:f3:50:e2:ea:b4:48:0b:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:31:0F:B0:17:BD:CF:CD:A4:33:5B:5D:72:26:1F:3D:7E:4F:F1
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Xr8xD7AXvc_NpDNbXXImHz1-T_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.100.0-31.209.105.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
01:32:34:f1:58:f2:b7:81:bd:1b:0c:5b:70:ad:27:8f:f5:36:
79:9b:81:30:ed:32:fc:a7:28:cd:62:01:79:1b:ff:08:68:da:
25:79:ba:a6:4d:55:65:93:64:40:e9:b8:5f:13:1f:2a:47:d3:
32:93:0f:3a:4e:aa:84:f8:f5:23:01:e4:bc:96:e7:08:43:e9:
ac:02:06:f1:e1:fe:0f:af:05:68:16:8d:97:51:2e:7d:15:43:
84:ff:9f:aa:04:1a:d2:ed:33:c1:05:0d:9c:bb:f7:9e:22:d9:
a9:42:1a:86:4b:5f:ed:e6:53:c4:96:04:c6:1e:d9:24:5f:c7:
d8:a5:7f:ea:ab:57:3e:dc:72:d3:cd:66:73:da:b6:36:0d:78:
da:04:41:1b:96:61:1d:96:28:1b:92:63:9b:49:f0:57:ef:c4:
c2:9b:15:9b:f7:ec:d5:58:af:ec:29:79:dd:c0:9c:cc:d8:df:
4a:d0:6c:22:10:04:bd:7f:9a:c0:fe:e4:f0:28:31:d9:0a:b9:
99:71:70:00:06:f0:a7:02:c9:de:bb:d3:3c:79:ab:ac:ef:09:
ac:31:50:2f:f1:45:af:0d:5e:97:9e:a9:62:48:ee:8e:ac:80:
50:b7:bf:4c:c7:1a:69:c3:8a:70:13:6f:00:62:a1:8e:40:63:
e0:c0:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:39 2026 by rpki-client