Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/8ZZhWaADGWxtMT0YrvEHACw6NG0.roa
File: 8ZZhWaADGWxtMT0YrvEHACw6NG0.roa (raw, json)
Hash identifier: scqLw4xLiOqjzXoY7XpCNMaYM3k43oCKfVxbH+UBcYc=
Subject key identifier: F1:96:61:59:A0:03:19:6C:6D:31:3D:18:AE:F1:07:00:2C:3A:34:6D
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0AA4201949A85D75DB2ADED010852C44E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/8ZZhWaADGWxtMT0YrvEHACw6NG0.roa
Signing time: Wed 16 Sep 2026 12:47:27 +0000
ROA not before: Wed 16 Sep 2026 12:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/23 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
85.202.172.0/22 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/23 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/22 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.112.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.118.0/23 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Sep 2026 04:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:42:01:94:9a:85:d7:5d:b2:ad:ed:01:08:52:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 16 12:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1966159a003196c6d313d18aef107002c3a346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:2e:d8:97:63:6b:67:4c:7a:fa:85:a8:bd:
e7:e4:b3:2c:59:36:47:3f:60:1f:3e:6c:2c:c3:1a:
e0:3d:57:07:b9:a9:af:fe:46:f2:2a:71:ed:84:41:
c0:49:96:36:ae:15:07:6b:cd:16:51:c5:34:db:5c:
b9:e7:8c:44:db:dd:b9:e2:f3:e5:63:60:65:42:da:
fc:a4:51:1e:c5:7f:8c:38:85:99:8e:e2:3d:64:11:
e6:c6:b2:bd:88:ab:13:0d:d2:c3:02:08:65:20:e9:
19:6c:45:11:a9:5d:34:26:fd:a8:34:bc:93:5e:b5:
67:bb:57:55:53:a3:38:53:6c:33:ab:7e:8c:84:77:
06:d0:1f:73:e4:7c:3c:fe:6b:bc:22:dc:f1:e2:7a:
1a:ca:60:2a:0e:e2:8a:17:d7:83:8d:bb:51:75:3f:
60:88:6c:33:1c:8e:93:db:20:cf:5d:ee:d4:99:35:
06:1e:4d:00:a8:ec:29:d7:70:73:44:3b:b7:a8:60:
3d:8a:1c:b5:a7:14:d3:d4:70:88:8e:b9:a2:b3:1b:
e5:a2:f5:18:ce:e2:b5:1e:f2:b6:d4:18:20:bd:2f:
b5:d9:82:91:2f:c2:38:67:22:30:57:92:5c:14:0a:
81:f4:75:c1:7e:a2:77:6d:18:c0:ce:8f:ff:67:03:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:61:59:A0:03:19:6C:6D:31:3D:18:AE:F1:07:00:2C:3A:34:6D
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/8ZZhWaADGWxtMT0YrvEHACw6NG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/23
61.14.227.0/24
62.106.64.0/24
79.110.176.0/21
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.163.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/22
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0/24
185.235.122.0/24
193.3.16.0/24
193.31.112.0/24
193.31.115.0/24
193.163.35.0/24
193.176.116.0/24
193.176.118.0/23
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
46:79:61:9c:44:53:cf:cb:bd:1c:5a:ea:6c:81:40:a8:42:ba:
48:aa:1c:8c:26:4a:91:b5:2c:84:80:07:30:f3:d1:b5:fc:33:
98:13:b3:73:5a:b8:d0:a4:f2:aa:73:3c:79:81:f8:ae:75:50:
0f:3f:7e:63:a9:4b:31:49:5f:5b:9d:74:c0:fe:a9:7e:d9:eb:
99:f5:a0:e1:92:99:d3:ef:cd:c1:99:63:a5:d0:b4:61:b5:49:
cd:32:ea:d7:a4:34:44:10:47:4c:d9:22:40:1d:d0:a7:b0:ae:
49:9b:8b:b9:14:ed:ac:f1:fa:8b:14:8e:16:fb:93:41:6c:ed:
cf:86:3c:ec:db:af:63:9c:a9:29:42:44:f1:59:08:22:cb:4b:
62:89:98:34:c5:62:63:3d:ed:bf:36:ab:d3:0f:52:a7:e6:df:
19:32:d0:50:fc:6c:e9:94:12:62:b1:d0:45:78:2b:15:24:cf:
e4:f3:ec:f4:e2:ff:73:2a:6f:41:3f:f7:3e:5f:da:07:85:71:
06:4c:e1:1c:0d:9f:e4:cb:12:38:26:32:ab:e0:ac:bb:5f:c3:
91:a2:98:62:91:1c:2d:c4:b7:43:9c:da:e9:53:44:c4:75:55:
35:7f:3b:8c:3a:57:7c:fe:53:e6:81:2d:c6:2f:ba:32:4b:55:
d6:f2:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:32:47 2026 by rpki-client