Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/ndtynDGC-EVnOzPcVJgQ2MEtyFI.roa
File: ndtynDGC-EVnOzPcVJgQ2MEtyFI.roa (raw, json)
Hash identifier: KXuLChOisOD0LvopTyxLQ89jxlg2aMENjJxaqLu8ceU=
Subject key identifier: 9D:DB:72:9C:31:82:F8:45:67:3B:33:DC:54:98:10:D8:C1:2D:C8:52
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0A1CCCAB73712F441DC7A4D8A2465EA1F
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/ndtynDGC-EVnOzPcVJgQ2MEtyFI.roa
Signing time: Mon 14 Sep 2026 21:22:27 +0000
ROA not before: Mon 14 Sep 2026 21:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 5.34.176.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
46.28.67.0/24 maxlen: 24
46.28.70.0/24 maxlen: 24
62.233.57.0/24 maxlen: 24
82.117.255.0/24 maxlen: 24
82.118.20.0/22 maxlen: 22
85.90.196.0/24 maxlen: 24
85.90.199.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
195.211.96.0/23 maxlen: 23
195.211.98.0/23 maxlen: 23
217.12.206.0/23 maxlen: 23
2a05:9400::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a12:6fc2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Sep 2026 17:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:cc:ca:b7:37:12:f4:41:dc:7a:4d:8a:24:65:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 14 21:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ddb729c3182f845673b33dc549810d8c12dc852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:cf:64:f1:40:64:05:8f:8b:0f:e1:81:5e:
1b:f9:72:d1:9a:7c:47:36:a0:65:3b:01:b6:02:bf:
98:9b:05:7f:18:cf:aa:a2:0e:41:e6:57:26:38:e9:
d6:cb:19:75:f6:92:06:0f:72:4e:c4:1d:2a:ef:44:
57:9f:a1:19:81:74:2a:89:16:02:e5:be:dd:6e:90:
c0:20:dd:95:13:f8:01:f9:f6:25:43:06:95:a8:a2:
bd:eb:da:b4:3b:23:c0:3a:fc:3a:5e:0f:27:e7:74:
36:11:13:02:62:a1:d3:cb:a0:c4:93:c0:63:24:7c:
66:d7:04:df:1b:e7:a8:4b:e1:bf:73:55:a0:f6:73:
ab:13:d4:f1:b8:1f:e3:cd:0f:c6:10:15:79:93:48:
1e:1d:1d:92:d2:d0:86:23:ff:11:44:6d:4d:97:cc:
57:27:0d:b1:bd:06:d2:ab:a5:a3:f3:17:14:c1:75:
ad:26:53:04:c1:e2:63:5f:98:3e:6a:32:38:f5:f8:
b2:7d:4e:48:55:70:6f:10:f3:56:cd:fe:7c:55:f2:
7c:60:9e:c5:04:f8:cc:9f:11:f4:83:d8:1a:82:49:
34:f0:5c:98:48:88:63:41:75:5c:3e:26:82:ad:ac:
d4:d0:7a:29:00:32:e9:2c:eb:c5:b4:97:93:9e:69:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:72:9C:31:82:F8:45:67:3B:33:DC:54:98:10:D8:C1:2D:C8:52
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/ndtynDGC-EVnOzPcVJgQ2MEtyFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.176.0/23
45.90.56.0/22
46.28.67.0/24
46.28.70.0/24
62.233.57.0/24
82.117.255.0/24
82.118.20.0/22
85.90.196.0/24
85.90.199.0/24
195.123.232.0/22
195.123.240.0/21
195.211.96.0/22
217.12.206.0/23
IPv6:
2a05:9400::-2a05:9404:ffff:ffff:ffff:ffff:ffff:ffff
2a05:9406::/32
2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:d0:0e:31:b8:29:5b:39:f1:82:78:58:87:6d:31:bc:59:68:
3c:b9:46:25:4c:e5:41:1d:99:82:87:26:c9:a4:97:8f:29:a6:
11:80:db:b5:f3:da:8e:3a:f6:3f:e1:18:c0:67:4a:8f:31:9c:
51:88:df:df:d8:3a:bf:54:33:c1:a8:e3:d8:f4:c8:dd:d8:c1:
2c:63:d7:36:4a:38:7d:8f:06:0c:58:a8:cd:1e:cc:df:df:64:
cc:5a:31:7a:96:09:eb:e7:d5:d4:ae:a9:03:79:ae:fc:d2:36:
e8:2b:07:3c:dd:83:19:6d:ec:bc:87:46:5c:3d:25:0f:8b:6d:
3c:58:4e:02:cb:12:aa:58:25:d8:b9:1f:ec:ff:a3:81:ec:ed:
4a:eb:c0:5c:af:e2:3f:cf:ea:8a:90:26:55:1d:82:64:34:6f:
f4:09:6a:02:bb:ab:77:08:18:fb:44:35:d1:01:eb:df:83:87:
d4:13:d2:86:6b:bb:23:a8:75:9c:1d:49:74:4f:c4:b8:52:79:
1b:06:2b:3e:27:2a:ee:6e:1b:17:a9:04:62:ec:63:dd:40:3b:
85:c9:10:73:c1:d6:fa:d2:2b:10:d9:50:32:15:13:46:14:cd:
5a:d4:21:e1:46:63:87:5f:a6:04:fa:f5:5e:86:d7:ea:93:0c:
6e:dd:cf:f4
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISAaChzMq3NxL0Qdx6TYokZeofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2VlZTM1NTc3OTYzNGUwMmExNGIzOTIyMDM2N2YzYjM0
ZTViOTUwHhcNMjYwOTE0MjEyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGRiNzI5YzMxODJmODQ1NjczYjMzZGM1NDk4MTBkOGMxMmRjODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hvPZPFAZAWPiw/hgV4b+XLRmnxH
NqBlOwG2Ar+YmwV/GM+qog5B5lcmOOnWyxl19pIGD3JOxB0q70RXn6EZgXQqiRYC
5b7dbpDAIN2VE/gB+fYlQwaVqKK969q0OyPAOvw6Xg8n53Q2ERMCYqHTy6DEk8Bj
JHxm1wTfG+eoS+G/c1Wg9nOrE9TxuB/jzQ/GEBV5k0geHR2S0tCGI/8RRG1Nl8xX
Jw2xvQbSq6Wj8xcUwXWtJlMEweJjX5g+ajI49fiyfU5IVXBvEPNWzf58VfJ8YJ7F
BPjMnxH0g9gagkk08FyYSIhjQXVcPiaCrazU0HopADLpLOvFtJeTnmkvHQIDAQAB
o4ICgjCCAn4wHQYDVR0OBBYEFJ3bcpwxgvhFZzsz3FSYENjBLchSMB8GA1UdIwQY
MBaAFG1+7jVXeWNOAqFLOSIDZ/OzTluVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlg3dU5WZDVZMDRDb1VzNUlnTm44N05PVzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83M2E5YWItNTMyMS00M2RlLWIwYTEt
MTA5MDQ0Y2YyM2ZiLzEvbmR0eW5ER0MtRVZuT3pQY1ZKZ1EyTUV0eUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83M2E5YWItNTMyMS00M2RlLWIwYTEtMTA5MDQ0Y2YyM2Zi
LzEvYlg3dU5WZDVZMDRDb1VzNUlnTm44N05PVzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBUBAIAATBOAwQBBSKw
AwQCLVo4AwQALhxDAwQALhxGAwQAPuk5AwQAUnX/AwQCUnYUAwQAVVrEAwQAVVrH
AwQCw3voAwQDw3vwAwQCw9NgAwQB2QzOMCwEAgACMCYwDQMEAioFlAMFACoFlAQD
BQAqBZQGMA4DBQYqEm/AAwUAKhJvwjANBgkqhkiG9w0BAQsFAAOCAQEANtAOMbgp
WznxgnhYh20xvFloPLlGJUzlQR2ZgocmyaSXjymmEYDbtfPajjr2P+EYwGdKjzGc
UYjf39g6v1Qzwajj2PTI3djBLGPXNko4fY8GDFiozR7M399kzFoxepYJ6+fV1K6p
A3mu/NI26CsHPN2DGW3svIdGXD0lD4ttPFhOAssSqlgl2Lkf7P+jgeztSuvAXK/i
P8/qipAmVR2CZDRv9AlqArurdwgY+0Q10QHr34OH1BPShmu7I6h1nB1JdE/EuFJ5
GwYrPicq7m4bF6kEYuxj3UA7hckQc8HW+tIrENlQMhUTRhTNWtQh4UZjh1+mBPr1
XobX6pMMbt3P9A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:31:05 2026 by rpki-client