Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/ZGBgmumGzS4ukZFbpYM0d8wUt0E.roa
File: ZGBgmumGzS4ukZFbpYM0d8wUt0E.roa (raw, json)
Hash identifier: dGLyIYahkUSxgP0jzsDMCqCq6nclm0OowLDF1vab/L4=
Subject key identifier: 64:60:60:9A:E9:86:CD:2E:2E:91:91:5B:A5:83:34:77:CC:14:B7:41
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 019B7F84021DCC8D8809B2A510C61B29011C
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/ZGBgmumGzS4ukZFbpYM0d8wUt0E.roa
Signing time: Fri 02 Jan 2026 16:21:56 +0000
ROA not before: Fri 02 Jan 2026 16:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207578
IP address blocks: 185.187.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:02:1d:cc:8d:88:09:b2:a5:10:c6:1b:29:01:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jan 2 16:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6460609ae986cd2e2e91915ba5833477cc14b741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:78:bf:c9:0f:94:15:8b:8a:be:3e:d4:d5:
54:f3:a3:23:1e:cc:db:a4:32:a9:69:ee:d2:33:11:
6e:1c:9b:0c:ed:54:aa:61:47:41:ab:49:78:3e:56:
49:ea:2d:87:d3:9b:6b:c1:a2:dd:b6:df:5f:99:b3:
c6:c8:4e:33:de:ad:eb:3f:eb:5f:5c:40:21:8f:18:
1f:21:f8:74:11:02:ff:6f:b2:be:8a:c1:09:4d:1f:
3d:87:9d:af:40:ef:5d:a2:79:a3:69:cf:fa:91:7c:
70:79:02:5d:1c:8a:2a:23:b4:8e:8f:87:cc:77:38:
36:e7:45:80:8e:7d:dc:09:20:e9:e4:64:99:40:19:
3f:a6:87:38:76:3b:d8:01:69:eb:02:4e:97:34:6c:
7c:9e:ae:5d:f8:14:13:2d:f9:c5:e4:40:18:01:2e:
48:f7:93:ae:1d:64:f3:dd:6b:7d:90:19:50:ce:f3:
5c:45:53:9d:70:bf:92:8b:22:5d:cf:b9:04:30:82:
a1:17:a2:66:c0:1f:b3:ad:58:ee:f6:ac:cd:d4:87:
b1:fb:89:1f:b5:78:9a:24:0d:5e:80:d5:a6:eb:c1:
75:c3:b7:19:d5:88:57:85:1e:ad:1a:1b:93:ed:71:
0b:7a:78:ed:a7:3c:c1:24:d3:6e:12:ad:84:52:49:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:60:9A:E9:86:CD:2E:2E:91:91:5B:A5:83:34:77:CC:14:B7:41
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/ZGBgmumGzS4ukZFbpYM0d8wUt0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.44.0/23
Signature Algorithm: sha256WithRSAEncryption
48:27:00:97:ed:2a:c0:79:e7:56:73:91:7a:88:b3:8e:95:bb:
1f:08:08:12:91:d1:d5:63:75:29:06:68:27:00:0c:6c:a9:06:
c6:5b:64:e7:16:f9:8e:46:f9:0d:e5:a6:03:02:11:7e:1a:f2:
65:e1:4a:ac:ad:91:25:c4:79:39:f1:2f:c2:ee:b9:5c:d1:04:
56:86:2a:ac:26:a1:cb:7c:8f:02:64:2c:3b:64:73:5d:99:86:
15:9b:00:12:63:65:c4:14:63:ba:5d:04:58:94:c6:6e:62:4e:
ba:61:bc:71:7c:1a:77:6b:20:3c:ab:b1:0a:bd:73:2a:5a:73:
79:4e:c1:87:6d:e5:20:e1:87:58:39:90:c9:3a:2e:ae:7f:95:
a6:cf:aa:05:50:af:6c:d0:cf:be:aa:ae:de:4e:ba:80:3a:2a:
49:e2:ba:81:bf:34:34:07:6f:b7:52:36:4d:aa:a7:b0:1d:c1:
52:92:f8:08:3e:81:03:b8:cb:7e:63:e9:f4:29:05:d5:06:1f:
df:b5:53:05:d6:c1:8f:dc:8f:e1:cc:1f:b1:f2:02:6c:ba:76:
c6:6e:80:99:ee:e0:ad:ba:7b:b5:b5:09:18:d1:c8:19:0c:29:
15:54:8a:a0:f1:11:b8:e1:f2:36:f2:93:b9:17:c5:8e:29:76:
9e:c6:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:09 2026 by rpki-client