Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/R3cUuqU6zt3Q9GBlquYhC4_yoVY.roa
File: R3cUuqU6zt3Q9GBlquYhC4_yoVY.roa (raw, json)
Hash identifier: SjBq3TgEf0qQxlw2PCnN3KRUouHWt/oP3VJkmsZerbA=
Subject key identifier: 47:77:14:BA:A5:3A:CE:DD:D0:F4:60:65:AA:E6:21:0B:8F:F2:A1:56
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0A4D091D1E9EDB010CDB29E12C37CBDDA
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/R3cUuqU6zt3Q9GBlquYhC4_yoVY.roa
Signing time: Tue 15 Sep 2026 11:25:27 +0000
ROA not before: Tue 15 Sep 2026 11:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
62.83.0.0/16 maxlen: 24
62.83.0.0/22 maxlen: 22
62.83.4.0/22 maxlen: 22
62.83.8.0/22 maxlen: 22
62.83.16.0/22 maxlen: 22
62.83.20.0/22 maxlen: 22
62.83.32.0/22 maxlen: 22
62.83.36.0/22 maxlen: 22
62.83.40.0/22 maxlen: 22
62.83.44.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: Failed, certificate revoked on Tue 22 Sep 2026 11:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:d0:91:d1:e9:ed:b0:10:cd:b2:9e:12:c3:7c:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 15 11:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=477714baa53aceddd0f46065aae6210b8ff2a156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:e6:46:ab:2b:77:ca:e4:b7:01:f0:09:f2:
cc:0e:f5:ec:0b:06:ca:29:40:a0:95:7d:3d:cb:e2:
ea:a9:32:a5:d1:6f:8b:14:ad:3c:2b:84:1f:96:cc:
ef:17:18:6e:f3:24:6a:22:f7:f3:25:fb:75:c0:dd:
15:d5:c2:ac:4e:df:12:a4:2d:85:23:85:87:31:29:
54:6d:cf:15:46:96:b0:05:70:0d:58:41:29:41:45:
2f:16:a4:4a:ae:bb:65:f9:4b:1d:62:e9:c9:65:b9:
7f:b7:ee:c5:ed:93:cf:3e:f2:05:1b:45:21:2b:0b:
74:50:db:31:17:88:d6:ce:d2:e3:aa:39:d4:8c:70:
35:4c:c0:51:ea:09:d0:0b:93:ab:1a:c6:9d:fd:79:
d9:64:f0:76:f9:7b:a3:c1:43:56:6b:2c:b3:29:03:
aa:ab:8e:ea:00:85:6d:d9:7f:96:6b:de:89:19:db:
52:ee:31:a2:0a:65:d8:01:15:29:98:b7:cb:04:48:
ac:65:ea:a1:8e:55:de:50:c5:98:99:e6:3f:12:7b:
df:44:71:7b:95:20:aa:7b:b5:51:ba:25:17:23:0a:
c6:c8:33:44:6d:2b:76:9d:a9:1d:61:1a:4f:17:21:
0e:73:57:cc:a4:dc:26:a6:a6:8c:e3:66:c3:55:47:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:14:BA:A5:3A:CE:DD:D0:F4:60:65:AA:E6:21:0B:8F:F2:A1:56
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/R3cUuqU6zt3Q9GBlquYhC4_yoVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
78:60:84:50:5f:8e:d7:3c:9a:18:30:02:df:c2:3e:08:81:d3:
21:c1:d1:d2:15:fc:bb:71:e2:87:af:4e:8e:48:c7:fe:4f:21:
8f:bc:29:fc:7f:55:f3:24:4d:44:41:8c:16:36:02:c3:0c:da:
3d:93:15:d6:b4:b5:6e:ca:ec:8a:ba:99:1d:3d:5c:b7:90:e8:
91:d0:c1:ae:73:88:5d:0d:0b:f8:ba:b3:60:6b:c9:c6:44:16:
38:e7:09:72:6e:aa:05:b2:a3:17:e2:fb:f1:fe:d5:9a:13:1d:
b9:68:cb:d0:86:e3:52:76:08:d8:7d:a8:81:7f:a2:45:11:b5:
e2:29:3c:6b:58:da:83:0f:65:bd:1b:af:fe:14:3c:be:b8:af:
e6:fe:76:1c:02:6b:c4:36:d1:aa:98:a4:5d:f0:2f:3d:ba:07:
d3:e1:5c:23:33:12:29:76:c9:a9:c3:04:23:4b:11:86:5d:17:
bf:b6:15:89:27:21:16:92:b4:25:89:b4:e9:23:e0:35:88:71:
41:ae:ac:42:8f:6e:31:cc:7e:31:d9:52:0e:98:9b:20:be:c2:
fd:9c:76:7f:47:47:54:2e:c5:a2:ac:2d:c1:27:3d:3a:93:0f:
74:8f:32:73:af:7c:59:17:5a:d9:00:27:ad:fa:17:13:14:41:
68:59:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:43 2026 by rpki-client