Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Svdp-oOrttiZ4vTPqBPIOtE-MGU.roa
File: Svdp-oOrttiZ4vTPqBPIOtE-MGU.roa (raw, json)
Hash identifier: iBmsYpg2G3i75VKbJZVSO0e9mPGx3MBHzSokvq1wyRA=
Subject key identifier: 4A:F7:69:FA:83:AB:B6:D8:99:E2:F4:CF:A8:13:C8:3A:D1:3E:30:65
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019A2A741AB45863D5FBB4EB240EFE922D5E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Svdp-oOrttiZ4vTPqBPIOtE-MGU.roa
Signing time: Tue 28 Oct 2025 10:54:03 +0000
ROA not before: Tue 28 Oct 2025 10:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
46.253.134.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.96.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.187.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Nov 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:74:1a:b4:58:63:d5:fb:b4:eb:24:0e:fe:92:2d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 28 10:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af769fa83abb6d899e2f4cfa813c83ad13e3065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:0c:57:bf:79:59:61:c9:2d:49:99:94:93:
f3:0c:54:f6:25:1e:d7:e7:ba:db:bd:db:17:55:10:
ff:e7:6c:41:c6:7f:b6:d8:f1:c6:70:f2:b5:20:ec:
d8:76:5d:f2:f1:56:45:ba:87:d7:d2:23:c4:8c:1e:
7e:80:7e:0c:cf:66:78:bb:ec:dc:06:7e:0a:14:87:
33:71:e2:97:51:ae:d4:ff:e5:d8:96:76:7a:03:1d:
75:27:62:eb:d4:b2:e8:9d:bc:01:be:4c:06:4d:57:
e4:a5:5b:67:37:5c:ae:fb:47:dd:fb:25:d4:9b:19:
d5:30:94:56:1e:36:60:e8:7f:18:37:f2:dd:b3:3e:
37:52:a2:05:d3:7f:fb:ac:5d:44:48:02:44:14:e5:
03:05:a1:e1:39:51:31:81:f1:8d:4a:a5:73:4a:2c:
ed:1c:7d:21:2c:25:a3:1b:8e:2d:54:cb:53:58:7e:
7c:26:d9:92:36:13:8c:71:e2:95:ab:07:fd:a6:26:
57:d9:fe:90:5a:f7:4d:d2:6f:69:34:53:14:2e:bf:
4f:89:39:cf:42:58:99:0d:d0:72:c6:42:d4:3e:eb:
cb:6f:12:d3:4c:6c:12:30:b5:44:ba:b9:0c:1c:6a:
37:95:35:d6:fb:fb:7c:66:33:f0:84:f4:7b:00:0d:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:69:FA:83:AB:B6:D8:99:E2:F4:CF:A8:13:C8:3A:D1:3E:30:65
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Svdp-oOrttiZ4vTPqBPIOtE-MGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
46.253.134.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.96.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/24
91.148.187.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
9e:2c:27:f4:00:a9:be:24:aa:7a:62:f1:ac:be:02:ce:6f:62:
3a:57:3c:5a:15:68:5b:d6:4b:d6:3f:ea:c3:f7:d8:d6:8b:36:
72:1a:4b:f8:2d:e6:fb:4c:3b:b8:a5:50:ad:c5:fa:3e:d9:39:
83:d0:d2:6f:99:6d:17:fb:6c:00:0a:c0:5b:0e:79:6f:66:a1:
f1:a6:1e:33:34:6b:40:d5:1f:79:c5:00:25:80:87:f6:6e:8b:
9c:4f:cc:2f:94:b9:fe:79:d1:d0:a5:76:f1:5b:b4:4b:b8:6e:
06:2f:1f:be:c0:ee:6e:89:e9:9a:7e:1e:43:21:17:15:28:03:
59:e9:7a:07:5c:65:75:16:94:e0:de:17:3f:7e:48:b9:41:eb:
07:58:71:e8:97:88:2f:f4:c7:eb:4c:10:72:73:08:de:e4:fb:
4b:72:b2:d8:03:00:b3:e2:90:13:aa:4a:43:19:92:6d:da:90:
c4:4c:e0:96:bf:45:8d:fe:4a:d5:b1:e4:6c:89:06:83:f8:da:
79:94:7d:4d:25:8d:b1:61:60:ea:2e:0b:ac:29:b0:ad:8c:3d:
84:99:76:c6:37:87:36:63:cf:b6:ee:37:08:e8:c0:0a:18:36:
11:82:ce:69:4d:8d:e5:e0:5a:62:1b:f8:46:97:b1:9d:95:f5:
72:c4:58:d2
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgISAZoqdBq0WGPV+7TrJA7+ki1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUxMDI4MTA1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY3NjlmYTgzYWJiNmQ4OTllMmY0Y2ZhODEzYzgzYWQxM2UzMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu20MV795WWHJLUmZlJPzDFT2JR7X
57rbvdsXVRD/52xBxn+22PHGcPK1IOzYdl3y8VZFuofX0iPEjB5+gH4Mz2Z4u+zc
Bn4KFIczceKXUa7U/+XYlnZ6Ax11J2Lr1LLonbwBvkwGTVfkpVtnN1yu+0fd+yXU
mxnVMJRWHjZg6H8YN/Ldsz43UqIF03/7rF1ESAJEFOUDBaHhOVExgfGNSqVzSizt
HH0hLCWjG44tVMtTWH58JtmSNhOMceKVqwf9piZX2f6QWvdN0m9pNFMULr9PiTnP
QliZDdByxkLUPuvLbxLTTGwSMLVEurkMHGo3lTXW+/t8ZjPwhPR7AA2+lwIDAQAB
o4ID+jCCA/YwHQYDVR0OBBYEFEr3afqDq7bYmeL0z6gTyDrRPjBlMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvU3ZkcC1vT3J0dGlaNHZUUHFCUElPdEUtTUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICDgYIKwYBBQUHAQcBAf8EggH9MIIB+TCCAeYEAgABMIIB
3gMEAQVoqAMEAAVorgMEAC79hgMEAE1MCAMEAU1MCgMEAE6AAAMEAE6ACAMEAE6A
KwMEAE6APAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6AUQMEAE6AXAMEAE6A
XgMEAE6AYAMEAE6AYgMEAU6AbAMEAE6OAQMEAU6OBAMEAE6OEQMEAE6OFAMEAE6O
GDAMAwQATo4hAwQATo4iMAwDBABOji8DBABOjjADBABOjjwDBABOjj8DBABPfAAD
BABPfA8DBAFPfBQwDAMEAE98FwMEAE98HAMEAE98LwMEAU98MjAMAwQAT3xJAwQA
T3xKAwQAT3xMAwQAT3xPAwQAT3xSAwQAUnbgAwQAUnbsAwQAUnbuAwQAUnb0AwQB
Unb2AwQAV/YCAwQAW5SDAwQAW5SMAwQAW5SVAwQAW5SgAwQAW5SoAwQAW5S7AwQB
W7/YAwQAXkiRAwQCXkiUAwQBXkieAwQAgrngAwQAgrniAwQAgrnlMAwDBACCuesD
BAGCuewDBACCufgDBACCufoDBAGw8bAwDAMEBLKEUAMEAbKEVAMEArmUoAMEArnF
mAMEAbnonAMEALnonzAMAwQC2a6UAwQA2a6WMAwDBAPZrpgDBADZrpoDBADZrp8w
DQQCAAIwBwMFACoBh0AwDQYJKoZIhvcNAQELBQADggEBAJ4sJ/QAqb4kqnpi8ay+
As5vYjpXPFoVaFvWS9Y/6sP32NaLNnIaS/gt5vtMO7ilUK3F+j7ZOYPQ0m+ZbRf7
bAAKwFsOeW9mofGmHjM0a0DVH3nFACWAh/Zui5xPzC+Uuf550dCldvFbtEu4bgYv
H77A7m6J6Zp+HkMhFxUoA1npegdcZXUWlODeFz9+SLlB6wdYceiXiC/0x+tMEHJz
CN7k+0tystgDALPikBOqSkMZkm3akMRM4Ja/RY3+StWx5GyJBoP42nmUfU0ljbFh
YOouC6wpsK2MPYSZdsY3hzZjz7buNwjowAoYNhGCzmlNjeXgWmIb+EaXsZ2V9XLE
WNI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:25 2025 by rpki-client