Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137362e302f32342d3234203d3e20343031333632.roa
File: 3230302e3138302e3137362e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: qCqCEn16GJZXdDDIqMYpIeeDPpsD15ult1vmxuAtrVk=
Subject key identifier: 19:94:65:99:98:4E:E7:16:17:C7:D4:98:6B:A6:61:D2:10:BF:11:D9
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 1295B8703BE517EB39D51AA7850190181A3A52D5
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137362e302f32342d3234203d3e20343031333632.roa
Signing time: Sat 19 Sep 2026 13:11:00 +0000
ROA not before: Sat 19 Sep 2026 13:06:00 +0000
ROA not after: Sat 18 Sep 2027 13:11:00 +0000
asID: 401362
IP address blocks: 200.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:95:b8:70:3b:e5:17:eb:39:d5:1a:a7:85:01:90:18:1a:3a:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 19 13:06:00 2026 GMT
Not After : Sep 18 13:11:00 2027 GMT
Subject: CN=19946599984EE71617C7D4986BA661D210BF11D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:7c:fa:39:8a:fa:02:a9:35:88:12:f1:18:
0d:64:8c:c9:30:f7:94:00:71:a4:bb:b3:56:e5:b5:
39:56:c7:75:4b:99:38:cd:5d:61:02:1d:87:13:68:
0e:cf:5d:9d:e6:9e:33:66:34:bb:41:64:1d:f0:8c:
4e:fb:21:a5:e4:01:4c:22:ef:79:44:4a:e9:f5:86:
eb:72:50:1f:6b:d6:00:f1:ee:2a:e9:3f:c8:9e:75:
e2:2e:3d:52:6f:aa:a8:e3:d1:9f:61:e3:82:9d:be:
13:ef:47:ea:09:19:61:cd:5d:15:74:94:45:58:92:
cf:eb:29:ce:b8:83:65:4e:2f:83:3a:65:10:2f:4a:
6a:ab:0b:fa:8a:c2:6e:ee:be:5b:28:69:46:a1:29:
62:bf:23:79:db:29:16:d2:b6:68:6e:28:68:9a:b0:
d9:d5:b5:9a:11:0c:cc:75:3f:20:50:08:0a:e2:78:
9c:33:48:02:f7:cf:f3:ce:e7:05:a2:85:5f:6c:83:
bd:bc:32:37:a7:e9:9d:f8:ee:15:97:a6:55:81:6e:
c4:ee:54:ea:02:3a:22:83:48:df:07:0c:d5:93:09:
17:3f:ca:93:a8:88:38:0a:06:9d:2c:c9:b7:89:4f:
09:92:e1:ef:4c:67:3f:29:b7:49:1c:5d:c7:32:b4:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:65:99:98:4E:E7:16:17:C7:D4:98:6B:A6:61:D2:10:BF:11:D9
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137362e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:70:0c:a4:7c:cb:77:ea:33:d6:86:35:43:3b:c8:f1:66:27:
d1:b9:92:b6:35:df:c4:20:ec:67:a8:bb:25:58:99:b4:e8:93:
0b:5d:2f:b0:5d:40:51:67:52:f7:01:ee:5c:9e:05:73:97:6f:
da:3c:db:90:3f:21:b3:22:42:ed:e0:32:9e:f9:2b:31:81:8c:
68:a1:d3:19:86:9c:75:f4:21:ac:70:8a:9a:12:2c:c6:d7:6d:
4e:4c:d0:73:af:ca:25:dc:7e:33:cb:9c:34:4f:ad:08:1a:92:
93:ba:dc:18:7f:f7:55:ee:b8:2a:6a:1e:a2:82:01:ab:fb:84:
11:9f:80:39:f9:35:59:3e:f4:cc:89:19:6e:ef:44:83:4d:c2:
b1:bd:6f:6b:14:33:4e:35:e0:14:6a:7f:ab:c6:08:79:bd:e5:
6f:5d:4d:c7:13:b2:a1:e1:33:18:e1:de:cf:32:c5:99:db:27:
6f:99:4d:71:a8:d8:50:9f:e7:52:4c:17:97:87:3f:cd:09:37:
98:92:ab:ff:61:71:57:5f:24:bf:83:5b:51:eb:9a:3d:dd:b5:
d0:2e:ef:b1:d7:1b:0e:d4:c6:de:60:83:fa:bc:91:71:46:80:
ca:fa:5f:48:de:d0:8a:ea:13:48:8f:f5:96:0f:60:4e:59:8b:
86:62:02:93
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIUEpW4cDvlF+s51RqnhQGQGBo6UtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjA5MTkxMzA2MDBaFw0yNzA5MTgxMzExMDBaMDMxMTAvBgNV
BAMTKDE5OTQ2NTk5OTg0RUU3MTYxN0M3RDQ5ODZCQTY2MUQyMTBCRjExRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwnz6OYr6Aqk1iBLxGA1kjMkw
95QAcaS7s1bltTlWx3VLmTjNXWECHYcTaA7PXZ3mnjNmNLtBZB3wjE77IaXkAUwi
73lESun1hutyUB9r1gDx7irpP8iedeIuPVJvqqjj0Z9h44KdvhPvR+oJGWHNXRV0
lEVYks/rKc64g2VOL4M6ZRAvSmqrC/qKwm7uvlsoaUahKWK/I3nbKRbStmhuKGia
sNnVtZoRDMx1PyBQCArieJwzSAL3z/PO5wWihV9sg728Mjen6Z347hWXplWBbsTu
VOoCOiKDSN8HDNWTCRc/ypOoiDgKBp0sybeJTwmS4e9MZz8pt0kcXccytHTTAgMB
AAGjggJ8MIICeDAdBgNVHQ4EFgQUGZRlmZhO5xYXx9SYa6Zh0hC/EdkwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF
BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy
ZTMxMzgzMDJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyLSwMA0GCSqGSIb3DQEBCwUAA4IBAQCLcAykfMt36jPW
hjVDO8jxZifRuZK2Nd/EIOxnqLslWJm06JMLXS+wXUBRZ1L3Ae5cngVzl2/aPNuQ
PyGzIkLt4DKe+SsxgYxoodMZhpx19CGscIqaEizG121OTNBzr8ol3H4zy5w0T60I
GpKTutwYf/dV7rgqah6iggGr+4QRn4A5+TVZPvTMiRlu70SDTcKxvW9rFDNONeAU
an+rxgh5veVvXU3HE7Kh4TMY4d7PMsWZ2ydvmU1xqNhQn+dSTBeXhz/NCTeYkqv/
YXFXXyS/g1tR65o93bXQLu+x1xsO1MbeYIP6vJFxRoDK+l9I3tCK6hNIj/WWD2BO
WYuGYgKT
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:16:08 2026 by rpki-client