Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/9A7Bsks6ICfI_Ck3g2gQ4vqbmAU.roa
File: 9A7Bsks6ICfI_Ck3g2gQ4vqbmAU.roa (raw, json)
Hash identifier: unolq/2SlxR9i0TvnNY4rzMlJByBYB0KjNK6fKOkF14=
Subject key identifier: F4:0E:C1:B2:4B:3A:20:27:C8:FC:29:37:83:68:10:E2:FA:9B:98:05
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019B79ECDAD17B7D8E6EDBBD5E7DBD5C316D
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/9A7Bsks6ICfI_Ck3g2gQ4vqbmAU.roa
Signing time: Thu 01 Jan 2026 14:18:44 +0000
ROA not before: Thu 01 Jan 2026 14:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21034
IP address blocks: 185.2.146.0/23 maxlen: 23
185.179.103.0/24 maxlen: 24
212.43.96.0/19 maxlen: 20
2a00:1be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:da:d1:7b:7d:8e:6e:db:bd:5e:7d:bd:5c:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 1 14:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f40ec1b24b3a2027c8fc2937836810e2fa9b9805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:bb:23:11:e8:d2:f1:64:07:50:47:b3:13:
95:4d:13:0b:ab:43:1b:5d:bd:f5:7d:d1:47:58:87:
56:d9:e9:97:6f:99:b4:10:6a:9b:9d:26:92:a1:63:
9c:dc:34:c9:c6:36:58:a2:3e:89:57:1b:ed:75:4b:
fa:7e:18:6f:bd:eb:54:09:b5:0e:0d:a4:bb:f1:ec:
0c:e8:00:50:ab:a2:9b:20:31:3a:41:d7:80:10:83:
2e:12:d3:8b:f3:7f:e6:de:62:69:05:b0:b7:12:b9:
ec:14:cb:35:2e:95:5e:05:93:cc:cc:b2:4c:ee:38:
89:e8:d8:c9:51:27:97:89:c6:0b:44:c9:d9:c9:9e:
c0:93:68:44:c3:0f:78:45:e4:54:4c:61:0f:cf:09:
78:db:03:34:50:c8:ef:ba:33:e0:0a:ce:a5:7b:ee:
0f:12:8d:2f:a6:f6:31:d3:fc:17:c8:e1:e1:c6:e7:
be:81:07:60:cd:ac:97:c4:43:8b:77:76:73:7c:1e:
43:44:9f:88:23:02:54:53:a6:72:8e:28:d8:cb:bd:
31:8e:e0:fb:d2:5b:96:13:3b:54:fb:1a:ea:55:81:
9b:5a:1c:13:af:b1:cf:9a:a3:21:bc:22:96:d8:83:
66:de:c8:eb:f2:7c:19:3c:8b:2f:b9:f9:de:a4:c8:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:C1:B2:4B:3A:20:27:C8:FC:29:37:83:68:10:E2:FA:9B:98:05
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/9A7Bsks6ICfI_Ck3g2gQ4vqbmAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.146.0/23
185.179.103.0/24
212.43.96.0/19
IPv6:
2a00:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:c9:ce:48:3d:0b:7f:e7:64:82:78:cc:be:b4:3f:6f:3c:a3:
d3:43:a7:3e:cf:64:e2:88:da:4a:5a:79:ee:fc:22:62:9f:90:
23:2d:a2:bc:98:66:35:2f:3a:d3:b1:66:6e:f5:28:02:a6:ce:
f8:f4:e6:03:ca:b8:93:24:0f:a0:1f:00:df:8c:ec:9e:3c:61:
06:39:76:35:f0:03:20:0f:61:21:6e:5d:f0:1e:4a:88:81:77:
1c:89:0b:2a:2e:ea:d0:d8:bb:1f:45:52:8e:ca:d3:83:78:28:
74:bc:f8:07:99:28:87:6a:ac:e1:47:0a:c5:c3:58:a1:6f:55:
ad:ab:e2:4b:ab:76:34:9e:57:e3:86:2d:f1:ca:d8:8f:b3:59:
f6:7d:b5:a7:21:b4:82:f6:68:99:52:86:10:ee:8a:9a:51:75:
4b:f0:04:71:eb:96:b2:74:66:c6:86:f7:f8:67:77:d6:5e:83:
57:40:bd:f2:20:66:46:ca:6e:94:02:68:0b:e7:30:2a:2d:73:
11:3d:89:60:0b:4d:da:d0:f9:15:f0:4c:ed:fb:2f:9b:77:1c:
a3:19:7a:38:15:ed:ce:11:8b:40:11:2c:0b:1b:7c:47:f6:36:
61:31:61:90:17:c3:f4:bc:a7:d6:36:c0:df:12:b5:c5:bb:15:
c6:c5:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:52:46 2026 by rpki-client