Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bhum6V9ZkdnjD_ozrNTGEVGv7TQ.roa
File: bhum6V9ZkdnjD_ozrNTGEVGv7TQ.roa (raw, json)
Hash identifier: eLPq34X3/ztktTtnWys84Lb1q5q+zplt5OWMb0Q6mGw=
Subject key identifier: 6E:1B:A6:E9:5F:59:91:D9:E3:0F:FA:33:AC:D4:C6:11:51:AF:ED:34
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BF0F55BC31273CA15D48881F7691AE59
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bhum6V9ZkdnjD_ozrNTGEVGv7TQ.roa
Signing time: Sun 20 Sep 2026 13:44:08 +0000
ROA not before: Sun 20 Sep 2026 13:44:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 78.154.108.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.82.198.0/24 maxlen: 24
87.83.2.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.85.232.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
212.134.17.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.41.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.123.0/24 maxlen: 24
212.134.140.0/24 maxlen: 24
212.134.142.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
212.134.152.0/24 maxlen: 24
212.134.170.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.191.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.203.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.218.0/24 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.239.0/24 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.249.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.27.0/24 maxlen: 24
212.135.28.0/24 maxlen: 24
212.135.100.0/24 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.151.0/24 maxlen: 24
212.135.156.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.240.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 02:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:0f:55:bc:31:27:3c:a1:5d:48:88:1f:76:91:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 13:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1ba6e95f5991d9e30ffa33acd4c61151afed34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:3f:42:66:d4:27:ce:1b:db:4e:28:b0:f7:
f3:65:07:0e:59:78:0d:cd:ec:51:2f:62:cf:84:b2:
b9:7b:7d:a3:37:64:54:e1:95:4b:a3:22:bc:ae:56:
e8:54:27:bb:10:83:35:48:1d:a9:c7:a9:b4:12:a3:
55:9f:86:f3:3d:ce:91:34:34:df:5c:4f:74:f9:7e:
b8:80:6e:1a:8b:a7:a6:e8:f1:e8:26:a9:51:55:19:
3e:72:e2:3e:3e:9e:a7:2d:51:9c:60:2a:5a:be:1f:
37:15:64:65:43:4e:6a:2a:e2:27:98:0a:6e:fe:87:
47:cd:fc:a8:f9:a4:6c:cc:45:a8:46:6f:3b:85:e6:
11:4c:97:80:39:c1:47:c5:93:01:76:fc:51:ff:b3:
49:d6:70:37:08:e3:54:29:73:c5:15:cc:37:3e:02:
7b:85:5a:7b:ee:8c:4c:5f:37:a4:05:a7:67:bb:9a:
c7:11:25:12:0e:52:31:d9:cf:a0:1c:7c:8c:3d:fa:
20:62:13:ce:d2:0a:e2:63:2a:75:23:59:fb:cf:c6:
7a:4b:64:09:ba:0a:8f:9c:e5:7a:23:1f:6c:2e:55:
80:61:fe:a3:bd:15:80:d1:a3:da:37:0a:b2:d8:6d:
62:15:21:9b:30:3e:de:82:55:30:47:17:0a:f1:57:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:A6:E9:5F:59:91:D9:E3:0F:FA:33:AC:D4:C6:11:51:AF:ED:34
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bhum6V9ZkdnjD_ozrNTGEVGv7TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
82.109.151.0/24
87.82.198.0/24
87.83.2.0/24
87.83.46.0/24
87.83.174.0/24
87.84.220.0/24
87.85.232.0/24
87.85.255.0/24
212.134.17.0/24
212.134.37.0/24
212.134.41.0/24
212.134.48.0/24
212.134.51.0/24
212.134.56.0/24
212.134.123.0/24
212.134.140.0/24
212.134.142.0/24
212.134.148.0-212.134.152.255
212.134.170.0/24
212.134.176.0/24
212.134.190.0/23
212.134.199.0/24
212.134.203.0/24
212.134.205.0/24
212.134.218.0/24
212.134.228.0/24
212.134.232.0/24
212.134.239.0/24
212.134.248.0/23
212.135.21.0/24
212.135.27.0-212.135.28.255
212.135.100.0/24
212.135.145.0/24
212.135.151.0/24
212.135.156.0/24
212.135.160.0/24
212.135.165.0-212.135.166.255
212.135.170.0/24
212.135.172.0/23
212.135.198.0/24
212.135.240.0/24
212.135.243.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:07:c7:d1:39:79:13:90:1a:39:68:88:8e:4b:70:16:a9:f6:
d6:4f:a6:e4:bd:da:35:82:23:8e:fd:c4:18:31:64:3f:58:9d:
65:9c:64:57:14:03:7f:78:aa:5c:ce:94:80:3a:48:30:a4:6d:
5b:87:a9:dd:2b:95:f8:04:bc:71:75:05:8b:98:fb:99:37:63:
f2:94:eb:6f:8d:62:92:a6:6b:70:98:5e:ce:30:d4:39:a8:32:
f7:3b:96:ef:aa:7c:43:e0:ca:4a:87:87:55:16:21:ce:f0:17:
f8:b7:ff:82:a2:aa:34:00:a7:7d:dc:e2:7f:90:44:a5:b5:93:
41:40:8d:91:bf:c3:0b:18:63:27:63:7d:8d:bd:1f:52:fa:66:
c2:e5:36:8b:a0:e1:67:75:a4:5e:1a:10:0c:dd:e1:25:7a:20:
53:30:01:d6:fe:00:04:61:3a:5e:52:25:bf:f9:eb:ac:a8:4f:
c4:ee:0f:cc:77:35:63:19:a2:1d:69:16:65:e7:3e:74:65:df:
e7:88:2b:90:34:ab:77:62:75:fe:c3:a6:eb:56:aa:72:be:b7:
26:59:14:b7:84:53:50:84:35:66:aa:18:ca:ea:84:74:ff:2c:
3e:40:c1:b3:a6:c6:e9:6d:00:f7:df:d7:b6:b7:31:08:4e:b9:
d3:64:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:06 2026 by rpki-client