Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/hPAzQztrPrHk9Hes40877NxhrJw.roa
File: hPAzQztrPrHk9Hes40877NxhrJw.roa (raw, json)
Hash identifier: u6UiwnKilqh0aGsG6QxJ6LIfAxpxdDLKxMMLCAIm0ac=
Subject key identifier: 84:F0:33:43:3B:6B:3E:B1:E4:F4:77:AC:E3:4F:3B:EC:DC:61:AC:9C
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0B09BAC93FDA92A993F97DB16C498A1FF
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/hPAzQztrPrHk9Hes40877NxhrJw.roa
Signing time: Thu 17 Sep 2026 18:23:07 +0000
ROA not before: Thu 17 Sep 2026 18:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a10:fa80:5::/48 maxlen: 48
2a10:fa80:6::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:110::/48 maxlen: 48
2a10:fa80:2000::/36 maxlen: 36
2a10:fa81:f00::/40 maxlen: 40
2a10:fa81:1500::/40 maxlen: 48
2a10:fa81:2943::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Sep 2026 00:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:9b:ac:93:fd:a9:2a:99:3f:97:db:16:c4:98:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 17 18:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84f033433b6b3eb1e4f477ace34f3becdc61ac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:ba:aa:b4:a7:7c:18:63:5b:06:c6:ea:06:
2d:b3:e1:e4:23:fa:31:ba:1c:61:a2:cd:70:67:a3:
36:b6:d9:e1:4d:22:b4:53:43:0b:e3:26:be:ba:39:
bf:e6:70:e7:2b:12:04:38:e7:0b:8e:58:26:df:16:
eb:e1:7f:8f:90:88:c9:9a:c6:f7:0f:4b:ef:ff:7d:
59:39:03:e7:57:dd:c4:c4:5e:65:23:15:c6:ee:59:
dd:cd:a5:cc:75:e0:a2:32:e1:75:af:c9:dc:d5:f7:
22:94:fd:c2:4f:b0:fb:cb:ed:80:42:10:52:f8:58:
58:31:50:2b:d1:d6:2f:37:ee:61:f0:21:ca:26:16:
6b:8c:a7:21:ac:45:7f:5a:a2:f4:0c:f1:4f:4a:88:
a1:40:c8:b1:a5:b0:8f:c3:43:5c:7c:35:ab:8f:c0:
c1:94:7a:7c:e1:29:f4:97:57:0b:45:73:53:b5:79:
ff:3a:f4:ef:23:e7:20:7e:84:2f:5b:fa:6f:70:e1:
91:93:99:fe:13:e6:77:d3:97:fd:0c:cd:d3:27:cb:
4c:36:f8:06:e3:29:47:0a:4b:fe:c9:10:1a:f7:0a:
eb:c5:4b:ae:c5:54:5f:7d:6d:62:b7:dc:52:2b:9c:
65:f7:01:c9:91:63:ca:bd:76:ab:4a:7c:4a:86:9b:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:33:43:3B:6B:3E:B1:E4:F4:77:AC:E3:4F:3B:EC:DC:61:AC:9C
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/hPAzQztrPrHk9Hes40877NxhrJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5::-2a10:fa80:6:ffff:ffff:ffff:ffff:ffff
2a10:fa80:f::/48
2a10:fa80:110::/48
2a10:fa80:2000::/36
2a10:fa81:f00::/40
2a10:fa81:1500::/40
2a10:fa81:2943::/48
Signature Algorithm: sha256WithRSAEncryption
10:77:88:2a:2e:7c:33:34:92:c9:3a:0e:7b:86:22:ff:e4:96:
93:c5:96:07:91:1e:ef:71:16:5d:67:f7:59:19:8b:77:b7:4c:
c9:e2:13:26:e2:f6:bf:3b:42:1e:11:f0:9b:e4:31:63:ce:2e:
b9:72:28:48:65:2b:2f:77:5e:93:cd:fe:44:7e:0d:38:80:06:
58:d8:67:cd:a0:66:71:5a:62:da:ef:cf:0e:52:09:81:83:59:
6a:77:6b:92:85:42:60:b6:1d:12:0e:bd:94:39:a9:ee:cb:d9:
14:be:db:ea:38:32:05:c3:16:a3:05:fa:9c:28:b4:21:1a:a5:
9a:76:ba:9b:15:51:6d:aa:04:2b:df:73:37:eb:49:c5:2d:d4:
48:c6:ec:13:91:05:a1:31:60:24:c6:40:e5:8c:6b:dd:8f:24:
8c:2d:86:5f:e2:88:4c:23:bb:45:84:b2:c3:9d:b3:36:03:45:
6f:42:a2:6b:57:9f:c0:73:2b:53:06:e8:8e:ef:a7:a1:44:0c:
db:ae:c6:ce:64:14:44:c1:94:2b:0d:12:42:a0:9d:33:68:29:
ae:30:44:0a:1f:6e:22:e5:16:44:5e:13:de:cf:c4:d0:d5:be:
45:0e:83:54:56:a7:4c:e2:9c:bf:ac:c5:dc:ae:3c:a1:3f:43:
7f:36:f1:bb
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAaCwm6yT/akqmT+X2xbEmKH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwOTE3MTgyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGYwMzM0MzNiNmIzZWIxZTRmNDc3YWNlMzRmM2JlY2RjNjFhYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBS6qrSnfBhjWwbG6gYts+HkI/ox
uhxhos1wZ6M2ttnhTSK0U0ML4ya+ujm/5nDnKxIEOOcLjlgm3xbr4X+PkIjJmsb3
D0vv/31ZOQPnV93ExF5lIxXG7lndzaXMdeCiMuF1r8nc1fcilP3CT7D7y+2AQhBS
+FhYMVAr0dYvN+5h8CHKJhZrjKchrEV/WqL0DPFPSoihQMixpbCPw0NcfDWrj8DB
lHp84Sn0l1cLRXNTtXn/OvTvI+cgfoQvW/pvcOGRk5n+E+Z305f9DM3TJ8tMNvgG
4ylHCkv+yRAa9wrrxUuuxVRffW1it9xSK5xl9wHJkWPKvXarSnxKhpuZBwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFITwM0M7az6x5PR3rONPO+zcYaycMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvaFBBelF6dHJQckhrOUhlczQwODc3Tnhockp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzBNBAIAAjBHMBIDBwAqEPqA
AAUDBwAqEPqAAAYDBwAqEPqAAA8DBwAqEPqAARADBgQqEPqAIAMGACoQ+oEPAwYA
KhD6gRUDBwAqEPqBKUMwDQYJKoZIhvcNAQELBQADggEBABB3iCoufDM0ksk6DnuG
Iv/klpPFlgeRHu9xFl1n91kZi3e3TMniEybi9r87Qh4R8JvkMWPOLrlyKEhlKy93
XpPN/kR+DTiABljYZ82gZnFaYtrvzw5SCYGDWWp3a5KFQmC2HRIOvZQ5qe7L2RS+
2+o4MgXDFqMF+pwotCEapZp2upsVUW2qBCvfczfrScUt1EjG7BORBaExYCTGQOWM
a92PJIwthl/iiEwju0WEssOdszYDRW9ComtXn8BzK1MG6I7vp6FEDNuuxs5kFETB
lCsNEkKgnTNoKa4wRAofbiLlFkReE97PxNDVvkUOg1RWp0zinL+sxdyuPKE/Q382
8bs=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:48:01 2026 by rpki-client