Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Etpy5hRIAeWRoOWzTCAKLp4DbPw.roa
File: Etpy5hRIAeWRoOWzTCAKLp4DbPw.roa (raw, json)
Hash identifier: b8eLT3c1QH1LXu+TGVc5f2zWEZxstkak9AtijCTzuZw=
Subject key identifier: 12:DA:72:E6:14:48:01:E5:91:A0:E5:B3:4C:20:0A:2E:9E:03:6C:FC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A180E57D7407CE0B50245655FA3844073C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Etpy5hRIAeWRoOWzTCAKLp4DbPw.roa
Signing time: Wed 28 Oct 2026 05:04:45 +0000
ROA not before: Wed 28 Oct 2026 05:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.172.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.229.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.231.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
85.118.164.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Nov 2026 21:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e5:7d:74:07:ce:0b:50:24:56:55:fa:38:44:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 05:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12da72e6144801e591a0e5b34c200a2e9e036cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:76:db:1d:9d:23:1c:14:69:51:ff:a0:63:
24:b6:12:0a:5d:6f:25:ad:0a:50:9c:50:07:47:56:
9c:5e:b5:9a:60:3e:f5:b5:f5:30:1d:83:f7:f9:c5:
e0:04:ad:1e:17:6e:31:68:52:ad:c6:9a:e4:47:ce:
7a:db:6f:43:53:f4:b2:6f:18:f2:99:72:e6:be:79:
68:7a:5c:54:b5:37:9e:c2:68:13:8b:63:13:fe:a5:
ea:40:d3:b9:df:87:8e:da:19:d8:5f:b4:0f:7f:e9:
38:91:a5:b2:fe:7c:7a:2f:42:7a:41:0b:c1:43:4c:
34:51:82:03:33:35:2e:68:58:ac:d4:91:56:8c:5c:
fc:9d:50:d8:17:4d:12:68:a5:c3:13:ab:dd:bc:e4:
9b:5a:86:d3:b0:a3:7a:d2:d4:9d:02:da:3e:4f:18:
ad:9a:56:99:3c:c4:cd:dc:bc:b8:5a:63:5d:11:a7:
c2:e5:ff:83:b7:1b:91:a0:e4:08:f6:0a:78:37:bd:
52:1e:14:1f:7e:29:e2:d9:88:8b:47:ce:c0:d6:41:
31:2e:a5:61:63:6a:af:39:51:17:ff:5a:25:19:df:
97:1f:e0:e6:4e:40:b0:87:93:2f:c3:50:1f:4c:64:
70:76:e1:e4:fc:93:3f:61:1b:1c:9a:90:cc:71:5c:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DA:72:E6:14:48:01:E5:91:A0:E5:B3:4C:20:0A:2E:9E:03:6C:FC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Etpy5hRIAeWRoOWzTCAKLp4DbPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.172.0/24
5.175.209.0/24
5.175.212.0/24
5.175.229.0/24
5.231.110.0/24
5.231.124.0/24
5.231.231.0/24
5.231.241.0/24
85.118.164.0/24
89.106.87.0/24
89.144.40.0/24
94.249.181.0/24
94.249.226.0/24
94.249.238.0/24
94.249.243.0/24
178.18.149.0/24
178.18.152.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:73:e5:df:4c:e1:57:ea:47:c4:16:b5:ae:7f:43:1f:ed:
22:94:f4:b7:04:73:06:95:69:ed:41:c1:da:cb:9e:d4:e4:4d:
15:f4:b4:cb:5c:88:e7:21:2f:fd:fc:e5:b3:e7:24:c3:91:3a:
d8:1e:38:fa:a5:57:cc:05:88:7d:b4:75:b7:b2:84:80:54:4e:
86:eb:bc:77:eb:7a:89:d5:f1:5c:54:d3:11:a6:d2:7a:2e:45:
7b:cc:66:45:34:c8:54:47:09:e6:ef:6b:2a:67:26:e5:03:00:
da:f8:5e:75:27:d1:37:a4:e6:24:46:66:ea:f8:58:15:ea:1e:
1d:b1:60:06:b0:59:26:be:1f:4b:93:c3:8e:95:0b:82:e6:ea:
29:fe:db:e1:51:85:fc:d4:51:17:38:a2:cf:31:54:55:a1:f6:
0b:17:fb:ca:b9:47:04:16:74:f5:71:12:b8:d0:e3:53:66:35:
b4:f0:08:41:30:a1:25:04:58:b5:24:cb:51:5d:ec:71:24:52:
33:71:63:08:81:a1:f1:94:e7:46:8c:7f:1e:24:da:83:e9:76:
2d:25:e1:85:c3:4e:78:f6:e3:9e:8e:4b:4f:70:96:a4:c7:65:
62:60:fc:9a:cb:92:ac:1d:d8:df:28:21:3f:a8:3f:a8:68:04:
c6:77:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:30:04 2026 by rpki-client