Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/HQKJlXpzXKC8AxaNWt2KaBwoTW8.roa
File: HQKJlXpzXKC8AxaNWt2KaBwoTW8.roa (raw, json)
Hash identifier: rDQ/IptDsOlIWhCMNigkYpZhiQ7BkhGTzRtoHdB9Hws=
Subject key identifier: 1D:02:89:95:7A:73:5C:A0:BC:03:16:8D:5A:DD:8A:68:1C:28:4D:6F
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A0A51C8F236081E0FB67ECA95A0A7BF9FD
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/HQKJlXpzXKC8AxaNWt2KaBwoTW8.roa
Signing time: Tue 15 Sep 2026 12:48:27 +0000
ROA not before: Tue 15 Sep 2026 12:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 2a0c:3480:100::/48 maxlen: 48
2a0c:3480:101::/48 maxlen: 48
2a0c:3480:102::/48 maxlen: 48
2a0c:3480:103::/48 maxlen: 48
2a0c:3480:104::/48 maxlen: 48
2a0c:3480:105::/48 maxlen: 48
2a0c:3480:106::/48 maxlen: 48
2a0c:3480:107::/48 maxlen: 48
2a0c:3480:108::/48 maxlen: 48
2a0c:3480:109::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Sep 2026 08:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:1c:8f:23:60:81:e0:fb:67:ec:a9:5a:0a:7b:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Sep 15 12:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d0289957a735ca0bc03168d5add8a681c284d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:79:fd:25:47:16:e2:50:18:4b:bc:08:12:
9d:21:53:6b:a4:74:66:15:1c:be:c0:eb:a4:9e:ea:
ae:54:52:47:75:40:00:9d:0e:ef:2d:42:8c:7e:55:
eb:b4:92:16:de:9c:34:cf:6b:dd:d8:e8:d0:67:2e:
3b:f2:0d:e4:f0:59:e8:ed:0a:86:dc:ae:bd:36:b6:
55:91:04:52:fd:15:d0:5a:6c:fd:09:ba:7c:b4:75:
45:ca:25:34:61:33:bb:eb:ac:e8:f8:9a:6e:8f:3a:
a6:45:cf:55:73:fb:5b:22:4a:3d:62:09:4d:72:a6:
0e:cd:80:0b:74:eb:14:5b:29:84:59:fb:00:54:83:
43:3e:cc:7c:7e:86:b1:74:88:49:5e:d9:e5:75:99:
b9:e5:c8:cb:14:4f:dc:52:f3:4e:b6:31:a4:b3:23:
92:69:77:83:bb:d6:3b:5c:f0:5b:8d:dc:f3:2f:a4:
ed:c3:67:f7:d4:2d:03:fd:68:b5:1f:a3:07:95:5e:
a4:8e:ae:04:25:a0:b3:43:a0:66:a5:26:f2:61:fa:
17:53:bc:a0:fa:57:6b:4d:06:ad:f8:da:a4:24:c5:
a8:3a:00:eb:5a:41:17:08:c9:93:d9:b7:01:35:c9:
bf:59:ff:95:59:72:65:f3:c4:e1:05:7a:05:d1:b1:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:89:95:7A:73:5C:A0:BC:03:16:8D:5A:DD:8A:68:1C:28:4D:6F
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/HQKJlXpzXKC8AxaNWt2KaBwoTW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3480:100::-2a0c:3480:109:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:f9:70:10:0f:19:2a:d4:3d:bf:d5:b2:36:53:6c:4e:5d:6f:
19:7c:99:db:91:55:37:44:b6:4e:66:62:ce:5f:c2:11:52:07:
a6:27:f6:53:b8:7f:93:09:ae:eb:22:e0:bf:5c:61:76:8f:2c:
49:8a:c6:33:d2:ca:a9:15:1e:b9:d8:7e:9b:b5:18:e0:95:f8:
42:04:d0:27:05:7c:bd:0d:94:2a:a7:82:66:40:12:17:08:7c:
42:e0:b9:4e:4b:c4:88:b7:dd:39:84:ca:6d:3c:40:76:bd:d2:
54:cb:3d:7b:65:3e:55:5d:0d:61:0a:ec:ab:79:93:c7:ea:70:
58:4a:38:4f:db:ca:24:07:d7:d6:ce:09:01:51:fd:a5:52:71:
7a:e3:6d:f3:17:83:80:b7:62:eb:ed:b8:c6:a8:3c:80:2b:20:
a7:af:f0:ab:e8:96:0a:b8:c8:1e:99:de:6d:61:c0:f8:48:91:
94:75:e9:f8:22:f0:12:75:60:19:81:a1:77:6b:ba:c8:8b:0e:
16:c4:4e:99:02:fa:ac:5e:34:82:b2:c4:ca:6f:53:4b:17:6a:
4d:fb:c4:88:c9:18:53:90:47:4c:61:98:fa:c9:9f:0e:83:56:
92:5d:6e:4f:75:71:a3:8e:d6:38:e4:51:eb:2d:18:bc:16:98:
c5:10:5d:2e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaClHI8jYIHg+2fsqVoKe/n9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDg2N2NjMjRkMGJlODlmMDVmYzg3MjU4ZTA4NzdhNjAx
NTgwYjkwHhcNMjYwOTE1MTI0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDAyODk5NTdhNzM1Y2EwYmMwMzE2OGQ1YWRkOGE2ODFjMjg0ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyap5/SVHFuJQGEu8CBKdIVNrpHRm
FRy+wOuknuquVFJHdUAAnQ7vLUKMflXrtJIW3pw0z2vd2OjQZy478g3k8Fno7QqG
3K69NrZVkQRS/RXQWmz9Cbp8tHVFyiU0YTO766zo+JpujzqmRc9Vc/tbIko9YglN
cqYOzYALdOsUWymEWfsAVINDPsx8foaxdIhJXtnldZm55cjLFE/cUvNOtjGksyOS
aXeDu9Y7XPBbjdzzL6Ttw2f31C0D/Wi1H6MHlV6kjq4EJaCzQ6BmpSbyYfoXU7yg
+ldrTQat+NqkJMWoOgDrWkEXCMmT2bcBNcm/Wf+VWXJl88ThBXoF0bHX8QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB0CiZV6c1ygvAMWjVrdimgcKE1vMB8GA1UdIwQY
MBaAFPnYZ8wk0L6J8F/Icljgh3pgFYC5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kaG56Q1RRdm9ud1g4aHlXT0NIZW1BVmdMay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvODA1MzJkLTAyOTItNDI3Ny04ZGU2
LTBmNmU3ODYxYTg3NS8xL0hRS0psWHB6WEtDOEF4YU5XdDJLYUJ3b1RXOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDEvODA1MzJkLTAyOTItNDI3Ny04ZGU2LTBmNmU3ODYxYTg3
NS8xLzEtZGhuekNUUXZvbndYOGh5V09DSGVtQVZnTGsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLAYIKwYBBQUHAQcBAf8EHTAbMBkEAgACMBMwEQMGACoM
NIABAwcBKgw0gAEIMA0GCSqGSIb3DQEBCwUAA4IBAQAb+XAQDxkq1D2/1bI2U2xO
XW8ZfJnbkVU3RLZOZmLOX8IRUgemJ/ZTuH+TCa7rIuC/XGF2jyxJisYz0sqpFR65
2H6btRjglfhCBNAnBXy9DZQqp4JmQBIXCHxC4LlOS8SIt905hMptPEB2vdJUyz17
ZT5VXQ1hCuyreZPH6nBYSjhP28okB9fWzgkBUf2lUnF6423zF4OAt2Lr7bjGqDyA
KyCnr/Cr6JYKuMgemd5tYcD4SJGUden4IvASdWAZgaF3a7rIiw4WxE6ZAvqsXjSC
ssTKb1NLF2pN+8SIyRhTkEdMYZj6yZ8Og1aSXW5PdXGjjtY45FHrLRi8FpjFEF0u
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:18:52 2026 by rpki-client