Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-R_m8jZ-DQHqE8-bz3KHfVp2ID8.roa
File: 1-R_m8jZ-DQHqE8-bz3KHfVp2ID8.roa (raw, json)
Hash identifier: uMxMSxBan3jw8urACjCnP6+7bp2/D328OYyHKWgVonU=
Subject key identifier: F9:1F:E6:F2:36:7E:0D:01:EA:13:CF:9B:CF:72:87:7D:5A:76:20:3F
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019B7CEDEBDBC18E68012CC950800FFD8055
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-R_m8jZ-DQHqE8-bz3KHfVp2ID8.roa
Signing time: Fri 02 Jan 2026 04:18:45 +0000
ROA not before: Fri 02 Jan 2026 04:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 123456
IP address blocks: 87.237.165.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:eb:db:c1:8e:68:01:2c:c9:50:80:0f:fd:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 04:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f91fe6f2367e0d01ea13cf9bcf72877d5a76203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:9b:3e:55:1e:c7:bf:b0:b6:88:ca:3f:69:
69:3b:dc:c8:17:78:65:7c:f6:9b:a2:ed:86:58:ed:
e0:2e:7e:4b:71:6b:f0:6e:37:13:97:d6:f0:10:d6:
e1:b4:7f:cb:9a:90:e7:15:a2:27:c7:34:ee:0a:46:
61:46:e7:d5:41:fc:7e:b8:09:ca:30:24:09:38:6a:
b2:1e:83:6c:10:0b:65:d2:3f:4b:5d:be:0f:b2:48:
94:50:7a:f5:f2:1a:a9:d1:90:50:7c:7b:4e:ca:3a:
14:73:64:9b:87:1a:f1:3b:5a:f3:bb:57:d8:26:99:
63:56:9e:55:d6:7b:10:31:f9:79:01:b9:b7:6f:a0:
5f:c3:53:c8:d4:8d:2b:da:5b:3d:de:58:bc:e9:36:
d9:76:47:37:8c:aa:d3:ea:ac:df:8b:6e:2f:cb:77:
98:75:a4:43:70:62:6b:5b:9a:69:19:de:ba:c7:ad:
b1:95:6d:6e:cb:a5:e8:b9:b7:b9:76:0c:7a:21:b5:
06:9d:16:65:8b:17:79:02:27:cd:d0:f1:32:ee:94:
bd:ce:c0:50:29:97:47:f0:37:5d:6d:de:a5:8e:c3:
4b:92:5e:f1:09:65:55:fd:1e:e3:83:d3:65:7f:94:
e3:10:b7:3f:b7:f7:49:41:7d:5a:11:36:28:15:8f:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:E6:F2:36:7E:0D:01:EA:13:CF:9B:CF:72:87:7D:5A:76:20:3F
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1-R_m8jZ-DQHqE8-bz3KHfVp2ID8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
Signature Algorithm: sha256WithRSAEncryption
14:28:f3:b9:f6:32:48:38:d5:28:d0:37:de:97:5a:27:2b:3b:
16:1f:37:e4:5e:13:44:ec:d0:48:55:11:f8:cd:02:f4:98:52:
f4:45:3e:c5:65:09:22:af:b6:75:dd:c8:11:99:4e:b3:53:d9:
ea:6c:fd:a1:42:73:cd:9f:97:33:13:89:83:0d:83:e6:4b:3d:
1e:80:15:f9:12:d8:24:4b:e3:b9:f8:bb:27:f3:f7:79:42:98:
c0:b4:2f:e0:2c:2d:ae:8b:b8:c7:e6:da:14:b0:31:59:4e:b8:
10:cc:05:12:d4:69:5a:5d:a5:f3:bd:c3:d3:32:20:c7:bc:fd:
c6:c6:e9:ee:8c:81:15:3e:eb:d9:a3:ef:e5:e1:a6:a2:0f:59:
99:42:61:e3:09:7c:4b:22:7c:b0:f0:a8:85:57:d9:3f:f1:2f:
b2:cb:31:ae:eb:fb:11:50:81:2e:81:c2:8c:19:04:05:84:de:
8c:16:0d:7c:3b:62:e9:a4:cb:80:22:bd:38:65:33:59:24:56:
0e:bd:65:ed:18:05:e5:4a:55:fd:75:af:cd:1f:bc:d1:48:59:
be:58:73:42:0e:7f:28:ba:0b:ca:89:14:ce:04:bd:b5:5f:bd:
a5:90:c3:59:90:8f:57:fa:85:3a:16:2a:bd:98:d7:00:ee:04:
d7:c1:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:27 2026 by rpki-client