Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kWa3jS0hdXAYRiXfQJq67Lp5f90.roa
File: kWa3jS0hdXAYRiXfQJq67Lp5f90.roa (raw, json)
Hash identifier: IDVWu7prRlRumw+JF8lLHczKBYpTIphdv542gfPr74k=
Subject key identifier: 91:66:B7:8D:2D:21:75:70:18:46:25:DF:40:9A:BA:EC:BA:79:7F:DD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D94E6B30E85E4776BDD95117AB3FD9728
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kWa3jS0hdXAYRiXfQJq67Lp5f90.roa
Signing time: Thu 16 Apr 2026 06:07:20 +0000
ROA not before: Thu 16 Apr 2026 06:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.221.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.197.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 05:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:e6:b3:0e:85:e4:77:6b:dd:95:11:7a:b3:fd:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 16 06:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9166b78d2d217570184625df409abaecba797fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:f0:76:94:c1:4d:88:eb:49:09:a7:2d:d2:
da:c3:8f:2f:99:75:a1:37:81:52:59:76:ea:83:7b:
e0:e0:1b:6f:5b:9f:7a:04:ce:8c:ff:41:45:4c:76:
ca:5f:fe:b0:43:58:f0:75:7a:95:38:60:fe:53:06:
ec:c6:50:70:91:64:08:89:37:30:34:75:3e:a9:7d:
1c:4e:7a:73:67:55:54:2e:e8:b4:eb:68:e7:65:1e:
94:a9:3c:af:d4:15:fd:0a:97:7d:f6:f1:5b:a4:90:
6d:fa:a8:91:87:3e:4b:e2:33:ff:96:50:be:cb:e9:
a8:a2:c4:3d:5b:b5:24:1b:31:af:5c:33:ff:1c:a8:
90:89:40:3e:43:7a:9b:12:05:92:00:f4:cb:6b:3a:
49:39:bd:87:28:e5:66:8e:37:fa:42:54:53:9d:5e:
fb:10:a5:75:1a:c3:b8:02:28:2e:8f:35:88:dd:de:
41:61:6b:bc:09:60:ce:81:5f:c3:5f:93:c0:2d:58:
38:5a:8c:a2:c1:b4:87:e8:8f:d2:03:c3:4f:59:7f:
10:33:37:cc:11:26:77:25:dc:13:e8:9c:29:9f:31:
fd:6b:00:b8:ff:b9:d3:38:bd:21:be:fa:51:c4:14:
dd:9b:dc:96:e4:66:1e:df:af:9a:6c:30:36:11:e6:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:B7:8D:2D:21:75:70:18:46:25:DF:40:9A:BA:EC:BA:79:7F:DD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kWa3jS0hdXAYRiXfQJq67Lp5f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.37.0/24
109.121.45.0/24
178.219.6.0/24
178.253.221.0/24
178.253.229.0/24
185.47.91.0/24
188.255.197.0-188.255.198.255
212.69.8.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
53:04:8b:c2:0c:69:24:39:f9:7b:37:da:34:4d:7d:73:89:15:
d6:90:55:a4:6d:40:83:e7:83:bf:89:66:a4:c1:b8:bd:cb:4e:
6c:5c:b8:19:da:a3:4d:8b:db:48:45:55:8f:e9:11:f4:07:3a:
b3:b7:2c:60:0d:bc:bf:68:27:da:6b:aa:eb:4f:67:71:10:5b:
31:6b:de:d7:9f:1f:8d:96:fa:e8:6c:a6:47:d8:c6:b9:16:99:
48:07:ae:72:3d:08:31:95:4f:71:ac:1b:44:81:90:2a:42:4f:
4f:82:cf:1f:a0:86:ef:56:4d:54:60:18:fa:a3:ce:4d:bc:8d:
db:30:9a:a0:b7:ea:2d:81:52:63:4a:74:33:aa:4d:94:1f:3c:
14:48:6b:f1:26:58:32:f3:1d:32:27:f1:f5:2a:bf:61:01:bf:
0d:22:71:b9:94:77:b7:8d:c2:57:64:bf:8c:e9:e2:dc:05:aa:
6e:b0:87:3d:8f:2f:d9:e8:ac:26:a5:c7:e1:8a:f2:1d:02:1e:
c5:99:dd:6f:d8:c0:4c:09:b2:8e:9d:bd:fb:33:6a:2b:26:be:
31:7a:29:6e:15:26:cf:84:00:0d:16:34:88:bb:4b:d7:cd:1a:
c5:9b:09:f5:06:4f:39:18:8d:63:bc:b2:a4:a5:15:68:30:11:
8a:6d:72:3d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZ2U5rMOheR3a92VEXqz/ZcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNDE2MDYwNzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTY2Yjc4ZDJkMjE3NTcwMTg0NjI1ZGY0MDlhYmFlY2JhNzk3ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtDwdpTBTYjrSQmnLdLaw48vmXWh
N4FSWXbqg3vg4BtvW596BM6M/0FFTHbKX/6wQ1jwdXqVOGD+UwbsxlBwkWQIiTcw
NHU+qX0cTnpzZ1VULui062jnZR6UqTyv1BX9Cpd99vFbpJBt+qiRhz5L4jP/llC+
y+moosQ9W7UkGzGvXDP/HKiQiUA+Q3qbEgWSAPTLazpJOb2HKOVmjjf6QlRTnV77
EKV1GsO4AigujzWI3d5BYWu8CWDOgV/DX5PALVg4WoyiwbSH6I/SA8NPWX8QMzfM
ESZ3JdwT6JwpnzH9awC4/7nTOL0hvvpRxBTdm9yW5GYe36+abDA2Eeb8xQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFJFmt40tIXVwGEYl30Cauuy6eX/dMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEva1dhM2pTMGhkWEFZUmlYZlFKcTY3THA1ZjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAURIwAwQA
bXklAwQAbXktAwQAstsGAwQAsv3dAwQAsv3lAwQAuS9bMAwDBAC8/8UDBAC8/8YD
BADURQgDBADURQswDQYJKoZIhvcNAQELBQADggEBAFMEi8IMaSQ5+Xs32jRNfXOJ
FdaQVaRtQIPng7+JZqTBuL3LTmxcuBnao02L20hFVY/pEfQHOrO3LGANvL9oJ9pr
qutPZ3EQWzFr3tefH42W+uhspkfYxrkWmUgHrnI9CDGVT3GsG0SBkCpCT0+Czx+g
hu9WTVRgGPqjzk28jdswmqC36i2BUmNKdDOqTZQfPBRIa/EmWDLzHTIn8fUqv2EB
vw0icbmUd7eNwldkv4zp4twFqm6whz2PL9norCalx+GK8h0CHsWZ3W/YwEwJso6d
vfszaismvjF6KW4VJs+EAA0WNIi7S9fNGsWbCfUGTzkYjWO8sqSlFWgwEYptcj0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:45 2026 by rpki-client