Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_gcUOAPUfKGiBfq1X-M3PSQmHjU.roa
File: _gcUOAPUfKGiBfq1X-M3PSQmHjU.roa (raw, json)
Hash identifier: bc4gFCcY3QCLrpJSk/WwIJYT0TuIhh7apC49BLYqswk=
Subject key identifier: FE:07:14:38:03:D4:7C:A1:A2:05:FA:B5:5F:E3:37:3D:24:26:1E:35
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0A3E372B80F3B9088B3E394E398ED3887
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_gcUOAPUfKGiBfq1X-M3PSQmHjU.roa
Signing time: Tue 15 Sep 2026 07:06:27 +0000
ROA not before: Tue 15 Sep 2026 07:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/23 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Sep 2026 17:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:e3:72:b8:0f:3b:90:88:b3:e3:94:e3:98:ed:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 15 07:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe07143803d47ca1a205fab55fe3373d24261e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:77:80:39:b1:bb:e1:fd:1b:26:9b:9c:cb:
ca:94:39:8c:1b:69:13:78:08:b1:93:39:1b:f3:bc:
ed:d7:36:dd:7a:61:8f:5c:27:97:00:56:02:a5:60:
83:2f:23:fa:1f:e2:c1:57:95:01:14:0e:ee:c8:81:
0c:fd:51:36:9a:a7:a6:b5:d5:e2:28:b2:5b:7a:e0:
dc:84:58:b3:91:3a:e6:5f:a6:fd:f2:41:b9:b4:cf:
da:bb:4f:c1:62:95:64:a0:e7:8c:16:76:34:b5:11:
9e:06:d4:49:9f:de:c8:b3:52:57:04:c8:1a:c8:66:
b5:b0:3b:20:d4:8c:70:a9:ee:a2:43:34:d9:92:de:
b2:1d:98:49:2e:98:96:b0:e5:56:6e:ba:eb:44:2a:
11:e7:b8:2d:4e:03:8a:c0:47:43:27:41:65:bc:ab:
93:83:ae:d8:9c:00:23:c5:6f:e7:2c:d2:eb:56:11:
f6:20:f1:ba:ae:5a:f9:4b:6d:91:9e:47:8b:a8:e2:
09:ec:4f:98:6c:59:62:96:b7:27:6d:67:1b:42:c6:
d7:41:4d:5a:3d:80:66:32:ea:93:18:c5:f6:6f:50:
a7:62:0c:c5:cb:86:4e:c4:c4:28:9e:50:eb:2f:39:
e0:e5:9e:91:8c:df:08:a9:ba:4b:ec:9a:4a:1f:19:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:14:38:03:D4:7C:A1:A2:05:FA:B5:5F:E3:37:3D:24:26:1E:35
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_gcUOAPUfKGiBfq1X-M3PSQmHjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:4f:84:9a:41:0b:1c:17:af:67:cd:b4:13:6c:21:bf:51:e0:
39:c5:1c:bc:37:26:8f:b5:e0:05:25:b4:85:47:7f:c1:cb:e3:
c7:3a:3c:da:03:b2:f0:ae:c2:bd:d4:16:75:8f:5a:05:c9:8b:
33:00:ff:66:89:77:33:3d:c5:c3:84:de:4c:b0:f5:b1:b8:e8:
b9:f9:ed:ff:cf:55:f8:73:c5:79:ea:3f:8c:38:74:a2:28:6f:
9d:9f:8d:02:0b:f4:68:94:39:2d:3b:1e:d1:24:56:7c:a5:58:
9b:0d:bb:00:83:58:88:09:4f:a1:31:78:50:3f:e9:34:86:64:
1e:1b:a4:8f:7b:97:2f:9d:8b:b9:e0:d6:47:8f:2c:19:97:30:
33:7f:b5:14:7f:87:93:22:26:5c:1d:16:f2:89:6c:ab:a9:57:
24:1f:12:dc:f3:9e:0a:e7:3f:99:3b:e7:63:64:f1:fe:7c:75:
ef:04:b2:ad:49:06:80:dd:b0:3f:05:b6:25:fc:fb:7e:17:b3:
7c:d9:2d:e1:21:64:b3:be:da:4a:a8:25:3b:31:6a:90:64:6c:
e8:3f:54:fd:3e:f8:b6:84:0d:be:60:8b:5e:cc:25:bb:96:1a:
e0:95:1d:df:3e:58:f3:5b:ec:1e:91:b6:cb:88:b0:55:09:b1:
6a:6d:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:03 2026 by rpki-client