Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0Q8sbmDzXrKW64yVjLUYoW48tdw.roa
File: 0Q8sbmDzXrKW64yVjLUYoW48tdw.roa (raw, json)
Hash identifier: LS9DGPcfw44CG/zAPjMow6oZ5kb2cLYz2/ZJhIG0V1M=
Subject key identifier: D1:0F:2C:6E:60:F3:5E:B2:96:EB:8C:95:8C:B5:18:A1:6E:3C:B5:DC
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0B32ED9D744AEA11012B94D7EFADD5CBA
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0Q8sbmDzXrKW64yVjLUYoW48tdw.roa
Signing time: Fri 18 Sep 2026 06:23:07 +0000
ROA not before: Fri 18 Sep 2026 06:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.200.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 14:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:2e:d9:d7:44:ae:a1:10:12:b9:4d:7e:fa:dd:5c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 18 06:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d10f2c6e60f35eb296eb8c958cb518a16e3cb5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:ad:df:cb:21:0a:9c:0c:9b:06:5c:25:0b:
9f:bd:1b:0b:ff:c3:fd:b2:88:25:7d:5b:ca:ac:38:
08:d5:6c:66:53:d8:f0:c9:dd:0e:d9:cb:11:d8:a5:
f0:0c:8f:e6:a8:0c:1b:4d:5f:b1:92:70:de:2e:90:
eb:3b:93:bd:4c:94:bb:0c:72:06:a3:f5:05:11:fe:
63:19:ca:3f:a4:dd:c7:2c:ae:2b:be:47:bf:0b:24:
1c:4c:6d:07:e0:62:f3:eb:34:a3:5a:e5:d0:30:22:
e0:38:6a:bb:3f:e8:42:0e:8f:0e:3b:a2:c3:0c:c7:
3d:2e:04:fd:af:8a:25:25:1d:92:42:75:3c:84:b0:
8c:65:da:ee:f7:0b:9f:b6:95:5f:46:27:be:8a:74:
5d:e2:b3:18:ba:76:7d:3b:dc:93:12:3c:36:96:b0:
50:8c:34:f5:4e:5d:12:53:e4:58:7d:1e:fb:ab:e9:
0e:87:09:b7:26:d0:4b:b9:78:74:32:d5:20:d8:5f:
d4:75:33:81:58:99:cc:5a:d2:f5:f1:e2:47:3b:aa:
d9:63:91:0b:9f:dd:3c:eb:10:12:15:e5:36:ce:6d:
75:12:b1:f2:c3:28:40:80:b1:08:b0:24:f7:1b:90:
37:d0:fc:5b:26:98:66:41:00:f8:a2:52:ba:12:99:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:2C:6E:60:F3:5E:B2:96:EB:8C:95:8C:B5:18:A1:6E:3C:B5:DC
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0Q8sbmDzXrKW64yVjLUYoW48tdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.144.0/21
93.119.160.0/21
93.119.200.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
83:ab:3a:2a:7f:a1:99:3d:89:49:cd:64:d5:c5:88:e6:f3:55:
3e:84:f9:77:9f:4f:5b:18:21:01:7c:a9:cf:54:9b:08:3a:c8:
a9:ea:a6:17:c1:d3:91:99:96:89:4c:00:b6:d2:45:6a:b0:75:
35:c0:c7:3c:af:88:af:ed:55:40:08:1b:b3:00:d2:30:c9:aa:
65:83:96:31:0d:eb:8d:76:81:da:47:5f:54:52:ff:7e:b1:a5:
c7:51:92:9c:16:88:fd:88:fd:6e:65:f4:4b:e1:68:69:41:32:
d1:70:af:31:b8:ee:28:a2:3d:2f:72:5b:04:3e:9e:55:69:ed:
ba:96:0f:07:68:3a:27:3e:43:35:92:20:b9:83:87:55:f1:55:
87:dd:0e:f4:6e:19:36:d7:c1:fe:28:67:0b:7e:e1:c6:d5:9e:
f9:db:e9:50:e8:16:ac:a9:90:09:41:96:01:d1:02:3a:2f:f0:
3a:3c:ca:e4:47:a8:13:77:eb:7a:e5:ef:d2:22:52:87:fe:88:
36:44:32:09:db:20:45:00:b0:76:5e:0b:49:bd:c8:df:47:f2:
61:19:b3:a8:9b:90:d2:f5:81:1b:74:16:57:75:3b:8a:37:a4:
86:78:ce:4e:a9:6a:dd:29:9f:9a:5f:2c:47:39:18:1b:f9:ce:
bd:39:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:47 2026 by rpki-client