Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TrmqUheCm_Tlu8_AVS2glWh0TXU.roa
File: TrmqUheCm_Tlu8_AVS2glWh0TXU.roa (raw, json)
Hash identifier: 2XRkLJHR9mP5GGuizHA/NSxmx3h3P7bJ1PcqCPU6jrk=
Subject key identifier: 4E:B9:AA:52:17:82:9B:F4:E5:BB:CF:C0:55:2D:A0:95:68:74:4D:75
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BF3133BD3B0A945729087382CDDA0DB9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TrmqUheCm_Tlu8_AVS2glWh0TXU.roa
Signing time: Sun 20 Sep 2026 14:21:07 +0000
ROA not before: Sun 20 Sep 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.196.0/24 maxlen: 24
62.105.198.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.58.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.56.0/22 maxlen: 24
194.122.79.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.150.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
212.189.27.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 03:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:31:33:bd:3b:0a:94:57:29:08:73:82:cd:da:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eb9aa5217829bf4e5bbcfc0552da09568744d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:ce:eb:d1:c1:81:c5:44:55:2d:6c:bd:ea:
6d:24:9a:8e:b6:34:91:35:68:20:59:4f:a3:eb:aa:
87:f2:61:e8:4e:ee:80:21:79:f9:e9:a6:40:59:f1:
e9:72:8a:c9:a0:76:bc:5d:2b:55:fb:ea:16:1b:2d:
a2:24:37:1b:7c:75:7e:d1:e4:65:73:4d:aa:a3:97:
1a:09:78:48:65:30:a7:0a:c2:78:31:22:04:0d:10:
a4:6e:2a:88:1f:77:64:3c:f3:1f:3f:b9:5a:cc:8f:
9c:55:6a:7d:0e:05:8a:ef:6b:60:fc:f7:bf:cd:98:
0d:be:8b:cb:86:77:ae:c6:86:73:9f:14:58:d3:a0:
42:09:1c:e8:98:62:03:6b:22:05:c1:d3:c6:42:b9:
4b:03:10:2d:24:90:fc:a7:c6:3a:d2:fe:4b:75:82:
90:b1:be:8a:b0:8a:10:6c:07:75:d7:30:82:ff:1d:
c6:55:99:6b:f6:e0:3c:c5:67:b5:e8:6c:39:13:29:
dc:e4:37:d6:48:57:9f:d6:dc:27:16:2c:43:ba:2d:
eb:e8:33:57:7c:6b:64:e0:93:f9:52:e5:d6:6d:08:
42:df:29:5c:5f:6b:e7:75:be:7e:10:cb:4c:51:6f:
76:9e:38:47:a9:44:4e:97:81:b2:3e:0c:eb:76:07:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:AA:52:17:82:9B:F4:E5:BB:CF:C0:55:2D:A0:95:68:74:4D:75
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TrmqUheCm_Tlu8_AVS2glWh0TXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.196.0/24
62.105.198.0/24
62.132.116.0/24
77.67.58.0/24
77.67.125.0/24
194.45.47.0/24
194.77.26.0/24
194.77.56.0/22
194.122.79.0/24
194.231.128.0-194.231.139.255
194.231.150.0/24
194.231.152.0/22
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
212.189.27.0/24
212.189.57.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.103.0/24
212.189.115.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:97:33:82:3e:6f:61:1e:69:70:99:59:43:ab:71:9a:82:b0:
aa:3b:52:58:32:93:9c:5f:9b:2f:e6:55:bd:fc:03:ea:fb:cc:
5c:47:53:f3:2e:6b:85:72:0f:8c:5f:b4:34:ef:e5:a0:c5:87:
4f:3b:bd:41:b9:85:20:f8:13:c4:eb:ce:63:fe:42:a3:3d:fe:
62:64:06:dc:bf:2d:cf:0d:74:eb:ee:34:09:87:27:50:09:1c:
7c:f9:6d:96:38:c8:bf:5a:88:af:50:2b:82:b5:c2:12:a0:c8:
85:bc:43:84:af:47:20:68:df:7f:b9:52:81:8d:87:0c:6e:ec:
8a:0b:8f:3a:82:42:85:2f:65:95:fd:14:9a:cf:fd:15:99:4f:
d2:f1:63:a8:10:8e:8f:91:a0:e6:a2:fb:ac:11:84:53:0d:5f:
f7:77:7c:2a:2c:e8:e7:6c:c5:0f:8f:2e:a4:7d:5d:cf:ac:2e:
51:e5:5c:8d:56:c5:91:b5:ec:c9:86:ed:65:2f:3f:8b:b1:c7:
2d:f8:39:d6:4e:2c:1a:13:0f:11:03:46:fa:1d:c8:a1:9a:bd:
2c:1a:cf:f1:6c:be:37:4d:37:63:5c:8f:eb:1b:c9:4b:a4:3d:
de:63:68:a9:33:88:54:ef:5b:7c:e1:df:80:e5:b6:ff:07:20:
78:97:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:09 2026 by rpki-client