Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yYbT2NY7lTPVijPVNeTEvsOkQBs.roa
File: yYbT2NY7lTPVijPVNeTEvsOkQBs.roa (raw, json)
Hash identifier: uwfHbqzeSCv79OMJ6/OzVJwU5UICHiosHNkPF9nAuw0=
Subject key identifier: C9:86:D3:D8:D6:3B:95:33:D5:8A:33:D5:35:E4:C4:BE:C3:A4:40:1B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BE66E01152A677ADDC9FE94727656989
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yYbT2NY7lTPVijPVNeTEvsOkQBs.roa
Signing time: Sun 20 Sep 2026 10:40:08 +0000
ROA not before: Sun 20 Sep 2026 10:40:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.189.0/24 maxlen: 24
82.109.192.0/24 maxlen: 24
82.109.193.0/24 maxlen: 24
87.83.56.0/24 maxlen: 24
87.83.58.0/24 maxlen: 24
87.83.59.0/24 maxlen: 24
87.83.160.0/24 maxlen: 24
87.84.67.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.222.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.132.0/24 maxlen: 24
212.134.144.0/24 maxlen: 24
212.134.145.0/24 maxlen: 24
212.134.147.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.186.0/24 maxlen: 24
212.134.187.0/24 maxlen: 24
212.134.195.0/24 maxlen: 24
212.134.197.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.255.0/24 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.67.0/24 maxlen: 24
212.135.70.0/24 maxlen: 24
212.135.72.0/24 maxlen: 24
212.135.74.0/24 maxlen: 24
212.135.102.0/24 maxlen: 24
212.135.136.0/24 maxlen: 24
212.135.142.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.244.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 14:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:66:e0:11:52:a6:77:ad:dc:9f:e9:47:27:65:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 10:40:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c986d3d8d63b9533d58a33d535e4c4bec3a4401b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:7c:70:ef:2c:63:15:a9:55:02:46:b3:9c:
41:be:de:46:55:7b:f7:6a:32:72:f7:bc:ab:56:7c:
45:c9:33:d3:86:8d:03:88:68:17:2d:e4:3f:87:a7:
88:2b:61:c5:a4:3f:8f:c3:ca:29:be:3e:01:8a:9a:
d6:83:f7:b9:48:d3:e9:48:17:fa:fa:db:19:ad:f2:
10:d7:1f:d1:53:73:0a:b6:62:f8:05:68:ca:64:41:
07:54:76:58:3e:e3:23:93:27:0b:e6:88:ff:aa:fc:
26:cd:d9:41:b5:13:86:e2:fe:7b:4f:ed:4e:59:08:
13:19:42:58:67:07:e3:63:d0:7f:42:9c:ee:1b:b4:
6d:37:67:9a:37:26:de:42:2a:2e:22:cf:c9:90:b7:
42:38:d0:5e:35:d9:f4:92:27:0d:86:dc:39:33:a0:
42:77:ff:32:a7:cc:93:47:c6:3b:c4:bd:74:87:e0:
2a:7c:5d:15:b7:ec:55:0d:89:03:5f:2a:d3:c4:81:
ad:2e:30:1a:61:a5:3e:5b:53:a4:45:0d:f4:cf:ec:
b8:47:ea:cf:bd:1d:3b:c2:c2:39:e4:c8:09:42:9c:
f3:67:75:ee:d8:b9:52:a4:0b:cc:d2:7e:38:e7:9a:
33:e9:fa:af:97:af:2d:5c:74:1f:eb:9e:a7:74:14:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:D3:D8:D6:3B:95:33:D5:8A:33:D5:35:E4:C4:BE:C3:A4:40:1B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yYbT2NY7lTPVijPVNeTEvsOkQBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.189.0/24
82.109.192.0/23
87.83.56.0/24
87.83.58.0/23
87.83.160.0/24
87.84.67.0/24
87.84.79.0/24
87.84.128.0/24
87.84.132.0/24
87.84.154.0/24
87.84.158.0/24
87.84.222.0/24
87.86.174.0/24
212.134.45.0/24
212.134.55.0/24
212.134.129.0/24
212.134.132.0/24
212.134.144.0/23
212.134.147.0/24
212.134.179.0/24
212.134.186.0/23
212.134.195.0/24
212.134.197.0-212.134.198.255
212.134.245.0/24
212.134.255.0/24
212.135.24.0/24
212.135.26.0/24
212.135.67.0/24
212.135.70.0/24
212.135.72.0/24
212.135.74.0/24
212.135.102.0/24
212.135.136.0/24
212.135.142.0/24
212.135.144.0/24
212.135.149.0/24
212.135.241.0/24
212.135.244.0/24
212.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:54:08:18:c0:29:35:60:20:e4:12:41:f1:0f:c5:4f:f3:ba:
57:68:5c:b4:89:01:0c:9d:04:e7:a1:3e:29:5c:f6:c4:08:c6:
9f:e4:22:69:38:b4:14:2e:28:f5:6b:56:96:b9:19:8f:0b:a7:
a6:39:3e:d7:fd:a8:01:8b:95:ad:3f:78:7d:7d:33:3e:9a:96:
25:6a:43:7f:80:23:a0:51:67:f1:d0:03:61:84:f3:95:79:af:
05:57:30:2f:15:e9:f7:4c:ad:29:9d:9d:2e:a4:e8:e6:6c:b9:
f3:ee:d0:d5:40:b9:10:24:5c:c6:6e:bf:91:b2:a8:a1:11:42:
f2:6a:23:cf:10:57:28:cb:03:3d:8b:0a:f4:71:fa:0c:7b:9a:
ef:4a:7e:0c:58:4a:37:94:ca:5e:33:19:bb:ff:e2:4f:49:ab:
0c:e6:f9:1d:0c:30:71:d6:1d:3b:7d:c2:e5:73:bc:03:4c:c2:
42:ba:c3:88:c4:db:0a:35:4f:e1:52:16:90:60:c4:e7:d2:9b:
ce:c6:19:2c:a8:9d:7f:08:ad:1d:c0:53:b2:76:c9:ed:b7:95:
7f:2c:d8:e5:7e:47:1a:1b:25:8c:13:7f:0e:bb:40:1c:c2:c9:
85:03:b1:e3:92:d5:f8:95:21:85:02:c9:d3:e9:a4:a8:64:d1:
c6:14:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:38 2026 by rpki-client