Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wWQdJdOeKgKLq2tay_HG2hW4bQs.roa
File: wWQdJdOeKgKLq2tay_HG2hW4bQs.roa (raw, json)
Hash identifier: l+ULeFJEHDl+95+FLbh2p+6C0QfTB7gNeG/VEUNoXbE=
Subject key identifier: C1:64:1D:25:D3:9E:2A:02:8B:AB:6B:5A:CB:F1:C6:DA:15:B8:6D:0B
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A116D8C2AAAB74B51CA6A6C20F229DE0DE
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wWQdJdOeKgKLq2tay_HG2hW4bQs.roa
Signing time: Wed 07 Oct 2026 14:51:06 +0000
ROA not before: Wed 07 Oct 2026 14:51:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207027
IP address blocks: 193.176.227.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:d8:c2:aa:ab:74:b5:1c:a6:a6:c2:0f:22:9d:e0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 7 14:51:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1641d25d39e2a028bab6b5acbf1c6da15b86d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:0a:be:a9:37:ff:63:57:c5:36:64:e6:87:
61:00:7e:e8:41:ab:5f:c0:7f:39:b8:92:0f:8a:c5:
e1:83:3c:d2:de:fa:7f:13:a3:9b:8c:0d:47:d1:eb:
32:ce:5b:8c:ff:87:47:74:fa:5a:67:c1:ef:4d:3b:
a8:8c:78:20:52:a0:e6:53:d7:1b:6b:44:2f:22:40:
d2:a9:94:60:33:d7:2e:f9:22:35:ca:8c:ca:0c:17:
62:f4:1d:9a:3f:1b:d8:ef:b4:c2:eb:e8:de:96:c5:
c3:6e:ef:7f:3f:d3:c6:30:39:ee:c4:ae:19:5a:5e:
9b:7e:20:e2:1c:07:f6:10:a5:e0:76:e0:64:ff:86:
aa:6b:dd:c9:4c:5d:b3:fc:d3:ce:5d:66:3b:a7:0d:
fe:3b:0a:a7:36:99:6d:d4:da:2a:2e:0c:bd:dc:67:
8b:ec:f2:a0:aa:56:3e:bf:a1:8a:6e:b4:6f:84:c0:
e9:f8:78:30:24:ce:8a:14:05:38:b1:ef:79:47:db:
4b:94:a1:07:0c:d8:a4:2f:78:a5:dd:a0:5a:d6:d9:
59:2c:11:dc:b2:4c:6c:f1:03:56:34:84:ac:63:91:
c4:eb:14:5a:ab:b2:25:02:2c:f8:d5:62:74:8f:18:
57:a3:2a:88:c2:5a:fc:a6:5e:a4:72:fa:69:d3:bb:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:64:1D:25:D3:9E:2A:02:8B:AB:6B:5A:CB:F1:C6:DA:15:B8:6D:0B
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wWQdJdOeKgKLq2tay_HG2hW4bQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:87:9b:3f:cf:8f:81:97:b4:69:d0:2f:1e:64:e9:2e:7d:
7e:59:27:df:de:d1:d5:18:9c:0b:4a:7f:b9:b6:0c:1e:31:ac:
85:f4:11:68:50:36:4d:78:b6:1f:f8:51:17:59:f1:cb:24:6b:
22:cf:76:d2:7a:4b:82:08:c2:c1:54:ba:0d:73:6d:a9:ae:38:
c6:0b:5f:65:cb:37:c9:57:d6:d6:fd:32:77:8e:01:d8:f3:48:
3d:01:02:b4:af:61:67:bb:cc:ce:6f:17:ad:6a:72:25:ca:80:
34:49:1f:dc:a3:14:03:a4:b9:db:9d:13:ae:20:9b:12:d3:52:
ec:80:23:67:98:ca:17:dd:3b:35:81:2d:ea:b1:8b:58:49:34:
77:1d:ea:cc:5a:c4:ce:07:e2:c3:2e:f7:f4:81:1a:ea:03:2a:
5b:e1:e2:53:20:ed:53:be:89:c0:0b:27:2c:a8:00:b5:01:7e:
88:5d:b6:e8:b1:cf:22:3f:83:db:78:40:6b:cc:cf:b2:08:3f:
e4:42:bc:7d:15:42:4f:d3:6f:82:df:ec:96:67:05:f7:be:97:
f5:8e:2d:2d:3f:5c:8f:8b:d5:f6:0d:d8:13:f6:cf:9a:04:88:
8b:e6:48:4e:4f:1e:99:09:35:16:43:e7:91:a7:df:04:3c:2a:
fc:8b:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:11:19 2026 by rpki-client