Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/uJm_7hDGpmhYTWwQ2YPrurLOWrE.roa
File: uJm_7hDGpmhYTWwQ2YPrurLOWrE.roa (raw, json)
Hash identifier: +Rfv4uPZRuyPLmvGs5hzMdcgFavU6d1XxdChLjbHF1Q=
Subject key identifier: B8:99:BF:EE:10:C6:A6:68:58:4D:6C:10:D9:83:EB:BA:B2:CE:5A:B1
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 019B7B36AD208F9FB2B4245FC37232CAF615
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/uJm_7hDGpmhYTWwQ2YPrurLOWrE.roa
Signing time: Thu 01 Jan 2026 20:18:59 +0000
ROA not before: Thu 01 Jan 2026 20:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198614
IP address blocks: 87.238.248.0/22 maxlen: 22
87.238.252.0/22 maxlen: 22
185.200.72.0/24 maxlen: 24
185.200.73.0/24 maxlen: 24
185.200.74.0/24 maxlen: 24
185.200.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:ad:20:8f:9f:b2:b4:24:5f:c3:72:32:ca:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Jan 1 20:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b899bfee10c6a668584d6c10d983ebbab2ce5ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:80:15:73:6e:10:91:c3:ef:9a:87:03:4d:
75:02:81:36:e3:6b:1c:aa:db:ec:fc:1c:50:9c:d1:
7e:3d:3a:90:bd:fe:30:74:06:a5:a2:aa:61:78:5e:
1a:33:df:da:ce:ff:2f:69:d4:31:54:2a:58:e9:1b:
0d:72:ae:ee:80:34:f4:19:1c:e2:fa:51:d7:49:45:
ac:e7:e9:29:55:f2:e9:66:bf:d6:a6:0d:b8:38:9c:
ef:0e:3e:1a:6d:d6:95:08:05:cf:c4:b2:8b:a0:c6:
63:3d:ab:9f:b1:f9:e7:9d:85:a9:24:a7:98:c6:a8:
c6:34:08:a1:b7:04:3c:49:04:90:95:40:f7:09:8a:
05:6b:f0:db:94:a9:d8:a4:9f:45:28:81:09:7a:65:
50:d9:e1:a1:85:2f:cd:2a:3d:9a:0b:33:3f:f7:4e:
c4:db:f3:e0:26:59:bb:8c:cf:cd:4e:b6:54:a5:19:
a4:8f:d2:9b:85:b8:15:d2:3a:b0:5d:bc:70:11:d8:
f1:13:8a:a3:e0:67:c0:d3:be:56:33:ad:86:66:41:
59:34:31:ea:6d:02:a5:e4:33:54:1a:13:a7:90:f5:
3e:6d:6b:a0:a3:f2:11:2a:32:d8:e7:d2:98:37:3d:
ae:7f:4c:95:7a:15:e5:31:fa:b6:0e:a4:0f:ea:19:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:BF:EE:10:C6:A6:68:58:4D:6C:10:D9:83:EB:BA:B2:CE:5A:B1
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/uJm_7hDGpmhYTWwQ2YPrurLOWrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.248.0/21
185.200.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:f3:40:b2:db:5a:ae:c9:04:9a:78:ec:ee:16:e0:81:54:d2:
6d:6a:fa:9d:8e:62:b7:33:d3:e2:64:48:62:09:47:20:46:8b:
e7:2c:2b:d4:ff:84:31:80:3e:de:36:b6:d9:e6:63:bf:a9:d5:
aa:aa:8e:e2:65:2a:31:3d:c6:ca:31:9b:47:92:b1:33:6d:30:
57:3e:0c:fd:1b:33:ef:c8:98:d0:2f:08:e7:ab:79:6f:2a:11:
86:73:68:6a:a1:ab:e5:38:d0:aa:ef:e8:66:13:07:8e:2c:f9:
4d:82:23:79:d8:7a:34:3e:8e:a5:c1:fa:19:a7:0f:57:87:d5:
1b:d8:7d:91:72:db:9e:69:4c:fe:72:cd:3f:b3:75:4b:e6:50:
03:d6:7c:1a:14:1f:36:bf:1d:44:70:d8:8d:4e:0e:5c:c1:74:
cf:c3:ae:e4:74:e4:0b:9e:27:6f:41:ee:d4:9e:d1:13:2b:fa:
aa:98:b3:1a:5e:d7:e5:8b:c6:c7:25:61:82:41:71:77:b5:2b:
73:6d:70:76:7e:40:6c:47:74:90:16:7a:74:f2:f1:d9:b0:8b:
d7:55:79:cd:34:67:91:f0:01:fe:83:02:e9:ad:37:08:23:fc:
1e:5e:56:ad:f5:a6:fe:7a:5f:36:46:4d:2c:39:e6:d3:a0:8c:
60:2e:41:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7Nq0gj5+ytCRfw3IyyvYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNiMDlkZTgyNjUwZWU0Y2M0MzI3ZWFiNjc3MGI3YWIx
NDdlZmIwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODk5YmZlZTEwYzZhNjY4NTg0ZDZjMTBkOTgzZWJiYWIyY2U1YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVCAFXNuEJHD75qHA011AoE242sc
qtvs/BxQnNF+PTqQvf4wdAaloqpheF4aM9/azv8vadQxVCpY6RsNcq7ugDT0GRzi
+lHXSUWs5+kpVfLpZr/Wpg24OJzvDj4abdaVCAXPxLKLoMZjPaufsfnnnYWpJKeY
xqjGNAihtwQ8SQSQlUD3CYoFa/DblKnYpJ9FKIEJemVQ2eGhhS/NKj2aCzM/907E
2/PgJlm7jM/NTrZUpRmkj9KbhbgV0jqwXbxwEdjxE4qj4GfA075WM62GZkFZNDHq
bQKl5DNUGhOnkPU+bWugo/IRKjLY59KYNz2uf0yVehXlMfq2DqQP6hkdEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLiZv+4QxqZoWE1sENmD67qyzlqxMB8GA1UdIwQY
MBaAFP9MsJ3oJlDuTMQyfqtncLerFH77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4Yzct
MTQ2NWE0YjUyMTM2LzEvdUptXzdoREdwbWhZVFd3UTJZUHJ1ckxPV3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4YzctMTQ2NWE0YjUyMTM2
LzEvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+74AwQC
uchIMA0GCSqGSIb3DQEBCwUAA4IBAQB780Cy21quyQSaeOzuFuCBVNJtavqdjmK3
M9PiZEhiCUcgRovnLCvU/4QxgD7eNrbZ5mO/qdWqqo7iZSoxPcbKMZtHkrEzbTBX
Pgz9GzPvyJjQLwjnq3lvKhGGc2hqoavlONCq7+hmEweOLPlNgiN52Ho0Po6lwfoZ
pw9Xh9Ub2H2RctueaUz+cs0/s3VL5lAD1nwaFB82vx1EcNiNTg5cwXTPw67kdOQL
nidvQe7UntETK/qqmLMaXtfli8bHJWGCQXF3tStzbXB2fkBsR3SQFnp08vHZsIvX
VXnNNGeR8AH+gwLprTcII/weXlat9ab+el82Rk0sOebToIxgLkGw
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:47 2026 by rpki-client