Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QhGcY_s9uWfsCIZnnIVDEVqK7Is.roa
File: QhGcY_s9uWfsCIZnnIVDEVqK7Is.roa (raw, json)
Hash identifier: LeNWUoA3CtGXg23tYjqm8G5lDh9k0Cj2Xe1KDWsh9WY=
Subject key identifier: 42:11:9C:63:FB:3D:B9:67:EC:08:86:67:9C:85:43:11:5A:8A:EC:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0B384EB7B33C6940943B8D14C9952B78D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QhGcY_s9uWfsCIZnnIVDEVqK7Is.roa
Signing time: Fri 18 Sep 2026 07:57:07 +0000
ROA not before: Fri 18 Sep 2026 07:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a06:1181:2::/48 maxlen: 48
2a09:17c0:22::/48 maxlen: 48
2a09:17c7:10::/48 maxlen: 48
2a0a:2d07:9a::/48 maxlen: 48
2a0c:7886:22::/48 maxlen: 48
2a0d:1140::/29 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0e:1a80:1312::/48 maxlen: 48
2a0e:2240::/29 maxlen: 32
2a0e:c785:273::/48 maxlen: 48
2a0e:e980::/29 maxlen: 32
2a0e:f500::/29 maxlen: 32
2a0e:f604:10::/48 maxlen: 48
2a0f:1200:2::/48 maxlen: 48
2a0f:1587:100::/48 maxlen: 48
2a0f:1e84:3f::/48 maxlen: 48
2a0f:1e86:100::/48 maxlen: 48
2a0f:2d40::/29 maxlen: 32
2a0f:3047:fc1d::/48 maxlen: 48
2a0f:3d86:77::/48 maxlen: 48
2a0f:7d06:9c8a::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:df45:fc78::/48 maxlen: 48
2a0f:df47:200::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e640::/29 maxlen: 32
2a0f:e6c6:5532::/48 maxlen: 48
2a0f:e7c5:f8f9::/48 maxlen: 48
2a0f:e847:77::/48 maxlen: 48
2a10:3540::/29 maxlen: 32
2a10:3640::/29 maxlen: 32
2a10:6500::/29 maxlen: 32
2a10:7300::/29 maxlen: 32
2a10:7d00::/29 maxlen: 32
2a11:1200::/29 maxlen: 32
2a11:3f80::/29 maxlen: 29
2a12:ac44:1312::/48 maxlen: 48
2a12:dc00::/29 maxlen: 32
2a12:ecc3:2::/48 maxlen: 48
2a13:cc0::/29 maxlen: 32
2a13:18c0:22::/48 maxlen: 48
2a13:1940::/29 maxlen: 32
2a13:8c82:1::/48 maxlen: 48
2a13:9281:100::/48 maxlen: 48
2a13:9580::/29 maxlen: 32
2a13:c900:fd1a::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Sep 2026 07:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:84:eb:7b:33:c6:94:09:43:b8:d1:4c:99:52:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 07:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42119c63fb3db967ec0886679c8543115a8aec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:b5:9b:56:aa:39:e4:b8:9e:34:a5:6e:58:
96:cc:59:a8:8e:c5:34:ad:6f:09:7a:80:2e:f7:9a:
da:07:0e:b4:6c:92:e1:11:35:2a:07:d8:cf:13:e2:
2f:26:47:4b:1e:ed:46:c8:c0:b6:f4:3f:54:30:a9:
ad:2c:fe:e5:02:7e:28:a2:f2:ff:9e:8f:d1:d2:ed:
d0:f5:01:80:78:06:19:37:f4:10:b7:c6:cb:76:96:
f3:65:82:14:15:ff:e7:99:b4:a0:28:07:0d:8e:cd:
b3:10:ff:a0:f0:4e:fa:b8:e6:08:20:4b:2f:4f:66:
52:88:a8:f1:4a:6e:6e:44:70:de:73:88:e6:69:94:
06:8e:d6:85:c2:d7:52:23:46:e1:bc:b3:ff:d5:6a:
4c:a2:09:b5:6d:93:ab:e3:0f:8a:e8:3a:d2:74:7a:
58:31:8b:eb:8b:c9:cc:01:f2:04:9d:c5:fd:44:62:
1b:5c:6e:98:43:3a:53:c9:64:45:97:22:18:bb:d8:
06:32:58:94:e0:c7:b9:5d:12:99:63:19:04:a1:8b:
01:75:28:d5:7e:d3:49:c4:9b:fe:11:67:c5:02:7f:
ae:76:de:77:50:15:ab:99:67:ff:b6:38:10:96:65:
ef:ad:49:92:3d:fa:80:b4:5b:0e:52:ac:9b:0e:be:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:9C:63:FB:3D:B9:67:EC:08:86:67:9C:85:43:11:5A:8A:EC:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QhGcY_s9uWfsCIZnnIVDEVqK7Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1181:2::/48
2a09:17c0:22::/48
2a09:17c7:10::/48
2a0a:2d07:9a::/48
2a0c:7886:22::/48
2a0d:1140::/29
2a0e:15c0:4::/48
2a0e:1a80:1312::/48
2a0e:2240::/29
2a0e:c785:273::/48
2a0e:e980::/29
2a0e:f500::/29
2a0e:f604:10::/48
2a0f:1200:2::/48
2a0f:1587:100::/48
2a0f:1e84:3f::/48
2a0f:1e86:100::/48
2a0f:2d40::/29
2a0f:3047:fc1d::/48
2a0f:3d86:77::/48
2a0f:7d06:9c8a::/48
2a0f:bc00:100::/48
2a0f:df45:fc78::/48
2a0f:df47:200::/48
2a0f:e202:55::/48
2a0f:e640::/29
2a0f:e6c6:5532::/48
2a0f:e7c5:f8f9::/48
2a0f:e847:77::/48
2a10:3540::/29
2a10:3640::/29
2a10:6500::/29
2a10:7300::/29
2a10:7d00::/29
2a11:1200::/29
2a11:3f80::/29
2a12:ac44:1312::/48
2a12:dc00::/29
2a12:ecc3:2::/48
2a13:cc0::/29
2a13:18c0:22::/48
2a13:1940::/29
2a13:8c82:1::/48
2a13:9281:100::/48
2a13:9580::/29
2a13:c900:fd1a::/48
2a13:e107:99::/48
Signature Algorithm: sha256WithRSAEncryption
c3:be:64:f5:71:83:d1:78:23:49:08:f6:59:ba:8f:b7:0f:42:
fd:6b:8f:24:6f:6f:59:9d:57:af:61:67:82:ad:d2:ee:ea:88:
f6:4e:0c:4c:f9:28:12:60:93:ec:bf:52:0b:21:30:52:11:44:
5b:fb:d5:24:a3:ca:33:fc:c6:82:34:f7:f6:69:a1:1a:d4:88:
be:04:c6:0b:cd:73:2b:b4:0f:3a:ed:fa:2d:69:05:0e:17:0d:
12:fe:c5:ea:03:1b:90:2e:25:cb:c4:5f:bb:70:30:90:2d:89:
4f:fd:a3:29:f0:e7:a5:d4:50:9d:b3:38:92:af:37:2d:49:8a:
29:e7:c6:fe:0a:89:99:a0:50:f8:77:ba:2d:18:f4:a9:20:80:
79:ac:63:38:2a:9b:d1:51:b6:6e:c1:c9:05:cb:62:0c:38:3c:
d1:47:4d:0f:15:3d:88:11:86:32:ba:29:33:63:ad:96:dd:02:
1a:68:19:f0:76:60:ad:1e:73:88:f3:b4:a3:93:b1:9a:48:12:
4c:3c:a2:b6:b1:74:ca:71:84:ec:3e:42:91:6b:65:ee:2b:32:
a5:a2:6c:c4:d5:28:e6:5c:65:c0:d0:2c:c2:5f:e8:c6:77:10:
4f:61:61:2d:3b:86:08:33:24:e4:d7:ae:90:c0:7b:46:e1:47:
fc:78:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:38 2026 by rpki-client