Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ziOGoOcd5nFtk3yOJfT1KkH5CgU.roa
File: ziOGoOcd5nFtk3yOJfT1KkH5CgU.roa (raw, json)
Hash identifier: oaxjj7CW+H/HBW1DoIta3mBGSj9+QZlLLimVE4jrps0=
Subject key identifier: CE:23:86:A0:E7:1D:E6:71:6D:93:7C:8E:25:F4:F5:2A:41:F9:0A:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0AEC9FBF66BFD85749F919831615AC373
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ziOGoOcd5nFtk3yOJfT1KkH5CgU.roa
Signing time: Thu 17 Sep 2026 09:54:27 +0000
ROA not before: Thu 17 Sep 2026 09:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.224.0/24 maxlen: 24
62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 22 Sep 2026 18:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:c9:fb:f6:6b:fd:85:74:9f:91:98:31:61:5a:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 17 09:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce2386a0e71de6716d937c8e25f4f52a41f90a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:d9:9d:11:1b:e4:2b:f7:7d:52:3f:2e:e5:
7a:0e:f2:d2:d3:62:b2:5c:bd:da:9c:48:a1:37:d2:
46:d9:4e:1e:b4:f8:47:c4:30:04:72:98:72:0d:26:
aa:a7:8f:c4:ce:9c:66:c8:92:28:5f:ad:3c:05:bb:
63:e6:39:2c:d2:94:2c:51:61:fd:ff:82:e6:16:7f:
5d:e3:67:c8:2f:80:cc:98:38:df:71:99:d6:bb:e0:
d7:36:94:c0:96:8d:95:e3:32:27:ec:f7:e2:07:06:
da:43:bf:9b:2c:ba:2f:c5:a5:e5:90:99:70:af:0f:
52:b1:0d:7c:54:74:0e:de:c4:3a:b8:c8:5d:56:40:
31:0d:74:dd:f0:41:4c:36:da:ab:e6:96:07:9f:79:
ed:9b:3c:f6:d9:5b:d2:97:39:08:5e:f6:24:5d:05:
6e:60:d5:8d:5c:6f:20:f7:e7:47:7c:0d:dc:c8:98:
09:0c:ef:aa:31:29:cb:3e:cf:df:24:7b:6e:23:f5:
bb:e9:a0:26:18:e4:55:d7:3b:54:bd:e4:f5:b3:b4:
b1:6c:25:95:9f:76:56:a8:57:82:68:0f:15:28:c2:
75:8d:30:dc:16:de:19:e2:f4:62:c8:3b:af:fc:25:
05:08:11:a1:b8:93:5d:06:7e:52:3f:94:0c:08:b2:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:86:A0:E7:1D:E6:71:6D:93:7C:8E:25:F4:F5:2A:41:F9:0A:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ziOGoOcd5nFtk3yOJfT1KkH5CgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.200.0/24
193.124.202.0/24
193.124.206.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.1.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.10.0/23
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
71:79:4b:f9:91:b8:49:40:24:5d:fd:2a:7e:a8:ca:2d:00:c5:
e9:26:5a:f4:8d:08:71:96:06:18:f7:47:34:e3:9c:d5:6a:3e:
21:cb:d2:27:b6:4e:38:4d:ff:5c:e6:e3:9b:df:3a:31:2d:56:
14:b5:c5:ab:7e:86:79:99:98:13:44:10:06:01:26:d9:6b:13:
76:e4:d2:7b:77:2b:f6:f5:30:a3:3a:92:c6:1f:3f:b8:b5:3a:
d5:32:f1:07:a0:ff:45:d6:72:56:72:0e:f8:09:d2:32:c6:8e:
ab:31:31:2c:22:7f:7f:9a:27:b9:db:b4:f2:5d:b2:a6:c8:92:
83:3f:6d:82:78:17:a3:8d:36:16:a6:7d:3c:22:f5:cb:e7:f0:
95:6c:8a:c9:67:a4:a4:27:d8:0d:a2:43:b4:03:63:2f:00:9b:
aa:47:a2:24:fb:17:a7:f5:b9:c4:ed:6e:16:9c:14:2f:66:6e:
7c:10:8b:5a:2b:f0:a5:ae:29:98:ec:e7:03:ea:f4:77:2e:ae:
40:cd:d2:58:a5:1b:2e:80:50:24:1b:48:4b:9c:65:6a:38:f9:
74:e5:e7:ad:30:7e:4b:1b:32:75:1e:72:8a:e7:cd:25:c3:af:
cb:af:17:c9:b9:99:2b:1e:38:c2:de:1b:87:d0:24:b9:42:fb:
c4:3d:15:37
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAaCuyfv2a/2FdJ+RmDFhWsNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTE3MDk1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTIzODZhMGU3MWRlNjcxNmQ5MzdjOGUyNWY0ZjUyYTQxZjkwYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6zZnREb5Cv3fVI/LuV6DvLS02Ky
XL3anEihN9JG2U4etPhHxDAEcphyDSaqp4/EzpxmyJIoX608Bbtj5jks0pQsUWH9
/4LmFn9d42fIL4DMmDjfcZnWu+DXNpTAlo2V4zIn7PfiBwbaQ7+bLLovxaXlkJlw
rw9SsQ18VHQO3sQ6uMhdVkAxDXTd8EFMNtqr5pYHn3ntmzz22VvSlzkIXvYkXQVu
YNWNXG8g9+dHfA3cyJgJDO+qMSnLPs/fJHtuI/W76aAmGORV1ztUveT1s7SxbCWV
n3ZWqFeCaA8VKMJ1jTDcFt4Z4vRiyDuv/CUFCBGhuJNdBn5SP5QMCLIlHQIDAQAB
o4IDaTCCA2UwHQYDVR0OBBYEFM4jhqDnHeZxbZN8jiX09SpB+QoFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvemlPR29PY2Q1bkZ0azN5T0pmVDFLa0g1Q2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfQYIKwYBBQUHAQcBAf8EggFsMIIBaDCCAU4EAgABMIIB
RgMEAD5M4AMEAD5M5gMEALlICgMEAMB8vgMEAMF8BQMEAMF8BwMEAMF8yAMEAMF8
ygMEAMF8zgMEAMI6OgMEAMI6QwMEAMI6mwMEAMJXAQMEAMJXAwMEAcJXBgMEAMJX
NQMEAMJXOwMEAMJXQwMEAMJXUTAMAwQAwld3AwQAwld4AwQAwld6AwQAwleIAwQA
wlegAwQAwlejAwQAwlesAwQAwlezAwQBwle2AwQAwle5MAwDBADCV9MDBADCV9QD
BADCV+cwDAMEAMKHFwMEAMKHGDAMAwQAwzo3AwQAwzo4AwQBw4UYAwQAw4UdMAwD
BAPDhSgDBADDhSoDBAHDhTIDBADDhToDBADDhUgDBAHDhVwwDAMEANTA8QMEANTA
8gMEANTA+wMEANTBAAMEAdTBCgMEANTBDzAMAwQB1MEaAwQA1MEcMBQEAgACMA4D
BQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEAcXlL+ZG4SUAkXf0qfqjK
LQDF6SZa9I0IcZYGGPdHNOOc1Wo+IcvSJ7ZOOE3/XObjm986MS1WFLXFq36GeZmY
E0QQBgEm2WsTduTSe3cr9vUwozqSxh8/uLU61TLxB6D/RdZyVnIO+AnSMsaOqzEx
LCJ/f5onudu08l2ypsiSgz9tgngXo402FqZ9PCL1y+fwlWyKyWekpCfYDaJDtANj
LwCbqkeiJPsXp/W5xO1uFpwUL2ZufBCLWivwpa4pmOznA+r0dy6uQM3SWKUbLoBQ
JBtIS5xlajj5dOXnrTB+SxsydR5yiufNJcOvy68XybmZKx44wt4bh9AkuUL7xD0V
Nw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:01 2026 by rpki-client