Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/jltkxv-W3EJYRqlAiyUHsai-NGg.roa
File: jltkxv-W3EJYRqlAiyUHsai-NGg.roa (raw, json)
Hash identifier: N+0PF7dju+bGSsP5B72Z/TEHcq9DPMPEa0i7l8aIbuk=
Subject key identifier: 8E:5B:64:C6:FF:96:DC:42:58:46:A9:40:8B:25:07:B1:A8:BE:34:68
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0BE825328ECFAF04A0B116CFA4A318ECF
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/jltkxv-W3EJYRqlAiyUHsai-NGg.roa
Signing time: Sun 20 Sep 2026 11:10:07 +0000
ROA not before: Sun 20 Sep 2026 11:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:8f4a:394a/128 maxlen: 128
2001:67c:64:ffff:0:1a0:a9ac:7586/128 maxlen: 128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 20 Sep 2026 12:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:82:53:28:ec:fa:f0:4a:0b:11:6c:fa:4a:31:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Sep 20 11:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5b64c6ff96dc425846a9408b2507b1a8be3468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:a1:b8:a5:fc:fc:55:ac:ae:a1:a3:db:a0:
b4:be:75:fb:f6:92:4e:5c:c9:3b:bc:81:d6:d6:80:
cb:3d:bf:73:40:20:c4:8d:5e:b0:ed:5a:5a:91:9f:
09:e3:05:9e:2c:c6:41:a1:46:de:b2:31:45:68:c3:
3f:ed:13:b0:8e:76:b9:0d:2b:48:09:5f:62:86:e8:
a9:6c:db:09:34:ae:4f:7e:94:af:1f:19:9a:85:dc:
e5:b5:85:f7:6e:cd:2b:a5:f5:05:b8:7c:9f:ee:9b:
f2:fb:a6:50:45:27:15:45:70:b3:4c:a8:8c:09:05:
de:0b:66:cc:cc:2e:62:d8:a3:ad:3e:b8:cf:5b:37:
2f:77:bd:3e:23:7e:ec:e6:50:36:84:d7:fe:eb:1f:
2e:5f:ef:a3:5b:9a:47:a8:fc:29:3f:52:ab:03:9c:
25:b4:bc:55:4e:84:71:0d:e8:2e:2a:eb:7d:42:39:
a4:47:ac:aa:0c:db:4e:33:06:00:cc:12:0a:40:87:
cb:d5:3e:87:7d:0f:9b:9d:c4:fd:c1:41:00:32:c3:
4d:93:c3:e4:cd:24:33:cb:37:1d:f9:b5:3b:e7:2a:
2a:a9:14:7f:e5:98:a7:0a:1e:a0:4f:8d:c7:f0:d0:
29:d1:18:7d:90:22:35:10:51:79:32:f3:40:0b:8e:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:64:C6:FF:96:DC:42:58:46:A9:40:8B:25:07:B1:A8:BE:34:68
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/jltkxv-W3EJYRqlAiyUHsai-NGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:8f4a:394a/128
2001:67c:64:ffff:0:1a0:a9ac:7586/128
2001:67c:64:ffff:0:1a0:aed2:ffb0/128
Signature Algorithm: sha256WithRSAEncryption
0d:b0:8f:65:13:d8:c7:ea:4d:6e:50:91:31:7a:b8:66:df:97:
5a:9d:31:d8:4a:bc:af:65:97:9b:97:90:45:77:17:2d:9c:a5:
ea:5a:cf:68:0a:c4:15:f2:a2:16:20:69:c4:05:d2:4e:59:8d:
b9:a2:65:7e:42:39:02:fd:fc:ee:0f:27:4e:92:65:20:d5:ff:
50:3f:21:0c:e9:27:8a:b3:b0:0e:13:ee:b1:70:eb:4a:37:2b:
d5:3b:a0:c0:84:da:78:f5:fa:c5:48:53:5e:05:6c:19:ba:9f:
a4:c0:fd:0f:45:1f:56:69:25:f2:d5:cd:91:3a:5b:ce:2c:31:
df:f5:8d:04:bf:09:c9:25:e8:16:8a:49:78:9e:bb:94:56:d8:
5e:83:9d:68:08:21:67:ae:8a:73:bd:39:09:43:c7:28:b9:f8:
55:59:13:a6:14:2a:ab:75:24:37:6e:41:12:6a:c1:e4:39:b3:
68:13:6f:f6:55:9d:59:da:bd:00:8a:6b:6e:2e:77:55:49:51:
6f:6b:5d:a5:82:c5:e3:43:dd:cd:25:72:31:f2:0b:be:0f:1f:
b2:6a:63:88:28:84:1f:dc:a6:5b:34:14:74:60:38:d3:10:ec:
0f:c9:5c:c2:41:df:7d:02:e6:4b:02:2d:1d:14:18:c8:71:eb:
2e:97:ee:c3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAaC+glMo7PrwSgsRbPpKMY7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzllMTE2Njc4OTU5YjhhOTQ3OGZjZWE3Y2EzYzA2MDMx
MDIxNjIwHhcNMjYwOTIwMTExMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTViNjRjNmZmOTZkYzQyNTg0NmE5NDA4YjI1MDdiMWE4YmUzNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuehuKX8/FWsrqGj26C0vnX79pJO
XMk7vIHW1oDLPb9zQCDEjV6w7VpakZ8J4wWeLMZBoUbesjFFaMM/7ROwjna5DStI
CV9ihuipbNsJNK5PfpSvHxmahdzltYX3bs0rpfUFuHyf7pvy+6ZQRScVRXCzTKiM
CQXeC2bMzC5i2KOtPrjPWzcvd70+I37s5lA2hNf+6x8uX++jW5pHqPwpP1KrA5wl
tLxVToRxDeguKut9QjmkR6yqDNtOMwYAzBIKQIfL1T6HfQ+bncT9wUEAMsNNk8Pk
zSQzyzcd+bU75yoqqRR/5ZinCh6gT43H8NAp0Rh9kCI1EFF5MvNAC448SQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFI5bZMb/ltxCWEapQIslB7GovjRoMB8GA1UdIwQY
MBaAFLDJ4RZniVm4qUePzqfKPAYDECFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01uaEZtZUpXYmlwUjRfT3A4bzhCZ01RSVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82OGJmMWQtNmU1MC00OTk2LTgyYWYt
MGFjNTgxYTU4Y2QxLzEvamx0a3h2LVczRUpZUnFsQWl5VUhzYWktTkdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82OGJmMWQtNmU1MC00OTk2LTgyYWYtMGFjNTgxYTU4Y2Qx
LzEvc01uaEZtZUpXYmlwUjRfT3A4bzhCZ01RSVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGe2i/uCgMRACABBnwAZP//AAABn49KOUoDEQAgAQZ8AGT//wAAAaCprHWG
AxEAIAEGfABk//8AAAGgrtL/sDANBgkqhkiG9w0BAQsFAAOCAQEADbCPZRPYx+pN
blCRMXq4Zt+XWp0x2Eq8r2WXm5eQRXcXLZyl6lrPaArEFfKiFiBpxAXSTlmNuaJl
fkI5Av387g8nTpJlINX/UD8hDOknirOwDhPusXDrSjcr1TugwITaePX6xUhTXgVs
GbqfpMD9D0UfVmkl8tXNkTpbziwx3/WNBL8JySXoFopJeJ67lFbYXoOdaAghZ66K
c705CUPHKLn4VVkTphQqq3UkN25BEmrB5DmzaBNv9lWdWdq9AIprbi53VUlRb2td
pYLF40PdzSVyMfILvg8fsmpjiCiEH9ymWzQUdGA40xDsD8lcwkHffQLmSwItHRQY
yHHrLpfuww==
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:52 2026 by rpki-client