Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tGhZe_FJh3p2JQgu7byNTnK3xv4.roa
File: tGhZe_FJh3p2JQgu7byNTnK3xv4.roa (raw, json)
Hash identifier: yutywrNjE9ADKmuf0bGM6rkJPuKUyWGPIcO6iizPTDA=
Subject key identifier: B4:68:59:7B:F1:49:87:7A:76:25:08:2E:ED:BC:8D:4E:72:B7:C6:FE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BDF6445A3CF55EF5255B1EEF527FE83F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tGhZe_FJh3p2JQgu7byNTnK3xv4.roa
Signing time: Sun 20 Sep 2026 08:37:08 +0000
ROA not before: Sun 20 Sep 2026 08:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
82.109.195.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.61.0/24 maxlen: 24
87.83.62.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.83.194.0/24 maxlen: 24
87.83.197.0/24 maxlen: 24
87.83.198.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.223.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
212.134.138.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.146.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.192.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.194.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.236.0/24 maxlen: 24
212.135.25.0/24 maxlen: 24
212.135.29.0/24 maxlen: 24
212.135.64.0/24 maxlen: 24
212.135.68.0/24 maxlen: 24
212.135.69.0/24 maxlen: 24
212.135.71.0/24 maxlen: 24
212.135.75.0/24 maxlen: 24
212.135.96.0/24 maxlen: 24
212.135.97.0/24 maxlen: 24
212.135.101.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.206.0/24 maxlen: 24
212.135.207.0/24 maxlen: 24
212.135.245.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 12:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:f6:44:5a:3c:f5:5e:f5:25:5b:1e:ef:52:7f:e8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 08:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b468597bf149877a7625082eedbc8d4e72b7c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:68:32:9b:33:83:f6:c8:46:bf:fc:c3:96:
70:74:d0:40:a0:c1:03:53:44:58:e4:64:bf:ab:7f:
cb:b9:70:36:0f:75:0f:44:24:77:69:f4:fc:8e:9b:
49:9c:83:7a:22:55:2b:b7:ad:0b:cb:1a:2e:38:92:
e7:91:81:3f:5d:ce:96:f3:c4:32:8a:3c:54:b9:4d:
c3:39:f2:d9:a1:8e:19:61:a6:e1:f6:02:d2:d5:d8:
37:02:bd:27:38:dc:1a:be:65:67:aa:58:77:1c:47:
77:19:d7:06:bf:78:f1:26:44:3d:81:12:a0:88:96:
7c:66:29:37:13:25:71:b5:74:7b:aa:81:c2:30:22:
0a:cd:da:9d:86:57:b6:24:11:c5:7d:61:4c:f5:f5:
c4:1c:03:39:67:35:85:7c:6f:97:b5:18:ec:9f:76:
d9:e1:77:45:27:91:ab:a7:a7:31:60:e5:8d:a1:94:
c5:a9:8e:25:f0:43:96:1a:31:21:dd:35:fe:80:c0:
0a:0c:49:6c:e9:22:e0:e2:3a:9b:d3:38:e2:f6:1f:
aa:d0:27:fe:a7:8a:d4:e8:1d:9e:aa:92:90:a5:27:
0c:65:9c:65:07:e4:ed:ea:fe:7d:bf:5f:e0:43:18:
06:fa:20:c7:36:73:76:ce:a5:89:1d:1d:55:72:ce:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:59:7B:F1:49:87:7A:76:25:08:2E:ED:BC:8D:4E:72:B7:C6:FE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tGhZe_FJh3p2JQgu7byNTnK3xv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.138.0/24
82.109.102.0/24
82.109.144.0/24
82.109.195.0/24
82.110.105.0/24
87.82.196.0/24
87.82.233.0/24
87.82.241.0/24
87.82.243.0/24
87.82.247.0/24
87.83.61.0-87.83.62.255
87.83.124.0/24
87.83.166.0/24
87.83.194.0/24
87.83.197.0-87.83.198.255
87.84.130.0/24
87.84.134.0/24
87.84.223.0/24
87.85.77.0/24
212.134.138.0/23
212.134.146.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.192.0-212.134.194.255
212.134.200.0/24
212.134.230.0/24
212.134.236.0/24
212.135.25.0/24
212.135.29.0/24
212.135.64.0/24
212.135.68.0/23
212.135.71.0/24
212.135.75.0/24
212.135.96.0/23
212.135.101.0/24
212.135.129.0/24
212.135.135.0/24
212.135.206.0/23
212.135.245.0/24
212.135.251.0-212.135.252.255
Signature Algorithm: sha256WithRSAEncryption
33:63:ba:76:c0:16:2a:31:56:09:b3:45:49:bf:92:05:ab:b1:
63:1e:e7:06:d2:50:06:26:b2:99:a9:26:5d:3f:2f:7b:5e:61:
07:20:bf:7b:5e:ea:f9:18:5f:c8:8d:86:18:3b:18:86:72:12:
5f:b0:33:f4:bb:18:33:6c:fb:4a:35:a0:66:c9:f6:b0:b2:d5:
7b:5b:d2:e6:63:50:e3:71:33:ac:fc:ae:49:6e:47:86:2d:05:
82:73:03:f8:b3:9e:4e:2e:0e:9b:84:81:b8:6d:17:dd:37:2e:
3b:c0:0b:05:0f:c4:8a:be:47:94:73:db:cc:48:85:02:f4:38:
9d:50:e1:0a:08:a8:cc:2e:5a:5c:1a:da:66:a6:bd:35:b5:ac:
30:72:df:27:59:96:ed:43:95:6a:d3:af:77:46:2d:46:b2:02:
38:1c:20:5f:61:68:fd:49:69:91:60:72:49:7d:e3:11:02:ec:
ae:23:9a:62:cf:aa:5d:ed:ff:f2:78:43:f3:27:b9:fa:fc:57:
0a:e6:28:a1:66:37:10:a4:33:d8:00:49:43:f6:b5:56:66:b2:
69:f8:71:8f:c2:cf:fe:ab:3a:85:44:ee:f5:c0:34:d8:d7:bd:
a2:f7:af:1a:cc:13:8e:40:d0:14:66:f4:48:32:85:49:52:61:
cb:69:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:52 2026 by rpki-client