Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGoLesZvQdYnFNd1twyRTbwzcoA.roa
File: NGoLesZvQdYnFNd1twyRTbwzcoA.roa (raw, json)
Hash identifier: mqQYRfvrPIptWo4XeJZG1icC//Dvj4wyDfc5mhI7rNg=
Subject key identifier: 34:6A:0B:7A:C6:6F:41:D6:27:14:D7:75:B7:0C:91:4D:BC:33:72:80
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D2109BC5111DAC856624228BEB5959E71
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGoLesZvQdYnFNd1twyRTbwzcoA.roa
Signing time: Tue 24 Mar 2026 18:09:39 +0000
ROA not before: Tue 24 Mar 2026 18:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200546
IP address blocks: 2a05:35c0:11::/48 maxlen: 48
2a06:1180:1f3::/48 maxlen: 48
2a06:1180:1000::/48 maxlen: 48
2a09:17c1:ca::/48 maxlen: 48
2a09:17c1:f3::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:2d06:1312::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:55::/48 maxlen: 48
2a0c:7886:1b3::/48 maxlen: 48
2a0e:15c0:abbc::/48 maxlen: 48
2a0e:15c7:11::/48 maxlen: 48
2a0e:15c7:d4::/48 maxlen: 48
2a0e:1a80:10::/48 maxlen: 48
2a0e:f600::/48 maxlen: 48
2a0e:f600:13::/48 maxlen: 48
2a0e:f603:33::/48 maxlen: 48
2a0f:1584:5::/48 maxlen: 48
2a0f:3047::/48 maxlen: 48
2a0f:7d06:77::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:e1c1:33::/48 maxlen: 48
2a0f:e202:11::/48 maxlen: 48
2a0f:e6c6:55::/48 maxlen: 48
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:ea44:22::/48 maxlen: 48
2a12:ac44:8426::/48 maxlen: 48
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:8c86:22::/48 maxlen: 48
2a13:c900:130::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Mar 2026 12:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:09:bc:51:11:da:c8:56:62:42:28:be:b5:95:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 24 18:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346a0b7ac66f41d62714d775b70c914dbc337280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:36:6c:fb:79:41:60:b8:aa:9a:37:1f:e4:
2c:58:4b:f6:c8:3b:45:0b:a5:9a:cd:36:ca:05:10:
6c:e2:c5:c7:67:7b:ba:c7:25:ec:35:dd:40:be:69:
3e:83:60:2a:5e:5c:34:0e:23:df:6b:5b:f2:23:d3:
85:f1:7a:ff:c7:12:8c:11:6c:e7:c2:27:f5:0a:5b:
5f:73:22:65:af:ad:2e:79:ff:33:a7:2c:51:5a:f0:
58:d6:53:13:64:25:37:0f:60:cd:55:ce:7a:92:e6:
0c:65:ca:2a:fc:5a:06:e5:6b:d3:c8:4d:e2:24:ef:
13:3d:2d:39:d0:94:f8:be:9b:54:ea:a0:67:c1:4e:
4e:50:11:0e:ef:10:28:76:d9:70:d7:b3:53:4d:eb:
18:07:c7:2f:d5:5f:fa:54:88:53:06:56:f4:df:a6:
ae:09:76:ca:50:c0:50:d4:3c:7e:d9:de:e2:89:c9:
c2:f3:3c:75:2c:98:17:74:7c:0c:ef:07:e0:19:6f:
92:c7:0b:93:81:e9:e1:70:46:d9:9a:dd:c9:e8:cd:
52:17:35:69:f2:60:48:89:62:cd:b1:04:d8:6a:de:
59:8e:28:60:60:ef:61:95:1b:a8:27:bd:b5:03:c4:
13:71:3f:ee:48:21:0c:a8:45:28:8f:8f:fb:47:30:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:0B:7A:C6:6F:41:D6:27:14:D7:75:B7:0C:91:4D:BC:33:72:80
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGoLesZvQdYnFNd1twyRTbwzcoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:35c0:11::/48
2a06:1180:1f3::/48
2a06:1180:1000::/48
2a09:17c1:ca::/48
2a09:17c1:f3::/48
2a0a:2d06:103::/48
2a0a:2d06:1312::/48
2a0c:7886:b::/48
2a0c:7886:55::/48
2a0c:7886:1b3::/48
2a0e:15c0:abbc::/48
2a0e:15c7:11::/48
2a0e:15c7:d4::/48
2a0e:1a80:10::/48
2a0e:f600::/48
2a0e:f600:13::/48
2a0e:f603:33::/48
2a0f:1584:5::/48
2a0f:3047::/48
2a0f:7d06:77::/48
2a0f:7d06:88::/48
2a0f:e1c1:33::/48
2a0f:e202:11::/48
2a0f:e6c6:55::/48
2a0f:e7c6:55::/48
2a0f:e847:2::/48
2a0f:ea44:22::/48
2a12:ac44:8426::/48
2a12:ecc0:158::/48
2a12:ecc0:34a::/48
2a13:8c86:22::/48
2a13:c900:130::/48
Signature Algorithm: sha256WithRSAEncryption
10:0a:16:d2:f9:de:01:24:35:fa:10:30:dd:01:4f:24:0b:31:
81:31:d5:b6:75:78:01:d9:c1:2e:5a:6e:c5:70:cb:4c:09:3e:
65:95:9e:3a:61:e4:c6:a0:7f:09:85:42:e5:01:4e:8e:7e:c9:
d5:27:4d:8d:a5:dc:a7:f7:a5:59:af:05:e3:ce:08:34:74:dd:
27:c0:1b:7f:ed:e6:63:6d:e1:b4:b3:0c:16:b4:bc:4e:bd:44:
19:a8:f0:91:8c:09:76:a2:46:2a:71:9a:80:38:06:3e:39:88:
a7:31:37:9f:a4:c2:3a:41:c8:ae:eb:1f:72:dd:bb:35:68:ab:
82:fb:7a:91:9e:3c:cb:69:e9:2e:54:f4:2d:ea:b2:4d:31:2d:
4d:69:83:85:80:ec:a7:dd:a2:81:29:f5:a4:62:9b:53:f1:c5:
d8:2d:b1:f7:f9:f5:53:7c:50:6f:01:93:20:38:14:c5:02:6c:
6f:ba:e0:31:bd:a9:7b:28:85:96:84:95:56:19:4d:71:4f:a3:
c8:0b:23:71:b6:84:a4:33:eb:50:53:1d:97:dd:74:a6:c7:72:
a7:b8:5b:b9:54:ef:81:ad:80:03:c8:94:90:9b:17:9d:d3:6c:
7c:d0:66:7c:05:c2:cb:f4:d7:df:aa:07:4f:f3:96:1b:5d:6e:
99:3b:44:01
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgISAZ0hCbxREdrIVmJCKL61lZ5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzI0MTgwOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDZhMGI3YWM2NmY0MWQ2MjcxNGQ3NzViNzBjOTE0ZGJjMzM3MjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW42bPt5QWC4qpo3H+QsWEv2yDtF
C6WazTbKBRBs4sXHZ3u6xyXsNd1Avmk+g2AqXlw0DiPfa1vyI9OF8Xr/xxKMEWzn
wif1CltfcyJlr60uef8zpyxRWvBY1lMTZCU3D2DNVc56kuYMZcoq/FoG5WvTyE3i
JO8TPS050JT4vptU6qBnwU5OUBEO7xAodtlw17NTTesYB8cv1V/6VIhTBlb036au
CXbKUMBQ1Dx+2d7iicnC8zx1LJgXdHwM7wfgGW+SxwuTgenhcEbZmt3J6M1SFzVp
8mBIiWLNsQTYat5ZjihgYO9hlRuoJ721A8QTcT/uSCEMqEUoj4/7RzADTwIDAQAB
o4IDLTCCAykwHQYDVR0OBBYEFDRqC3rGb0HWJxTXdbcMkU28M3KAMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTkdvTGVzWnZRZFluRk5kMXR3eVJUYnd6Y29BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCASgEAgACMIIB
IAMHACoFNcAAEQMHACoGEYAB8wMHACoGEYAQAAMHACoJF8EAygMHACoJF8EA8wMH
ACoKLQYBAwMHACoKLQYTEgMHACoMeIYACwMHACoMeIYAVQMHACoMeIYBswMHACoO
FcCrvAMHACoOFccAEQMHACoOFccA1AMHACoOGoAAEAMHACoO9gAAAAMHACoO9gAA
EwMHACoO9gMAMwMHACoPFYQABQMHACoPMEcAAAMHACoPfQYAdwMHACoPfQYAiAMH
ACoP4cEAMwMHACoP4gIAEQMHACoP5sYAVQMHACoP58YAVQMHACoP6EcAAgMHACoP
6kQAIgMHACoSrESEJgMHACoS7MABWAMHACoS7MADSgMHACoTjIYAIgMHACoTyQAB
MDANBgkqhkiG9w0BAQsFAAOCAQEAEAoW0vneASQ1+hAw3QFPJAsxgTHVtnV4AdnB
LlpuxXDLTAk+ZZWeOmHkxqB/CYVC5QFOjn7J1SdNjaXcp/elWa8F484INHTdJ8Ab
f+3mY23htLMMFrS8Tr1EGajwkYwJdqJGKnGagDgGPjmIpzE3n6TCOkHIrusfct27
NWirgvt6kZ48y2npLlT0LeqyTTEtTWmDhYDsp92igSn1pGKbU/HF2C2x9/n1U3xQ
bwGTIDgUxQJsb7rgMb2peyiFloSVVhlNcU+jyAsjcbaEpDPrUFMdl910psdyp7hb
uVTvga2AA8iUkJsXndNsfNBmfAXCy/TX36oHT/OWG11umTtEAQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:27 2026 by rpki-client