Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/fnAKzbpWYsp1CI_7mzUGBfc8XPM.roa
File: fnAKzbpWYsp1CI_7mzUGBfc8XPM.roa (raw, json)
Hash identifier: 5uFpFDcU88jPNYFC5i+1iXh4SkGg5+9yH+6+lDcgIOU=
Subject key identifier: 7E:70:0A:CD:BA:56:62:CA:75:08:8F:FB:9B:35:06:05:F7:3C:5C:F3
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019B7B36432FB3B31E64E4B2C880CE311952
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/fnAKzbpWYsp1CI_7mzUGBfc8XPM.roa
Signing time: Thu 01 Jan 2026 20:18:32 +0000
ROA not before: Thu 01 Jan 2026 20:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47332
IP address blocks: 37.148.240.0/24 maxlen: 24
37.148.241.0/24 maxlen: 24
93.191.40.0/24 maxlen: 24
93.191.41.0/24 maxlen: 24
93.191.42.0/24 maxlen: 24
93.191.43.0/24 maxlen: 24
93.191.44.0/24 maxlen: 24
93.191.45.0/24 maxlen: 24
93.191.46.0/24 maxlen: 24
93.191.47.0/24 maxlen: 24
185.153.244.0/24 maxlen: 24
195.13.32.0/24 maxlen: 24
195.13.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Feb 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:43:2f:b3:b3:1e:64:e4:b2:c8:80:ce:31:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 1 20:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e700acdba5662ca75088ffb9b350605f73c5cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:11:63:06:5e:07:41:7f:49:b5:83:0a:f9:
21:95:ea:62:42:fb:82:fe:19:5c:d9:1b:00:6d:41:
6c:86:6e:15:5d:8a:01:e0:ea:72:18:f1:c1:90:02:
f8:37:5e:15:de:7a:c6:16:75:81:36:1c:61:4e:2e:
37:f3:fb:08:8f:af:ea:fc:4e:46:22:35:e0:6a:5e:
88:1d:c4:26:c2:52:2b:1b:56:50:d6:c3:f9:f2:96:
6e:fa:44:3e:20:5f:ee:99:15:10:c1:9e:7d:d9:9f:
83:28:50:b8:ee:4c:ba:c4:39:8d:f3:ea:c4:cc:d4:
b0:52:ba:ce:38:3e:d5:a0:e7:36:1c:f1:2e:7b:fa:
9d:47:44:3d:0d:20:ed:13:bd:91:d5:55:ca:3d:7e:
cf:b1:83:fa:b2:a0:de:fa:0f:98:95:ec:31:fa:49:
5d:f1:18:bf:b0:14:f1:fc:37:5e:45:d2:c2:11:eb:
a5:21:a3:b8:3e:40:e6:0b:f5:3f:a6:1d:6a:0e:d2:
b3:78:79:32:fb:1c:46:c1:3d:9a:48:1c:9a:89:85:
9d:d5:c4:3d:64:4b:4b:f4:e9:3d:c6:8e:96:40:ce:
e6:17:cf:7e:20:fc:c1:15:b2:b6:13:cf:5d:82:3d:
ed:e9:cc:b8:62:4a:02:52:21:03:5d:dc:5e:3d:be:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:0A:CD:BA:56:62:CA:75:08:8F:FB:9B:35:06:05:F7:3C:5C:F3
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/fnAKzbpWYsp1CI_7mzUGBfc8XPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/23
93.191.40.0/21
185.153.244.0/24
195.13.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:0f:fa:c5:8c:99:58:a6:4c:ae:61:be:b0:4d:a4:ca:f0:1b:
44:d3:44:ff:25:ce:59:b3:85:47:df:16:91:3a:e0:6b:60:5e:
fb:23:6f:86:9a:6b:df:3d:6d:95:35:3a:90:61:1c:70:83:6a:
32:ee:61:ed:92:6a:95:7c:42:dc:ae:35:8c:14:af:ee:28:de:
c1:fa:6d:d8:f5:c7:89:61:86:fe:a4:87:f2:26:b7:2e:dc:ae:
7a:3c:a0:84:4f:d2:78:5a:3c:85:f2:db:40:74:e8:53:c3:33:
27:d2:25:eb:02:9d:cd:10:67:e3:9c:a2:4e:fa:45:e4:9a:ab:
c3:65:95:e9:68:20:24:29:49:3a:f3:05:3f:2c:ea:bf:37:b7:
7b:8b:f1:82:5c:2c:03:a0:14:79:70:72:be:e1:65:de:8c:d3:
af:a0:52:c3:a5:97:75:e5:6b:a7:0d:8f:84:28:ab:e8:93:03:
e2:c6:d3:4a:c4:ba:9b:a8:1d:2b:04:4d:b5:a5:b7:14:ee:a4:
98:64:f5:f7:aa:aa:87:77:d7:b0:c1:98:ab:0a:43:2b:80:c6:
d5:34:16:86:d6:c0:03:57:a5:c8:c0:6e:96:ee:59:e7:7f:c4:
dd:5a:5a:c4:c0:07:7c:c8:bd:1a:1a:fb:ae:16:d1:78:81:cb:
d9:f4:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:41:08 2026 by rpki-client