Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xdSIEtF_uWdJcXIidAnL2FIXbAE.roa
File: xdSIEtF_uWdJcXIidAnL2FIXbAE.roa (raw, json)
Hash identifier: AAiEfWfz042Xx54cBtUbpZEG0Nn8hZUDJ2H0sXjTr+w=
Subject key identifier: C5:D4:88:12:D1:7F:B9:67:49:71:72:22:74:09:CB:D8:52:17:6C:01
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1A6C26063B2C280A011BDFA1CEDA13C19
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xdSIEtF_uWdJcXIidAnL2FIXbAE.roa
Signing time: Wed 04 Nov 2026 13:31:58 +0000
ROA not before: Wed 04 Nov 2026 13:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 9.247.52.0/24 maxlen: 24
9.247.64.0/24 maxlen: 24
9.247.86.0/24 maxlen: 24
9.247.92.0/24 maxlen: 24
9.247.136.0/24 maxlen: 24
9.247.157.0/24 maxlen: 24
9.247.164.0/24 maxlen: 24
9.247.169.0/24 maxlen: 24
9.247.174.0/24 maxlen: 24
9.247.178.0/24 maxlen: 24
9.247.217.0/24 maxlen: 24
9.247.221.0/24 maxlen: 24
9.247.225.0/24 maxlen: 24
9.247.239.0/24 maxlen: 24
9.247.245.0/24 maxlen: 24
9.247.253.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.62.0/24 maxlen: 24
78.17.221.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
104.143.217.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
153.76.202.0/24 maxlen: 24
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.151.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Nov 2026 04:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:c2:60:63:b2:c2:80:a0:11:bd:fa:1c:ed:a1:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 4 13:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5d48812d17fb967497172227409cbd852176c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:f3:8d:1b:7b:f7:14:19:2f:13:84:29:4b:
04:e0:e1:74:c6:cd:4f:a6:f1:c7:01:b2:13:f6:5a:
aa:57:43:f1:68:1c:07:9d:6f:d7:3b:db:e7:0b:ee:
ba:b1:77:3a:47:b9:52:3c:85:c2:e4:e4:bf:af:6c:
b8:52:e3:6b:8d:7b:36:fc:7d:b3:bb:bb:2c:35:69:
ce:e2:09:45:ef:a6:c6:d5:cd:ec:20:20:56:b8:99:
96:54:d0:f1:48:e6:47:8a:94:7a:3e:ef:cd:38:d5:
e3:8a:2a:89:54:33:8d:6d:e2:9d:b3:00:3d:64:ce:
21:62:97:0d:19:15:47:d2:16:28:94:8d:95:d9:ac:
08:a1:32:03:c4:21:1e:95:db:41:57:b4:f4:a1:d8:
74:ab:ce:a6:58:7d:8c:9a:3f:b5:68:dd:6a:f1:0b:
20:47:98:c6:bd:d7:27:e9:2d:91:a2:b3:a1:ec:1d:
50:b7:a1:b3:e4:b2:17:a1:e3:5f:c3:d6:67:e1:69:
9c:02:f2:fa:6f:0d:69:57:5e:ce:35:08:09:20:f8:
24:65:0f:b5:77:ff:04:0a:9a:25:50:56:46:69:ff:
06:8f:d7:6e:44:46:4a:5f:90:23:43:0a:69:7f:a5:
9d:75:61:e8:59:a2:d2:f7:73:6b:54:5c:5d:27:5d:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:88:12:D1:7F:B9:67:49:71:72:22:74:09:CB:D8:52:17:6C:01
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xdSIEtF_uWdJcXIidAnL2FIXbAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.52.0/24
9.247.64.0/24
9.247.86.0/24
9.247.92.0/24
9.247.136.0/24
9.247.157.0/24
9.247.164.0/24
9.247.169.0/24
9.247.174.0/24
9.247.178.0/24
9.247.217.0/24
9.247.221.0/24
9.247.225.0/24
9.247.239.0/24
9.247.245.0/24
9.247.253.0/24
77.81.100.0/24
78.17.26.0/24
78.17.62.0/24
78.17.221.0/24
89.34.106.0/24
89.37.194.0/24
93.114.183.0/24
104.143.217.0/24
140.225.194.0/23
140.225.215.0/24
153.76.198.0/24
153.76.202.0/24
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.151.0/24
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f7:4f:45:0f:91:63:95:4e:0f:45:54:78:cc:6e:16:c8:10:
de:ee:50:ef:ee:bf:f8:af:a5:b9:be:f7:92:c4:db:ba:ae:bb:
88:d3:5a:38:20:7e:81:c3:02:ba:cb:63:63:f2:7c:a6:a6:c6:
68:2f:1a:3e:a8:cb:8a:63:b4:75:5f:54:8a:ff:b4:14:40:57:
9a:1c:3b:8c:2a:be:eb:06:df:33:a5:8b:e2:4d:7e:a3:b1:42:
a1:8f:40:93:76:c9:89:85:fb:73:2e:b2:5a:45:67:ca:b0:0b:
af:a3:70:7e:f4:18:b9:62:6b:9d:af:9d:bd:7b:9d:83:72:b5:
22:5e:d7:14:73:46:14:7c:cc:ab:8f:fa:3f:f4:cd:42:34:f8:
5c:b8:49:b1:b8:35:fd:ca:1e:f0:c8:6f:21:56:dd:0e:e7:30:
e4:c0:b0:46:95:48:a8:62:44:bf:8f:38:20:05:f1:94:77:60:
76:e7:aa:2b:ee:c3:cc:f8:a6:83:62:83:f4:9c:1a:87:8f:d2:
35:95:ff:8f:88:53:c0:94:5a:f3:61:8b:9a:f4:f9:33:8f:82:
d1:87:5f:63:d0:cc:f5:80:58:a7:a3:b9:21:79:c3:ea:ce:f1:
b4:a3:a0:53:bb:3c:af:29:44:19:ab:9c:80:ee:14:5e:44:f5:
d9:82:a4:4d
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAaGmwmBjssKAoBG9+hztoTwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTA0MTMzMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWQ0ODgxMmQxN2ZiOTY3NDk3MTcyMjI3NDA5Y2JkODUyMTc2YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrrzjRt79xQZLxOEKUsE4OF0xs1P
pvHHAbIT9lqqV0PxaBwHnW/XO9vnC+66sXc6R7lSPIXC5OS/r2y4UuNrjXs2/H2z
u7ssNWnO4glF76bG1c3sICBWuJmWVNDxSOZHipR6Pu/NONXjiiqJVDONbeKdswA9
ZM4hYpcNGRVH0hYolI2V2awIoTIDxCEeldtBV7T0odh0q86mWH2Mmj+1aN1q8Qsg
R5jGvdcn6S2RorOh7B1Qt6Gz5LIXoeNfw9Zn4WmcAvL6bw1pV17ONQgJIPgkZQ+1
d/8ECpolUFZGaf8Gj9duREZKX5AjQwppf6WddWHoWaLS93NrVFxdJ12LLwIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFMXUiBLRf7lnSXFyInQJy9hSF2wBMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveGRTSUV0Rl91V2RKY1hJaWRBbkwyRklYYkFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBAAJ
9zQDBAAJ90ADBAAJ91YDBAAJ91wDBAAJ94gDBAAJ950DBAAJ96QDBAAJ96kDBAAJ
964DBAAJ97IDBAAJ99kDBAAJ990DBAAJ9+EDBAAJ9+8DBAAJ9/UDBAAJ9/0DBABN
UWQDBABOERoDBABOET4DBABOEd0DBABZImoDBABZJcIDBABdcrcDBABoj9kDBAGM
4cIDBACM4dcDBACZTMYDBACZTMoDBAGnESYDBACnESkDBACnES4DBACnETsDBADC
Oi8DBADO9ZcDBADUwAgwDQYJKoZIhvcNAQELBQADggEBADT3T0UPkWOVTg9FVHjM
bhbIEN7uUO/uv/ivpbm+95LE27quu4jTWjggfoHDArrLY2PyfKamxmgvGj6oy4pj
tHVfVIr/tBRAV5ocO4wqvusG3zOli+JNfqOxQqGPQJN2yYmF+3MuslpFZ8qwC6+j
cH70GLlia52vnb17nYNytSJe1xRzRhR8zKuP+j/0zUI0+Fy4SbG4Nf3KHvDIbyFW
3Q7nMOTAsEaVSKhiRL+POCAF8ZR3YHbnqivuw8z4poNig/ScGoeP0jWV/4+IU8CU
WvNhi5r0+TOPgtGHX2PQzPWAWKejuSF5w+rO8bSjoFO7PK8pRBmrnIDuFF5E9dmC
pE0=
-----END CERTIFICATE-----
Generated at Tue Nov 10 02:37:32 2026 by rpki-client