Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20383334.roa
File: 38302e37312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pJrBh0JQplGdeKAWworUkD6iN1/3zc8tubaluK9yFUw=
Subject key identifier: 08:32:A7:8A:A1:5C:CD:06:69:8F:41:59:75:E3:E3:E1:F5:B7:C5:81
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0DF2F820683F5C414E10927770383570CD193C3C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Sun 08 Nov 2026 18:50:46 +0000
ROA not before: Sun 08 Nov 2026 18:45:46 +0000
ROA not after: Sun 07 Nov 2027 18:50:46 +0000
asID: 834
IP address blocks: 80.71.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 14:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f2:f8:20:68:3f:5c:41:4e:10:92:77:70:38:35:70:cd:19:3c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 8 18:45:46 2026 GMT
Not After : Nov 7 18:50:46 2027 GMT
Subject: CN=0832A78AA15CCD06698F415975E3E3E1F5B7C581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:46:8f:c5:30:30:8f:c4:cf:f9:63:da:99:
bf:90:b1:49:c3:31:84:f9:b2:a1:cb:55:bf:a4:5a:
a3:e9:51:09:9a:5c:b2:57:68:29:e6:2f:02:57:43:
18:87:96:a7:27:21:97:c0:55:a0:d3:7c:79:ad:e6:
cc:7d:f9:f7:0f:65:bb:8f:a0:30:a1:de:02:19:b1:
42:d1:17:38:17:77:ea:ef:97:0c:ed:ae:8e:28:6c:
f5:f2:e2:09:9c:eb:f0:8e:4c:2d:3e:dd:5f:76:cf:
b6:1d:bc:f2:eb:cc:bb:98:d7:62:9f:a7:a9:f4:8c:
64:d5:17:c7:25:79:55:42:70:df:6c:09:47:80:89:
38:55:d0:2f:af:52:8d:94:43:72:29:f8:63:95:02:
39:bf:85:2a:c1:63:d0:ca:c0:df:a3:e4:e2:87:42:
f4:1a:3f:a9:f9:27:16:92:b5:97:1c:fc:93:5d:97:
b1:47:0b:57:f0:a8:b5:5d:36:3e:62:b7:38:35:df:
15:1e:c5:fa:c5:cd:36:96:c0:cd:04:44:ec:3c:2b:
ef:57:17:f5:7b:25:9f:ab:9e:e9:ef:e9:b2:c4:3b:
f1:9a:0d:02:fb:74:84:13:22:cb:9d:09:84:97:65:
e7:2a:1e:e5:00:79:67:90:25:d6:2e:dc:32:7a:28:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:A7:8A:A1:5C:CD:06:69:8F:41:59:75:E3:E3:E1:F5:B7:C5:81
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.148.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f3:1d:f5:1f:23:84:27:42:8b:92:cd:56:5c:42:1e:7a:98:
56:84:80:cb:a0:71:1f:f4:0a:c4:0c:6a:a1:50:91:84:39:f3:
39:1f:64:1c:f1:ff:49:8d:71:67:06:49:82:91:d1:c3:70:da:
06:34:7b:f5:99:6f:e0:96:b0:8c:b8:13:67:57:43:b2:e1:03:
ac:f0:e6:09:71:87:8f:34:bc:5b:43:da:67:a8:78:cf:1c:11:
43:74:7e:f9:0c:23:c9:1e:b6:93:e6:b0:e6:35:cf:3f:78:4c:
e5:47:18:1b:7e:53:dd:08:28:77:ae:1a:81:1c:df:50:27:57:
66:01:b8:11:ed:82:c1:bd:ce:62:a7:76:d7:75:1c:69:9e:9c:
d9:a9:77:35:66:2e:b2:4e:50:59:4e:a3:d5:d8:48:0f:15:92:
03:ab:19:1d:4b:4b:b4:50:47:0d:83:e2:1c:7a:1a:04:c5:e5:
3b:00:1a:96:d9:f6:84:95:02:5f:e0:47:78:f9:e9:b8:f5:ad:
5d:17:e2:12:90:dc:d1:e3:80:08:3a:05:62:d9:6c:82:55:06:
88:91:13:d8:96:de:81:51:00:5e:7b:0e:71:45:d8:89:f0:8c:
a9:a1:3b:af:61:9a:67:f2:fb:b6:0e:9b:b7:75:cc:c1:98:38:
46:a8:44:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDfL4IGg/XEFOEJJ3cDg1cM0ZPDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjExMDgxODQ1NDZaFw0yNzExMDcxODUwNDZaMDMxMTAvBgNV
BAMTKDA4MzJBNzhBQTE1Q0NEMDY2OThGNDE1OTc1RTNFM0UxRjVCN0M1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWkaPxTAwj8TP+WPamb+QsUnD
MYT5sqHLVb+kWqPpUQmaXLJXaCnmLwJXQxiHlqcnIZfAVaDTfHmt5sx9+fcPZbuP
oDCh3gIZsULRFzgXd+rvlwztro4obPXy4gmc6/COTC0+3V92z7YdvPLrzLuY12Kf
p6n0jGTVF8cleVVCcN9sCUeAiThV0C+vUo2UQ3Ip+GOVAjm/hSrBY9DKwN+j5OKH
QvQaP6n5JxaStZcc/JNdl7FHC1fwqLVdNj5itzg13xUexfrFzTaWwM0EROw8K+9X
F/V7JZ+rnunv6bLEO/GaDQL7dIQTIsudCYSXZecqHuUAeWeQJdYu3DJ6KLBVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCDKniqFczQZpj0FZdePj4fW3xYEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNzMxMmUz
MTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABQ
R5QwDQYJKoZIhvcNAQELBQADggEBAGnzHfUfI4QnQouSzVZcQh56mFaEgMugcR/0
CsQMaqFQkYQ58zkfZBzx/0mNcWcGSYKR0cNw2gY0e/WZb+CWsIy4E2dXQ7LhA6zw
5glxh480vFtD2meoeM8cEUN0fvkMI8ketpPmsOY1zz94TOVHGBt+U90IKHeuGoEc
31AnV2YBuBHtgsG9zmKndtd1HGmenNmpdzVmLrJOUFlOo9XYSA8VkgOrGR1LS7RQ
Rw2D4hx6GgTF5TsAGpbZ9oSVAl/gR3j56bj1rV0X4hKQ3NHjgAg6BWLZbIJVBoiR
E9iW3oFRAF57DnFF2InwjKmhO69hmmfy+7YOm7d1zMGYOEaoRE4=
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:38 2026 by rpki-client