Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/WiFpUCuqcY3DootaSsey9OEUf5o.roa
File: WiFpUCuqcY3DootaSsey9OEUf5o.roa (raw, json)
Hash identifier: 1TYBSyaxf5CUWNeyL/URlNsQQAt5vkv93TOU8HfOMng=
Subject key identifier: 5A:21:69:50:2B:AA:71:8D:C3:A2:8B:5A:4A:C7:B2:F4:E1:14:7F:9A
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 019B7C7FD69708E33778F19C0CCEE9382EA7
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/WiFpUCuqcY3DootaSsey9OEUf5o.roa
Signing time: Fri 02 Jan 2026 02:18:31 +0000
ROA not before: Fri 02 Jan 2026 02:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209190
IP address blocks: 81.92.128.0/20 maxlen: 20
81.92.128.0/21 maxlen: 21
81.92.136.0/21 maxlen: 21
81.92.142.0/24 maxlen: 24
81.92.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:d6:97:08:e3:37:78:f1:9c:0c:ce:e9:38:2e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jan 2 02:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a2169502baa718dc3a28b5a4ac7b2f4e1147f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:10:18:fa:10:da:e5:99:dd:01:33:1e:47:
fa:f6:4b:cf:db:ce:3f:06:5f:ea:0d:d4:9d:c2:12:
81:45:89:8a:d5:6e:ac:2d:8e:2c:ce:b5:a1:09:90:
b2:4f:6a:8d:26:36:d0:70:41:55:a3:ce:90:b1:22:
7c:6e:0e:85:42:94:17:d3:45:f5:6f:29:5e:40:ff:
f0:b3:69:b0:48:d7:1a:14:a4:af:80:b5:74:21:26:
6b:bb:19:a6:09:da:bb:1b:cd:6b:e9:a5:b3:d5:e4:
8a:b1:c3:02:00:4d:71:e2:37:ad:72:d7:1d:60:8f:
2c:35:90:73:b3:79:71:f8:0e:d1:1f:cf:81:3a:e4:
ca:29:fa:03:28:94:14:41:d5:55:4a:fb:b8:f3:90:
99:9b:ab:44:80:2c:04:e5:86:b7:ca:4e:68:9a:a0:
32:fe:31:fe:63:b6:ee:0f:89:06:58:9b:d7:b4:b8:
90:54:c6:91:1a:9e:11:b9:bf:99:a3:74:a9:e7:0b:
d7:6a:b1:c7:06:13:cf:99:d8:93:71:28:a8:94:8f:
dc:fe:b3:cb:b9:21:a2:91:65:65:32:d1:a8:40:26:
14:bb:89:f8:17:c1:0e:28:28:57:d5:a2:97:a4:50:
eb:bb:33:b0:62:1c:7d:7b:a8:13:8c:f7:d0:d9:7b:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:69:50:2B:AA:71:8D:C3:A2:8B:5A:4A:C7:B2:F4:E1:14:7F:9A
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/WiFpUCuqcY3DootaSsey9OEUf5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:76:76:7a:7e:a7:af:b2:30:c0:9f:24:dd:be:54:56:53:a4:
7c:f2:84:2d:84:58:6d:0f:56:18:56:26:c8:30:ae:9c:1f:6f:
f9:ab:20:2d:2c:34:af:c3:32:cd:c2:ab:c4:98:fa:8b:1e:6d:
bf:51:26:b4:50:5d:b3:4d:ed:ef:7f:3b:ab:7f:c3:55:3b:bf:
cb:fc:1a:20:bc:19:27:7b:83:b5:86:d7:ed:72:e5:04:14:93:
d8:15:de:e4:15:8c:55:fa:19:e8:e4:a0:c3:d1:2d:e6:50:5f:
f1:55:a8:89:8d:11:61:b9:1c:ca:5e:b4:42:88:0b:7e:d2:c2:
bd:10:93:41:bd:73:c9:26:6e:f6:d1:d7:75:15:e2:ab:06:09:
aa:ea:ea:cc:51:01:14:17:c1:ac:71:14:8e:70:c4:76:c6:d0:
a1:cf:9d:50:32:6f:2c:9d:c6:29:84:40:37:fd:e1:57:b4:f4:
e1:83:1a:6e:ad:2b:4b:bf:45:4d:54:56:51:00:b0:d5:cc:d1:
d5:b8:5d:41:8a:db:ee:25:bf:12:da:f7:42:97:1e:8e:d0:d3:
96:5d:56:e2:a6:e1:54:c7:d8:b6:dc:7d:a2:1f:2b:19:f0:0c:
c8:fb:de:12:72:42:60:46:90:f6:0e:45:da:e4:aa:46:cb:fc:
c4:0c:3b:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f9aXCOM3ePGcDM7pOC6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDM2OWEzNTg5NjFmNzI4NGZiZDU5MWU5Mjc3MzdjZGIw
NWMzNWQwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTIxNjk1MDJiYWE3MThkYzNhMjhiNWE0YWM3YjJmNGUxMTQ3ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YcQGPoQ2uWZ3QEzHkf69kvP284/
Bl/qDdSdwhKBRYmK1W6sLY4szrWhCZCyT2qNJjbQcEFVo86QsSJ8bg6FQpQX00X1
byleQP/ws2mwSNcaFKSvgLV0ISZruxmmCdq7G81r6aWz1eSKscMCAE1x4jetctcd
YI8sNZBzs3lx+A7RH8+BOuTKKfoDKJQUQdVVSvu485CZm6tEgCwE5Ya3yk5omqAy
/jH+Y7buD4kGWJvXtLiQVMaRGp4Rub+Zo3Sp5wvXarHHBhPPmdiTcSiolI/c/rPL
uSGikWVlMtGoQCYUu4n4F8EOKChX1aKXpFDruzOwYhx9e6gTjPfQ2XvcKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFohaVArqnGNw6KLWkrHsvThFH+aMB8GA1UdIwQY
MBaAFAgDaaNYlh9yhPvVkeknc3zbBcNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMt
M2YxYjE2YzZjZDYzLzEvV2lGcFVDdXFjWTNEb290YVNzZXk5T0VVZjVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMtM2YxYjE2YzZjZDYz
LzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUVyAMA0G
CSqGSIb3DQEBCwUAA4IBAQB9dnZ6fqevsjDAnyTdvlRWU6R88oQthFhtD1YYVibI
MK6cH2/5qyAtLDSvwzLNwqvEmPqLHm2/USa0UF2zTe3vfzurf8NVO7/L/BogvBkn
e4O1htftcuUEFJPYFd7kFYxV+hno5KDD0S3mUF/xVaiJjRFhuRzKXrRCiAt+0sK9
EJNBvXPJJm720dd1FeKrBgmq6urMUQEUF8GscRSOcMR2xtChz51QMm8sncYphEA3
/eFXtPThgxpurStLv0VNVFZRALDVzNHVuF1BitvuJb8S2vdClx6O0NOWXVbipuFU
x9i23H2iHysZ8AzI+94SckJgRpD2DkXa5KpGy/zEDDv6
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:36 2026 by rpki-client