Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/mQ3LmOF7HzwAFxCHk9Cc4mU6eLQ.roa
File: mQ3LmOF7HzwAFxCHk9Cc4mU6eLQ.roa (raw, json)
Hash identifier: MfXZ6jYYXvSgUem1xMI0rhJoUmsAOmLEJ26hB8dE1Jo=
Subject key identifier: 99:0D:CB:98:E1:7B:1F:3C:00:17:10:87:93:D0:9C:E2:65:3A:78:B4
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A19F41FC6D624FD5A6B6E084D8C4BB7786
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/mQ3LmOF7HzwAFxCHk9Cc4mU6eLQ.roa
Signing time: Tue 03 Nov 2026 02:34:24 +0000
ROA not before: Tue 03 Nov 2026 02:34:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 189.13.164.0/24 maxlen: 24
189.13.165.0/24 maxlen: 24
189.13.166.0/24 maxlen: 24
189.13.167.0/24 maxlen: 24
189.13.168.0/24 maxlen: 24
189.13.174.0/24 maxlen: 24
189.13.175.0/24 maxlen: 24
189.13.176.0/24 maxlen: 24
189.13.177.0/24 maxlen: 24
189.13.178.0/24 maxlen: 24
189.13.181.0/24 maxlen: 24
189.13.182.0/24 maxlen: 24
189.13.183.0/24 maxlen: 24
189.13.184.0/24 maxlen: 24
189.13.185.0/24 maxlen: 24
189.13.186.0/24 maxlen: 24
189.13.187.0/24 maxlen: 24
189.13.188.0/24 maxlen: 24
189.13.189.0/24 maxlen: 24
189.13.190.0/24 maxlen: 24
189.13.191.0/24 maxlen: 24
189.13.192.0/24 maxlen: 24
189.13.193.0/24 maxlen: 24
189.13.194.0/24 maxlen: 24
189.13.195.0/24 maxlen: 24
189.13.196.0/24 maxlen: 24
189.13.197.0/24 maxlen: 24
189.13.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 01:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:41:fc:6d:62:4f:d5:a6:b6:e0:84:d8:c4:bb:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Nov 3 02:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990dcb98e17b1f3c0017108793d09ce2653a78b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:45:27:b6:22:db:ab:64:c0:0f:74:16:5f:
1d:b2:b5:7b:85:c3:a2:d0:39:e6:d7:f5:ae:0f:1f:
03:59:14:69:58:55:03:45:86:dc:3f:86:3f:b7:ba:
f5:17:5d:65:ad:b3:0e:31:40:fe:85:98:d7:29:a0:
d5:0d:4b:1e:ed:e5:8e:81:79:bf:d6:21:4f:03:cc:
e1:9a:e1:ab:2b:38:95:5b:dc:0c:dd:b1:49:be:79:
fb:74:4b:2d:a0:28:aa:19:1b:d8:e9:60:2f:4e:98:
1b:e2:3f:9b:1d:ec:9d:74:d3:e8:79:77:fc:3c:e8:
67:49:19:0e:67:74:28:e4:91:9b:74:88:85:10:2f:
bf:87:fc:51:7d:5e:78:1b:64:c3:28:b9:3f:90:5c:
ed:34:d5:d0:fe:97:62:61:80:2b:5e:ee:47:79:b5:
c6:08:b3:5d:83:9c:c0:d0:d4:72:32:60:3d:85:c2:
f9:4f:71:fd:3d:bf:85:a8:a4:ee:3d:45:36:d5:bf:
a8:b0:8f:dc:14:00:79:d2:69:42:a9:75:83:48:be:
4d:05:4b:c7:fa:13:b1:78:34:8a:09:85:ef:a8:76:
df:dd:f9:2b:9b:2b:9c:a0:8a:1f:4e:6a:15:bc:35:
18:39:c9:8c:f3:f1:7f:57:33:c6:3d:4e:f8:3b:7c:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:CB:98:E1:7B:1F:3C:00:17:10:87:93:D0:9C:E2:65:3A:78:B4
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/mQ3LmOF7HzwAFxCHk9Cc4mU6eLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.164.0-189.13.168.255
189.13.174.0-189.13.178.255
189.13.181.0-189.13.198.255
Signature Algorithm: sha256WithRSAEncryption
a8:ae:b5:06:3c:c0:85:ed:b3:74:fe:3a:5d:f5:e8:0c:7b:35:
2b:4d:75:fb:0a:31:24:ca:a9:b4:b4:bd:50:11:46:32:d7:76:
26:cd:65:22:dd:a2:b1:d1:c6:29:11:30:9c:7b:c7:de:f5:12:
10:9b:b2:de:63:86:1e:eb:c0:0c:c7:b0:a5:c5:e4:2e:3a:c4:
31:9d:6e:5c:90:d0:eb:8f:81:15:5f:85:c7:6c:45:c6:7d:1b:
e4:cf:53:bd:a4:61:de:fb:8a:2f:b1:b4:17:53:c3:cc:2b:89:
53:17:a2:8b:6e:a8:97:87:64:4b:89:8e:9d:25:4d:ed:cf:a4:
60:85:72:c5:49:34:b8:99:bf:68:0a:10:6e:44:29:20:3a:e0:
ed:5c:34:1c:46:3f:22:cf:29:dd:a8:05:8a:46:0e:c6:c0:19:
98:9f:ae:64:16:dc:af:f0:45:a4:12:f6:9e:70:d7:dd:29:84:
89:1b:7d:a0:34:7d:57:26:f6:25:75:25:8e:4b:8d:1a:1f:65:
aa:d7:ef:c6:ef:3b:f8:c4:ba:2d:ff:67:fc:27:7b:79:cd:d5:
c4:24:1c:2d:f5:c9:8a:92:ca:bf:c1:0e:14:39:8c:43:36:58:
aa:36:a7:b9:8d:b6:58:07:02:6d:1e:6c:5d:30:55:36:bc:93:
db:da:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:52 2026 by rpki-client