Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/32V4Zq0MwIl-DrSlEKpj3hqVg30.roa
File: 32V4Zq0MwIl-DrSlEKpj3hqVg30.roa (raw, json)
Hash identifier: 2i8tDXY2lhPHdCYRHAAzRDSTcPKnMihLy1Kog+Lyudw=
Subject key identifier: DF:65:78:66:AD:0C:C0:89:7E:0E:B4:A5:10:AA:63:DE:1A:95:83:7D
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019B76EB17EAC142C613DF20B35CF7380855
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/32V4Zq0MwIl-DrSlEKpj3hqVg30.roa
Signing time: Thu 01 Jan 2026 00:17:57 +0000
ROA not before: Thu 01 Jan 2026 00:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8814
IP address blocks: 194.135.152.0/24 maxlen: 24
194.135.153.0/24 maxlen: 24
194.135.154.0/24 maxlen: 24
194.135.155.0/24 maxlen: 24
194.135.156.0/24 maxlen: 24
194.135.157.0/24 maxlen: 24
194.135.158.0/24 maxlen: 24
194.135.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:17:ea:c1:42:c6:13:df:20:b3:5c:f7:38:08:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 00:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df657866ad0cc0897e0eb4a510aa63de1a95837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:5b:fa:71:a6:cb:e7:15:3f:7c:e4:1b:39:
5b:1f:5a:30:4d:e6:c5:85:27:6c:ab:e4:b3:5d:fa:
0b:fe:6e:8a:13:3f:3d:d2:6a:08:ab:e9:72:8c:5d:
0b:ce:a7:38:7b:60:0a:f2:6d:0c:15:c0:5b:cf:b3:
e8:37:ce:a3:ae:aa:42:4a:c9:ac:26:2b:10:f5:f4:
34:9b:db:77:0c:a8:f5:dd:a3:8d:6b:a2:b9:11:b5:
40:67:58:db:9b:7c:61:d9:1a:27:dc:ee:72:89:46:
47:90:fe:ca:7e:ae:bf:18:7a:b1:1c:ba:d4:1a:51:
c6:e7:ee:8d:57:40:ab:7f:bd:f9:f2:9e:c3:16:8d:
5b:c7:63:a7:2f:27:ee:52:fd:e1:4b:a9:2c:34:55:
fd:aa:f6:61:13:f1:85:ac:b2:9b:38:d7:ac:f0:b4:
73:ff:a8:07:6c:49:c2:14:c0:50:eb:01:d4:bd:dd:
51:68:77:ba:d2:91:c3:a0:80:e6:a1:d1:e2:f6:53:
98:54:42:90:6e:3c:4d:c1:7d:f2:85:2c:e4:05:1b:
a9:32:b6:de:7e:e8:2f:83:f0:90:8e:67:a1:97:04:
be:be:d6:e2:53:ee:8a:66:cb:aa:15:a9:05:6d:fa:
44:c0:a0:00:4b:46:c6:8f:c3:1a:84:a5:2c:bd:6a:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:78:66:AD:0C:C0:89:7E:0E:B4:A5:10:AA:63:DE:1A:95:83:7D
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/32V4Zq0MwIl-DrSlEKpj3hqVg30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.152.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:7e:85:8e:07:2c:6c:2e:34:30:d5:77:de:f4:a4:70:6a:fc:
4c:8c:d6:1e:0c:ae:25:d1:a3:79:a3:ba:54:28:66:7e:c2:1c:
ce:7f:63:80:ff:ac:3c:b4:a4:b3:27:9d:07:ba:87:a9:11:4c:
30:c5:e4:56:5d:4e:fe:f1:fa:e8:b9:d1:0f:e8:1c:31:8b:6a:
e8:3d:b2:1b:e8:92:40:ed:f1:6e:c7:04:82:36:b0:ef:ee:8d:
55:10:0b:30:17:aa:d9:b6:8f:b1:22:82:6e:57:27:ef:7b:9e:
2e:84:c2:75:c0:e0:f5:38:5a:79:b9:db:8f:ca:af:12:c7:36:
3b:86:52:e7:24:7e:e1:4f:4f:d4:38:cd:2e:be:18:af:79:4a:
a4:62:84:03:2d:4f:79:d7:c2:09:4e:e5:d7:59:e0:7c:ee:08:
f4:f9:2f:19:af:75:a5:7b:c5:d2:b7:f5:63:f2:82:72:d3:f3:
e7:55:4e:ac:0a:50:e0:50:56:ac:c1:7c:dc:87:3a:83:7d:31:
b3:e8:bc:2d:e8:d7:ef:48:88:0d:15:3c:2e:a6:d1:46:24:65:
cf:64:46:e8:a5:71:bc:78:99:18:9c:8f:3e:f0:ac:9f:fd:78:
6a:18:5e:56:31:ea:55:0b:9f:12:42:f0:61:f1:29:e8:54:62:
fd:d8:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:38:30 2026 by rpki-client