Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20313339353536.roa
File: 3135302e3235312e3232362e302f32342d3234203d3e20313339353536.roa (raw, json)
Hash identifier: HSmhZrLc9ib5GfzVl+opd1OmPYjcv1AuaQiV3OGbGOU=
Subject key identifier: 3F:F2:F2:D3:5E:97:4D:63:3D:EB:45:A8:17:FA:9A:DC:6C:54:79:F9
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 39F3A846312237EAA13A74E36C20B72B3D617BBF
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20313339353536.roa
Signing time: Sun 28 Jun 2026 16:46:47 +0000
ROA not before: Sun 28 Jun 2026 16:41:47 +0000
ROA not after: Sun 27 Jun 2027 16:46:47 +0000
asID: 139556
IP address blocks: 150.251.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jul 2026 06:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f3:a8:46:31:22:37:ea:a1:3a:74:e3:6c:20:b7:2b:3d:61:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 28 16:41:47 2026 GMT
Not After : Jun 27 16:46:47 2027 GMT
Subject: CN=3FF2F2D35E974D633DEB45A817FA9ADC6C5479F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:36:87:0f:a6:41:31:bd:fa:4c:bc:a4:12:
c9:02:54:cf:16:e5:9b:22:b8:26:b2:1c:c7:26:fa:
55:c9:9a:63:8b:2e:05:62:8f:ba:c4:7a:8e:e9:3b:
c4:d7:75:24:7a:0b:0f:36:7f:41:75:9f:31:08:b4:
67:70:f8:b5:05:df:a5:dd:0c:2d:29:03:48:20:54:
9c:66:fb:7c:b3:26:91:2a:eb:6d:60:15:ec:eb:98:
39:ec:27:80:48:79:9d:57:3f:66:de:24:92:56:c8:
c5:5b:1c:91:f2:64:e6:4a:2a:3f:8b:d4:13:01:2b:
0d:df:87:66:40:b7:35:45:30:6a:2a:31:4b:d5:eb:
ae:3b:16:a5:75:26:88:72:9c:25:d5:52:36:4e:30:
ba:14:73:d2:ff:d0:ae:80:75:cb:e4:0a:1a:0c:d3:
27:a6:61:50:8e:c0:3c:46:6f:b4:17:f6:ac:cc:c8:
e3:60:f4:e4:df:5a:fe:55:41:02:da:dd:7d:8f:6d:
b2:ee:4c:24:c6:6a:ed:01:2d:53:23:bd:ef:73:41:
c1:95:6a:76:14:96:c7:92:9d:4e:c0:bc:5e:e2:2c:
d4:83:ed:f0:82:9a:69:49:5f:c7:fa:7a:6d:6c:1f:
da:a0:b9:23:ef:a9:a4:28:51:b9:9c:42:4b:e5:d7:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:F2:D3:5E:97:4D:63:3D:EB:45:A8:17:FA:9A:DC:6C:54:79:F9
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20313339353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f8:0f:6c:e9:9f:8d:5e:21:c5:d2:ba:a8:b4:20:fa:ff:bb:
ce:9c:2b:6c:70:51:5f:b7:12:b9:7f:04:a0:ae:94:07:af:97:
6d:b4:f1:cb:90:bd:78:f9:07:ca:7c:8e:0c:15:95:be:67:2e:
7d:04:4f:33:62:69:59:e6:84:50:a1:68:0b:29:96:e2:c6:a2:
f3:2f:72:85:b7:ff:3c:f5:85:9c:9f:d2:bd:86:37:ad:13:d4:
ee:a6:a7:18:8b:af:ca:89:e1:0b:c0:dd:fa:13:c6:b8:44:99:
5a:6b:5a:14:df:82:5a:bd:e2:cb:91:c2:8e:9b:d2:9d:4e:09:
4d:0c:42:ec:c0:5f:9e:e9:55:f2:8c:79:16:fb:95:57:f5:db:
2f:09:58:34:47:30:fe:73:77:db:89:dd:ce:bf:d0:9e:e7:8f:
56:3b:59:6c:25:5f:f8:06:69:42:af:82:32:46:eb:dc:41:ac:
9c:11:c0:ea:ba:08:35:b0:07:2e:b2:97:28:33:26:93:96:f7:
c1:ad:c9:f9:69:8d:a7:cf:35:f6:c5:85:c8:70:ff:89:6d:39:
e4:cb:ce:e2:0a:3e:f8:a6:fb:40:99:fd:dd:7b:1a:17:2c:4f:
f9:57:9d:92:c4:a0:83:33:c8:de:b6:34:d1:e9:e8:9c:bf:8e:
f9:81:1a:7a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUOfOoRjEiN+qhOnTjbCC3Kz1he78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA2MjgxNjQxNDdaFw0yNzA2MjcxNjQ2NDdaMDMxMTAvBgNV
BAMTKDNGRjJGMkQzNUU5NzRENjMzREVCNDVBODE3RkE5QURDNkM1NDc5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiDaHD6ZBMb36TLykEskCVM8W
5ZsiuCayHMcm+lXJmmOLLgVij7rEeo7pO8TXdSR6Cw82f0F1nzEItGdw+LUF36Xd
DC0pA0ggVJxm+3yzJpEq621gFezrmDnsJ4BIeZ1XP2beJJJWyMVbHJHyZOZKKj+L
1BMBKw3fh2ZAtzVFMGoqMUvV6647FqV1JohynCXVUjZOMLoUc9L/0K6AdcvkChoM
0yemYVCOwDxGb7QX9qzMyONg9OTfWv5VQQLa3X2PbbLuTCTGau0BLVMjve9zQcGV
anYUlseSnU7AvF7iLNSD7fCCmmlJX8f6em1sH9qguSPvqaQoUbmcQkvl16snAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUP/Ly016XTWM960WoF/qa3GxUefkwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTM1MzUzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb74jANBgkqhkiG9w0BAQsFAAOCAQEAevgPbOmfjV4hxdK6qLQg+v+7zpwr
bHBRX7cSuX8EoK6UB6+XbbTxy5C9ePkHynyODBWVvmcufQRPM2JpWeaEUKFoCymW
4sai8y9yhbf/PPWFnJ/SvYY3rRPU7qanGIuvyonhC8Dd+hPGuESZWmtaFN+CWr3i
y5HCjpvSnU4JTQxC7MBfnulV8ox5FvuVV/XbLwlYNEcw/nN324ndzr/QnuePVjtZ
bCVf+AZpQq+CMkbr3EGsnBHA6roINbAHLrKXKDMmk5b3wa3J+WmNp8819sWFyHD/
iW055MvO4go++Kb7QJn93XsaFyxP+VedksSggzPI3rY00enonL+O+YEaeg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:47 2026 by rpki-client