Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/RbDv9om36VGdfj4sP2hWAWIrprM.roa
File: RbDv9om36VGdfj4sP2hWAWIrprM.roa (raw, json)
Hash identifier: j16gY87VazEcMx90i+9GsqFwQt4sTzrz7mpLoM5YdNM=
Subject key identifier: 45:B0:EF:F6:89:B7:E9:51:9D:7E:3E:2C:3F:68:56:01:62:2B:A6:B3
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019D6D1B9F81935CC1B058F5142A03C84D02
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/RbDv9om36VGdfj4sP2hWAWIrprM.roa
Signing time: Wed 08 Apr 2026 12:40:19 +0000
ROA not before: Wed 08 Apr 2026 12:40:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211381
IP address blocks: 188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
188.137.181.0/24 maxlen: 24
188.137.182.0/24 maxlen: 24
188.137.183.0/24 maxlen: 24
188.137.224.0/24 maxlen: 24
188.137.225.0/24 maxlen: 24
188.137.227.0/24 maxlen: 24
188.137.228.0/24 maxlen: 24
188.137.229.0/24 maxlen: 24
188.137.230.0/24 maxlen: 24
188.137.231.0/24 maxlen: 24
188.137.232.0/24 maxlen: 24
188.137.233.0/24 maxlen: 24
188.137.234.0/24 maxlen: 24
188.137.235.0/24 maxlen: 24
188.137.236.0/24 maxlen: 24
188.137.237.0/24 maxlen: 24
188.137.238.0/24 maxlen: 24
188.137.239.0/24 maxlen: 24
188.137.240.0/24 maxlen: 24
188.137.241.0/24 maxlen: 24
188.137.242.0/24 maxlen: 24
188.137.243.0/24 maxlen: 24
188.137.245.0/24 maxlen: 24
188.137.246.0/24 maxlen: 24
188.137.247.0/24 maxlen: 24
188.137.248.0/24 maxlen: 24
188.137.249.0/24 maxlen: 24
188.137.250.0/24 maxlen: 24
188.137.251.0/24 maxlen: 24
188.137.252.0/24 maxlen: 24
188.137.253.0/24 maxlen: 24
188.137.254.0/24 maxlen: 24
188.137.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 14:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:1b:9f:81:93:5c:c1:b0:58:f5:14:2a:03:c8:4d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Apr 8 12:40:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45b0eff689b7e9519d7e3e2c3f685601622ba6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:9d:8c:b6:66:b0:97:21:34:e7:16:25:3b:
8b:b3:2b:8c:8a:47:53:b0:6d:3c:d1:98:ed:ef:09:
cf:7c:73:9e:8f:9f:53:c4:12:55:09:9b:a1:41:13:
cb:58:23:cf:a1:73:13:1a:12:b4:1d:4f:48:75:6b:
c5:11:4a:72:83:79:b2:c4:0f:09:f0:51:43:71:ec:
0b:fd:38:93:6f:77:38:63:6f:9b:b0:c3:a2:df:3b:
2f:66:1e:68:42:fc:c3:e3:d7:3e:53:d8:a9:74:be:
23:93:75:f9:78:91:81:51:86:7c:16:5e:4e:13:48:
cc:56:db:56:f6:ef:a4:e7:f3:91:f7:43:cb:55:3e:
ba:94:26:85:de:ec:52:38:92:5f:11:9d:1f:79:af:
06:9b:20:5c:21:c7:39:07:5b:d4:57:5f:9c:fa:09:
56:ab:fb:4b:34:b7:ad:aa:ba:68:3f:f5:f1:54:dc:
5f:1c:af:85:e1:f8:69:49:47:ec:61:f1:d9:bd:15:
6b:a3:2e:0b:63:29:3a:8b:e9:90:10:f0:46:54:8a:
a9:de:e9:aa:72:29:9a:d7:00:e3:a8:14:20:39:fa:
12:b3:09:53:8a:ef:ae:f7:3c:2d:da:00:71:0e:7c:
c3:a1:d9:2b:c3:f1:e5:d1:1f:8c:d5:18:57:7b:d2:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:EF:F6:89:B7:E9:51:9D:7E:3E:2C:3F:68:56:01:62:2B:A6:B3
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/RbDv9om36VGdfj4sP2hWAWIrprM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.176.0/23
188.137.179.0-188.137.183.255
188.137.224.0/23
188.137.227.0-188.137.243.255
188.137.245.0-188.137.255.255
Signature Algorithm: sha256WithRSAEncryption
49:3d:e7:67:14:f3:1d:b2:90:de:d1:b9:61:68:ee:df:cd:44:
ee:3a:82:38:18:7c:97:c7:73:c7:7e:86:9b:10:66:b5:a8:4b:
79:5a:63:5d:92:35:cd:33:99:eb:e5:f5:c5:92:13:e4:85:02:
b8:5d:f7:44:90:9b:17:05:44:eb:2c:e4:c7:8a:fe:f4:4d:ff:
a5:b1:d0:32:e5:a6:cb:6c:55:e9:73:7c:be:2c:98:6e:b8:34:
e2:d7:27:27:f8:7b:0d:b2:c6:ba:d6:05:37:90:12:32:3b:fe:
af:9e:ba:9c:8c:30:9a:52:4a:de:67:0b:76:47:75:ed:b8:38:
cb:dd:a8:38:92:b9:bf:94:15:ae:24:8a:92:2e:b7:1c:9e:b4:
58:84:0d:3f:40:f6:8d:48:97:31:52:f2:48:28:cc:d4:02:26:
db:4c:68:80:b6:f8:0e:ac:08:88:6a:d9:b2:1a:69:75:ee:4e:
5a:bb:3d:7c:23:bd:4d:21:8e:c1:bd:d4:26:19:26:2c:c0:79:
a4:9a:53:b3:53:00:a8:75:6a:c8:93:a0:6d:d9:26:8b:a2:77:
8c:01:2f:61:7f:e4:c5:fa:11:28:4c:ab:af:ab:21:db:ab:3c:
56:41:21:78:16:3f:a2:c4:6b:04:be:74:f0:5c:a9:c4:5a:9f:
47:f3:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:19 2026 by rpki-client