Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/pb-lBwDqlSmnNVzT0O2a9dM1v3c.roa
File: pb-lBwDqlSmnNVzT0O2a9dM1v3c.roa (raw, json)
Hash identifier: PcMUmv8WKPh2OK3L7FgHiU6l2RZvrYC/Zg6sCOjcgac=
Subject key identifier: A5:BF:A5:07:00:EA:95:29:A7:35:5C:D3:D0:ED:9A:F5:D3:35:BF:77
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A0ED22DA52D12996D56B9541BB4D082B8D
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/pb-lBwDqlSmnNVzT0O2a9dM1v3c.roa
Signing time: Tue 29 Sep 2026 12:27:59 +0000
ROA not before: Tue 29 Sep 2026 12:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/21 maxlen: 24
78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
87.251.0.0/20 maxlen: 24
87.251.0.0/24 maxlen: 24
87.251.1.0/24 maxlen: 24
87.251.2.0/24 maxlen: 24
87.251.3.0/24 maxlen: 24
87.251.4.0/24 maxlen: 24
87.251.5.0/24 maxlen: 24
87.251.6.0/24 maxlen: 24
87.251.7.0/24 maxlen: 24
87.251.8.0/24 maxlen: 24
87.251.9.0/24 maxlen: 24
87.251.10.0/24 maxlen: 24
87.251.11.0/24 maxlen: 24
87.251.12.0/24 maxlen: 24
87.251.13.0/24 maxlen: 24
87.251.14.0/24 maxlen: 24
87.251.15.0/24 maxlen: 24
93.89.16.0/20 maxlen: 24
93.89.16.0/24 maxlen: 24
93.89.17.0/24 maxlen: 24
93.89.19.0/24 maxlen: 24
93.89.20.0/24 maxlen: 24
93.89.21.0/24 maxlen: 24
93.89.22.0/24 maxlen: 24
93.89.23.0/24 maxlen: 24
93.89.25.0/24 maxlen: 24
93.89.26.0/24 maxlen: 24
93.89.27.0/24 maxlen: 24
93.89.28.0/24 maxlen: 24
93.89.29.0/24 maxlen: 24
93.89.30.0/24 maxlen: 24
93.89.31.0/24 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/21 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
201.7.32.0/19 maxlen: 24
201.7.32.0/24 maxlen: 24
201.7.33.0/24 maxlen: 24
213.187.248.0/21 maxlen: 24
213.187.248.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:201::/48 maxlen: 48
2a02:7980:202::/48 maxlen: 48
2a02:7980:203::/48 maxlen: 48
2a02:7980:204::/48 maxlen: 48
2a02:7980:205::/48 maxlen: 48
2a02:7980:206::/48 maxlen: 48
2a02:7980:207::/48 maxlen: 48
2a02:7980:208::/48 maxlen: 48
2a02:7980:209::/48 maxlen: 48
2a02:7980:210::/48 maxlen: 48
2a02:7980:300::/48 maxlen: 48
2a02:7980:301::/48 maxlen: 48
2a02:7980:302::/48 maxlen: 48
2a02:7980:303::/48 maxlen: 48
2a02:7980:306::/48 maxlen: 48
2a02:7980:308::/48 maxlen: 48
2a02:7980:309::/48 maxlen: 48
2a02:7980:310::/48 maxlen: 48
2a02:7980:311::/48 maxlen: 48
2a02:7980:313::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Oct 2026 10:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:22:da:52:d1:29:96:d5:6b:95:41:bb:4d:08:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Sep 29 12:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5bfa50700ea9529a7355cd3d0ed9af5d335bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:3f:ac:f7:16:a9:f2:1e:48:ce:e3:7b:9b:
12:c2:96:7b:9f:13:f6:3f:28:2b:dc:a7:58:09:9b:
8e:ff:2c:af:fb:05:26:8d:02:b3:27:11:ac:05:c4:
ad:fd:0f:79:d9:99:94:71:1f:2a:ca:69:a2:85:5e:
4a:ee:b4:a4:a4:3f:9f:55:51:70:24:ec:2b:76:6c:
1e:98:c5:bd:6e:32:08:a3:ec:ca:16:8d:7b:4b:54:
8d:3d:f1:a2:ae:a7:9d:67:df:86:b9:34:30:89:9e:
5b:12:77:71:5b:31:80:59:ad:2a:de:ec:21:f3:f3:
50:41:6f:6f:bb:dc:c6:e3:d9:4f:77:9b:6e:43:fb:
a9:0b:67:7e:8b:c0:a5:1e:85:4d:06:85:96:14:98:
1e:64:af:7b:cb:71:9f:7a:95:87:15:4f:e3:db:d5:
ac:0d:1e:3f:16:ee:3c:bc:fe:7a:c5:05:69:1a:51:
b2:f5:c4:9f:d1:10:e2:91:20:11:83:65:d7:ff:af:
d1:89:af:4f:ef:b8:ca:c0:40:cc:86:25:d8:55:cb:
bb:f9:c7:ac:af:23:58:36:7a:97:9b:cb:17:3b:69:
55:56:87:de:4c:e2:7c:04:32:a5:70:21:c2:3d:5e:
9a:03:e7:5c:d4:e5:0c:53:0d:e3:fa:d5:c1:6d:d4:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:A5:07:00:EA:95:29:A7:35:5C:D3:D0:ED:9A:F5:D3:35:BF:77
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/pb-lBwDqlSmnNVzT0O2a9dM1v3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
87.251.0.0/20
93.89.16.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
201.7.32.0/19
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
10:49:38:e8:cf:11:48:54:5d:c1:13:f3:46:8a:d8:c7:22:51:
e1:78:be:3f:19:31:8a:fc:5c:94:15:3c:85:57:4e:56:03:56:
a0:05:24:e3:1c:0f:21:0a:b8:fa:eb:03:67:c1:5f:4f:8b:56:
63:58:7b:bb:f9:44:50:d7:05:ec:af:00:21:22:f2:31:cf:c6:
4b:9c:f5:4b:16:50:52:59:f7:86:46:5c:2e:10:2d:53:8b:fd:
dd:a6:13:ca:d3:ed:d8:99:79:b2:e7:c7:5a:92:27:4e:28:3a:
47:18:60:eb:30:25:78:30:ad:1e:77:34:12:45:1b:c1:6d:2f:
44:9d:0b:16:a7:19:15:72:24:29:06:99:cc:b9:9a:9e:3d:9e:
ea:22:ad:e2:0a:35:19:b9:90:ec:b5:da:73:23:14:35:9f:54:
38:c3:22:e6:d1:02:06:e6:b6:8d:44:9c:61:7f:f7:8a:30:e9:
24:fc:ac:73:df:1e:7b:a4:8f:e9:dc:99:0a:b9:38:23:98:47:
79:25:05:b1:91:4d:63:6b:2f:25:ff:2d:84:70:8a:00:00:53:
6e:13:e8:0d:be:76:1d:f0:ca:d9:b5:c1:38:54:f3:38:13:5d:
8b:f0:0c:fe:7b:15:d4:bf:05:68:43:c8:b1:08:0a:ec:a1:7f:
11:13:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:23:37 2026 by rpki-client