Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/o9ScS3W80_xd3H8pcbQ29d4lrYg.roa
File: o9ScS3W80_xd3H8pcbQ29d4lrYg.roa (raw, json)
Hash identifier: ChWBiu1mRieKyeT75on+gE8MRgT7/z5qc0hp9kG73O4=
Subject key identifier: A3:D4:9C:4B:75:BC:D3:FC:5D:DC:7F:29:71:B4:36:F5:DE:25:AD:88
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01A111C86B086FB87A6CB91C2B748F7033BB
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/o9ScS3W80_xd3H8pcbQ29d4lrYg.roa
Signing time: Tue 06 Oct 2026 15:15:09 +0000
ROA not before: Tue 06 Oct 2026 15:15:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207147
IP address blocks: 45.11.68.0/22 maxlen: 24
45.88.128.0/22 maxlen: 24
45.89.112.0/22 maxlen: 22
45.143.208.0/22 maxlen: 22
45.143.208.0/24 maxlen: 24
45.143.209.0/24 maxlen: 24
45.143.210.0/24 maxlen: 24
45.143.211.0/24 maxlen: 24
46.183.32.0/22 maxlen: 22
46.183.32.0/24 maxlen: 24
46.183.33.0/24 maxlen: 24
46.183.34.0/24 maxlen: 24
46.183.35.0/24 maxlen: 24
46.183.36.0/22 maxlen: 22
46.183.36.0/24 maxlen: 24
46.183.37.0/24 maxlen: 24
46.183.38.0/24 maxlen: 24
46.183.39.0/24 maxlen: 24
84.247.4.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
85.204.148.0/24 maxlen: 24
85.204.149.0/24 maxlen: 24
85.204.150.0/24 maxlen: 24
85.204.151.0/24 maxlen: 24
89.37.228.0/22 maxlen: 24
95.111.152.0/24 maxlen: 24
95.111.153.0/24 maxlen: 24
95.111.154.0/24 maxlen: 24
95.111.155.0/24 maxlen: 24
130.0.88.0/22 maxlen: 24
130.0.88.0/24 maxlen: 24
130.0.89.0/24 maxlen: 24
139.100.176.0/24 maxlen: 24
139.100.177.0/24 maxlen: 24
139.100.178.0/24 maxlen: 24
139.100.179.0/24 maxlen: 24
139.100.180.0/24 maxlen: 24
139.100.181.0/24 maxlen: 24
139.100.182.0/24 maxlen: 24
139.100.183.0/24 maxlen: 24
176.223.176.0/22 maxlen: 24
176.223.176.0/24 maxlen: 24
185.164.212.0/22 maxlen: 24
185.178.88.0/22 maxlen: 24
185.178.91.0/24 maxlen: 24
185.194.120.0/22 maxlen: 24
185.194.120.0/24 maxlen: 24
185.194.121.0/24 maxlen: 24
185.194.122.0/24 maxlen: 24
185.194.123.0/24 maxlen: 24
185.237.40.0/22 maxlen: 24
2a0b:9c00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Oct 2026 13:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:c8:6b:08:6f:b8:7a:6c:b9:1c:2b:74:8f:70:33:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Oct 6 15:15:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3d49c4b75bcd3fc5ddc7f2971b436f5de25ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:7c:6f:aa:45:0d:6f:d2:f7:24:1f:15:af:
9c:4f:dc:e8:f1:e5:8b:d0:59:ad:31:14:91:ba:f6:
96:57:da:e2:37:a6:fa:e6:be:cc:9f:42:86:71:02:
2d:de:ff:5b:62:b0:20:43:2b:5e:6e:64:2e:da:07:
a1:68:56:e6:cd:cf:3b:3f:72:e1:ad:95:e6:6c:74:
c4:65:6c:e2:51:fd:bb:99:d7:11:9e:a2:06:42:4d:
58:7a:c6:ba:88:1f:bc:f1:21:28:60:3d:ba:65:1d:
82:d8:78:d6:e4:c3:12:86:0d:7d:db:41:84:aa:65:
62:de:34:e3:f7:0c:42:4a:33:71:ae:8a:81:2b:2b:
8b:d9:4a:2d:86:69:1b:e8:c0:f5:91:c4:e0:ae:22:
db:c0:4d:ae:19:8c:e8:82:45:9e:9e:3b:c6:a9:08:
d8:75:02:ea:e9:02:75:1e:ec:14:b7:7c:53:64:b5:
f4:91:9e:83:d6:4a:c8:6b:8c:42:90:20:28:46:ec:
e0:aa:9f:41:98:3d:0c:b3:e4:a0:cc:b5:d9:ba:c1:
e9:44:1a:de:38:36:b1:b9:0a:c9:ea:62:fd:76:30:
4e:f4:ce:0f:43:d1:fd:c7:ed:67:10:67:fd:75:8b:
5a:fe:ab:0d:1a:0a:54:16:67:d3:4d:97:95:82:95:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:9C:4B:75:BC:D3:FC:5D:DC:7F:29:71:B4:36:F5:DE:25:AD:88
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/o9ScS3W80_xd3H8pcbQ29d4lrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.68.0/22
45.88.128.0/22
45.89.112.0/22
45.143.208.0/22
46.183.32.0/21
84.247.4.0/22
85.204.148.0/22
89.37.228.0/22
95.111.152.0/22
130.0.88.0/22
139.100.176.0/21
176.223.176.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
IPv6:
2a0b:9c00::/48
Signature Algorithm: sha256WithRSAEncryption
21:ae:af:df:da:27:7e:9c:23:85:31:12:48:a6:43:da:ee:94:
56:45:98:0c:62:d9:0e:f3:48:a0:ae:ad:d2:4a:e3:d3:21:f2:
00:54:76:a6:a1:f5:34:64:dc:ff:ab:23:59:45:f1:af:92:a0:
85:5d:e9:f5:ac:8e:73:77:c1:5a:14:cc:68:cd:63:a1:04:5e:
e0:c6:3e:b4:98:42:40:1e:66:9f:88:7c:cf:61:27:81:e7:60:
1e:33:18:de:0b:93:07:63:d6:fe:0b:70:86:e0:e1:6e:8b:27:
a8:1e:4e:ae:9d:09:42:63:ed:5e:48:82:fd:92:1f:cd:e5:2a:
d1:fa:41:a9:a9:20:b2:9f:9a:12:15:48:53:33:0e:1f:2b:5d:
4b:e2:41:71:51:7d:c2:3b:25:1c:95:6c:42:4b:97:5b:5d:4f:
15:39:8d:a1:ab:56:79:eb:b1:9b:3c:de:69:55:fb:37:25:6d:
2a:dd:02:40:28:7d:e1:2a:05:99:9d:e3:7e:8c:07:fc:e1:47:
a2:4b:0f:26:ac:50:7d:5e:ca:fa:19:4f:1d:2b:74:a8:b8:ad:
86:ce:bf:16:e5:ae:66:a2:a1:6e:e3:f6:0a:52:2e:68:df:30:
63:3a:8a:f4:78:99:c2:28:63:d8:27:6b:c4:67:54:24:41:0f:
ec:7c:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:20:42 2026 by rpki-client