Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/aQlW2TkfbjxGF84PqTBkeIAJIdw.roa
File: aQlW2TkfbjxGF84PqTBkeIAJIdw.roa (raw, json)
Hash identifier: kNrJVGcJAXFxvR/y2yteZv9HoIpveOewDJUjP7xSULQ=
Subject key identifier: 69:09:56:D9:39:1F:6E:3C:46:17:CE:0F:A9:30:64:78:80:09:21:DC
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 019B7C8088321F7A31791EECEE23D66FE721
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/aQlW2TkfbjxGF84PqTBkeIAJIdw.roa
Signing time: Fri 02 Jan 2026 02:19:16 +0000
ROA not before: Fri 02 Jan 2026 02:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 80.75.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:88:32:1f:7a:31:79:1e:ec:ee:23:d6:6f:e7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Jan 2 02:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=690956d9391f6e3c4617ce0fa9306478800921dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:c2:ee:52:bd:a8:3f:51:46:4a:e4:29:ee:
98:b3:ee:c6:8d:69:7b:a8:f6:f6:15:aa:16:1c:5c:
72:bb:12:e6:83:7c:2d:c3:21:01:8e:2c:94:7e:61:
b4:bf:a6:04:d1:ac:62:c2:de:d3:e8:1e:7a:fc:68:
96:2c:1b:85:a1:32:20:fc:d3:d1:86:a3:0d:07:17:
03:34:dc:9d:c1:85:53:e5:ab:c6:0c:ea:74:d5:ef:
81:3e:66:59:1c:7c:74:9d:55:6f:22:5b:fb:70:44:
65:1e:b7:1a:8c:93:8a:20:ee:7e:41:69:e7:95:e1:
43:34:06:2c:6e:29:34:b9:8d:76:77:74:3d:5e:ed:
66:4a:9f:74:18:8b:ca:0d:ac:75:94:d0:49:18:a6:
a7:65:25:16:54:13:76:7b:a0:ce:fb:11:22:7a:93:
40:f6:e4:1d:af:b8:8b:65:d6:94:0f:74:1d:b9:c6:
29:30:0b:36:9c:9a:7b:f5:f1:5b:0d:a0:48:9c:bd:
87:66:6d:25:a5:03:69:6a:4a:e6:17:96:9e:b1:b7:
61:27:eb:dc:c5:88:f6:c6:b4:f6:d5:c3:c1:13:36:
f9:c7:c9:5c:56:5f:fe:60:7e:6a:cd:1c:10:1d:52:
92:2f:8a:1a:02:93:9e:88:f9:c4:63:bc:04:a7:83:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:56:D9:39:1F:6E:3C:46:17:CE:0F:A9:30:64:78:80:09:21:DC
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/aQlW2TkfbjxGF84PqTBkeIAJIdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4d:c0:b5:b5:56:fb:0a:82:a4:6f:70:a1:76:d3:56:4b:d3:
cb:ea:d8:51:bc:71:73:a5:a4:03:8b:56:69:f7:9d:5d:26:62:
f0:1f:b9:89:20:ce:8d:55:48:73:41:dd:3a:22:4a:7f:9e:96:
96:57:3e:02:82:87:8e:ef:ee:75:1c:55:ce:f2:1e:cd:46:b5:
62:14:8a:18:be:a7:60:a3:a6:36:3d:fa:04:fe:66:c7:91:0a:
c3:ec:12:9c:e5:e9:9a:29:dd:22:06:32:6f:7e:21:24:a4:8d:
73:0f:cf:84:c0:4a:33:94:80:d7:08:9c:b8:af:b4:c0:11:87:
e2:f6:2e:10:90:65:f4:48:a0:dd:23:9a:c3:f5:42:37:fe:9e:
73:1c:b4:fd:ee:df:0c:d7:43:5a:48:46:d3:fb:a7:b0:7c:80:
69:b3:c1:5d:60:9c:76:a0:e8:08:f8:89:83:bf:86:bd:b0:17:
a5:22:9d:71:15:b8:58:4d:cb:2f:7f:74:fe:12:6f:a1:d6:1e:
f6:0f:44:03:da:5c:e4:10:74:70:07:f0:73:89:d9:f4:c6:f7:
0e:40:2d:da:7f:b6:e1:54:25:86:48:cc:75:d7:59:62:8a:b5:
25:f8:b0:af:0d:39:39:63:7a:78:16:34:d3:bb:b1:86:2b:ba:
c5:76:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:45:20 2026 by rpki-client