Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1VIGtbnB6p_qpweh9mU-J14oMkQ.roa
File: 1VIGtbnB6p_qpweh9mU-J14oMkQ.roa (raw, json)
Hash identifier: U+KjnNfqEDTq7MbyU6bwyfNKmBY3TatIObehfAfybsc=
Subject key identifier: D5:52:06:B5:B9:C1:EA:9F:EA:A7:07:A1:F6:65:3E:27:5E:28:32:44
Certificate issuer: /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial: 019B7834861700CCA2B6C376CE5B81B769FD
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1VIGtbnB6p_qpweh9mU-J14oMkQ.roa
Signing time: Thu 01 Jan 2026 06:17:46 +0000
ROA not before: Thu 01 Jan 2026 06:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44472
IP address blocks: 93.187.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:86:17:00:cc:a2:b6:c3:76:ce:5b:81:b7:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Validity
Not Before: Jan 1 06:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d55206b5b9c1ea9feaa707a1f6653e275e283244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:35:d8:de:83:44:01:fd:82:cc:e8:eb:4a:
c7:b1:52:f3:a9:62:8c:98:81:5d:39:3b:b3:af:4b:
98:40:90:87:21:2d:11:e1:fe:16:ca:a1:df:cb:28:
74:21:58:4c:d6:7c:47:64:dc:50:bb:14:9c:a1:95:
b1:d2:70:bd:aa:bb:4d:0e:4e:66:2a:bc:b9:ae:24:
68:a2:be:34:a0:19:33:da:73:25:b0:43:7f:5f:0d:
91:64:31:37:fd:b9:f5:b9:3e:d2:08:7e:f3:60:49:
d1:ba:0d:cb:2d:aa:f9:22:58:8b:34:ef:5f:55:83:
30:65:e9:ac:8b:b4:7b:6c:d6:de:f5:ac:50:13:de:
5c:da:d1:61:aa:af:48:a6:1b:0a:8a:f3:e1:7d:17:
66:d9:b7:b8:43:6e:3f:b3:54:0d:3d:11:c9:9f:ad:
56:e6:53:d1:63:34:19:7e:a1:e1:5d:66:16:4e:be:
fc:7b:71:16:cd:38:36:3e:d6:bd:56:09:2b:44:dd:
6c:d6:aa:8c:9c:4d:76:28:ed:57:bd:da:52:12:fa:
f6:46:59:3b:0d:f4:66:ec:10:7d:56:86:80:87:c7:
d3:48:fe:fd:42:a4:e6:0d:6e:f3:b7:43:03:59:09:
82:8d:c0:6f:a9:c4:37:75:70:b3:88:ac:da:53:ed:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:06:B5:B9:C1:EA:9F:EA:A7:07:A1:F6:65:3E:27:5E:28:32:44
X509v3 Authority Key Identifier:
keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1VIGtbnB6p_qpweh9mU-J14oMkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e4:c2:d0:7c:6a:09:29:20:aa:0a:11:3b:93:2f:c7:90:95:
99:22:59:8a:99:28:53:6e:6e:f8:68:a3:82:06:70:93:e8:a3:
25:f8:24:2a:e5:16:28:66:db:b4:fb:26:12:54:a1:4f:f0:64:
0b:7e:c1:bb:bf:f0:39:73:f8:a4:8e:f6:a6:d3:99:08:2f:0a:
2e:15:52:67:c0:31:da:d6:e5:f8:c5:2f:38:f1:a7:6d:b5:dc:
84:22:1a:25:47:3c:0a:f4:dd:e7:e0:da:ad:99:94:48:9f:16:
bf:cd:c6:8d:32:dd:ff:02:f9:fb:14:bc:3d:86:25:f6:7b:2b:
a6:cc:66:16:fa:42:46:14:c7:c2:78:0e:59:95:8b:28:a4:cf:
7a:3a:0a:4f:ff:21:c6:22:b2:bc:ae:bd:e9:8a:9f:bc:d9:b2:
bb:2a:59:e4:9e:5c:ee:99:a4:b3:3a:27:c8:af:68:70:7b:84:
f3:9e:62:34:99:22:d8:1d:6c:9c:0a:02:6a:b1:27:86:a3:5c:
ec:3d:64:d3:72:77:eb:d2:97:58:41:a0:96:54:38:94:6c:07:
7a:05:30:97:4c:71:ff:6d:f2:0d:6d:66:7a:e6:34:d0:c8:b4:
49:41:fd:98:11:9a:00:17:11:d7:02:91:08:49:a6:3e:2a:b7:
92:97:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:56 2026 by rpki-client