Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_hfdajTBZ5HbEfE9kTS7OfFiPLY.roa
File: _hfdajTBZ5HbEfE9kTS7OfFiPLY.roa (raw, json)
Hash identifier: gRL3hJ5mMprhGQAFaqRkFIrgwM3gvH+N3Mgo3GqmUUw=
Subject key identifier: FE:17:DD:6A:34:C1:67:91:DB:11:F1:3D:91:34:BB:39:F1:62:3C:B6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1AD45F02CF6A08152E1BE3DB1BDCD02BB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_hfdajTBZ5HbEfE9kTS7OfFiPLY.roa
Signing time: Thu 05 Nov 2026 19:53:24 +0000
ROA not before: Thu 05 Nov 2026 19:53:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 48.103.121.0/24 maxlen: 24
144.31.55.0/24 maxlen: 24
144.31.56.0/24 maxlen: 24
144.31.58.0/24 maxlen: 24
144.31.59.0/24 maxlen: 24
144.31.60.0/24 maxlen: 24
150.241.121.0/24 maxlen: 24
177.3.193.0/24 maxlen: 24
177.3.194.0/24 maxlen: 24
177.3.198.0/24 maxlen: 24
177.3.201.0/24 maxlen: 24
177.3.202.0/24 maxlen: 24
177.3.203.0/24 maxlen: 24
177.3.204.0/24 maxlen: 24
177.3.205.0/24 maxlen: 24
177.3.206.0/24 maxlen: 24
177.3.207.0/24 maxlen: 24
185.229.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 21:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ad:45:f0:2c:f6:a0:81:52:e1:be:3d:b1:bd:cd:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 5 19:53:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe17dd6a34c16791db11f13d9134bb39f1623cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:d3:86:92:36:e1:61:e7:d9:5a:82:7a:c5:
d2:7c:90:09:37:dd:74:de:d1:b0:d5:b8:98:09:d3:
90:2c:9a:8b:d0:d8:77:bc:6f:0b:14:be:c0:08:cf:
07:07:3e:24:ff:86:df:2a:f9:18:88:fc:ce:a1:39:
73:ed:5d:fd:fc:cf:bd:d8:e4:08:55:83:a7:71:96:
28:fc:ab:75:6d:a3:15:93:db:b0:1d:16:5e:7d:e4:
b6:38:b2:17:eb:6f:ff:45:48:df:82:a1:8c:d0:82:
be:d2:99:e9:28:ba:7d:a6:a1:86:0c:25:e3:04:57:
09:a8:83:2e:72:9e:42:8b:9c:78:05:76:75:3c:33:
fb:34:66:a9:54:b7:5d:9b:b7:af:60:a3:49:f8:b6:
10:8f:d5:74:78:5c:6f:90:fd:ba:32:4b:b3:46:8f:
e5:6f:d9:62:c6:a8:7a:9b:a2:e0:e7:f1:a2:a9:a8:
87:24:c5:b1:b7:88:4b:91:c6:a0:51:3c:43:17:f3:
4c:56:7b:c4:23:49:7e:a4:41:c5:f9:e1:79:4d:28:
8e:f9:ec:c4:47:17:db:bc:d9:a0:6e:31:f1:2f:3f:
88:d0:55:05:02:79:c5:62:6a:32:32:53:03:49:8e:
e3:6a:3a:4f:f5:9b:23:87:0a:ed:26:c3:ee:13:55:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:DD:6A:34:C1:67:91:DB:11:F1:3D:91:34:BB:39:F1:62:3C:B6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_hfdajTBZ5HbEfE9kTS7OfFiPLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.103.121.0/24
144.31.55.0-144.31.56.255
144.31.58.0-144.31.60.255
150.241.121.0/24
177.3.193.0-177.3.194.255
177.3.198.0/24
177.3.201.0-177.3.207.255
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
50:98:40:33:c5:39:e8:96:ed:b1:02:da:1a:d0:45:94:9b:47:
88:bb:b5:43:9f:4e:27:e2:b0:05:04:69:29:b0:ff:e8:b5:de:
fc:d6:f2:41:b6:59:a3:c3:fd:e6:d9:ed:3e:75:9b:87:35:c7:
55:4e:30:de:56:2d:cd:cb:25:08:7c:79:3c:19:70:88:c1:39:
ee:3b:eb:4d:1d:39:63:f0:d3:81:2c:54:55:a6:1e:50:73:e5:
e4:d5:3a:ff:ce:b3:a9:ff:f2:8f:8a:92:f0:b9:49:18:0d:c6:
95:b9:a4:9d:5f:c7:a4:91:26:96:aa:a1:10:d3:22:e8:57:87:
e8:87:79:2d:d4:61:97:b2:fe:86:cf:ac:70:df:b4:45:fc:c1:
6a:2f:69:9b:5c:de:26:bb:c6:89:b4:ad:0a:30:bb:72:35:44:
5f:67:ab:34:be:9c:78:f0:ed:60:a2:4d:bb:d0:9a:24:ac:1a:
5e:6d:49:16:29:77:c2:be:cb:74:f9:4c:3f:85:1e:12:7e:64:
60:3a:79:fb:1e:89:fa:c5:a1:42:07:01:d2:f0:c7:44:c3:3c:
f5:a0:42:4b:5c:48:00:ad:db:fd:54:09:5c:7b:22:73:ab:7d:
88:a3:05:21:92:c4:7e:c0:40:d0:74:c8:ed:ff:26:94:90:28:
f8:bd:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:26:44 2026 by rpki-client