Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/wfA1-n1KmPSEcwLGYpJOTB6Es2U.roa
File: wfA1-n1KmPSEcwLGYpJOTB6Es2U.roa (raw, json)
Hash identifier: x+tJbK1Sq4Tg8VU3dFjZkDXjxkuG/yYBBM7ZgXSL4dY=
Subject key identifier: C1:F0:35:FA:7D:4A:98:F4:84:73:02:C6:62:92:4E:4C:1E:84:B3:65
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 019B7834E784BBAABB0B219BCF9B2D9E76FB
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/wfA1-n1KmPSEcwLGYpJOTB6Es2U.roa
Signing time: Thu 01 Jan 2026 06:18:11 +0000
ROA not before: Thu 01 Jan 2026 06:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.206.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:e7:84:bb:aa:bb:0b:21:9b:cf:9b:2d:9e:76:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jan 1 06:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1f035fa7d4a98f4847302c662924e4c1e84b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:9c:f7:2b:1b:45:39:fa:b0:f5:83:98:3c:
44:be:8a:65:f2:f4:78:12:a1:cc:8f:eb:63:75:b2:
87:84:48:85:d9:4b:d8:83:67:5b:dd:8f:8d:da:67:
6b:9a:c0:f1:00:57:46:c5:1c:7f:31:0c:9a:03:92:
45:45:27:11:d8:ad:88:9f:9e:9e:e6:6c:58:85:33:
22:16:c7:ff:ac:95:85:e2:bf:c3:85:57:6e:a0:5d:
9d:87:4b:ce:ce:8b:9a:40:a5:66:86:33:cd:ff:44:
37:dc:17:a0:97:55:cf:b3:0e:b3:3e:02:af:db:22:
e4:44:f7:ec:99:28:f1:4e:52:e8:7c:de:e4:b2:95:
44:e8:57:6f:55:8a:1e:54:46:6b:e7:5d:75:57:0f:
19:e9:bb:a0:b3:af:21:ac:84:b2:43:77:83:24:95:
a3:a9:d3:b4:07:62:e7:c2:de:f8:e7:83:aa:cc:e0:
78:24:22:ad:f6:e2:b0:88:50:33:d6:f6:ad:2b:ce:
f1:92:c1:cc:29:18:31:eb:fb:8e:eb:11:82:5f:4a:
99:fb:b7:d8:fa:fc:98:50:77:96:7d:ba:ce:ac:09:
08:b1:55:9a:df:2b:dc:26:0f:85:f4:0a:34:0a:f1:
87:d3:f8:45:64:8c:46:ea:c1:9f:32:ee:a4:6d:e8:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:35:FA:7D:4A:98:F4:84:73:02:C6:62:92:4E:4C:1E:84:B3:65
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/wfA1-n1KmPSEcwLGYpJOTB6Es2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2a:d5:9a:4b:f7:f6:0f:5a:90:6a:2b:f8:08:c4:a4:38:91:
f6:d0:40:aa:6f:f9:fa:bb:82:22:10:83:c1:1a:03:2b:d4:f0:
1c:f3:ba:65:e7:33:09:76:44:15:5a:31:fa:e1:51:89:71:2d:
f3:f5:f2:a1:9b:72:ab:ed:82:e6:60:8b:cd:50:f9:ce:9e:c4:
4b:61:ee:d2:db:38:03:e6:70:c9:46:c9:82:e2:ff:aa:4c:f6:
ca:2b:d3:2d:0b:4f:06:84:35:ca:fb:d6:ad:f5:51:f6:ab:6a:
04:04:72:5e:ba:fd:4a:a0:d5:0f:9c:13:3d:77:ab:96:24:8e:
31:ce:59:9d:57:23:e8:9f:62:a5:d0:a4:a2:23:c4:54:a4:d8:
92:d7:4a:45:a1:89:47:4e:33:1e:31:5e:f4:6f:72:42:ae:7b:
69:dc:6b:40:b1:f2:92:4d:d8:a4:db:77:06:98:af:c8:7b:45:
83:ae:35:c6:cc:d3:a9:87:36:5c:fd:f4:be:74:c0:8e:c5:47:
d8:4f:dc:c3:44:03:dd:61:b1:da:87:b1:1d:1b:27:e9:78:98:
83:f7:0b:50:fa:27:bb:f7:a3:f4:7a:be:d6:28:c2:24:c5:3b:
9e:d0:1f:69:9c:65:d5:98:3e:98:e1:a6:65:9c:bb:8b:d4:81:
7d:70:75:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NOeEu6q7CyGbz5stnnb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3
MjExNDMwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWYwMzVmYTdkNGE5OGY0ODQ3MzAyYzY2MjkyNGU0YzFlODRiMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ6c9ysbRTn6sPWDmDxEvopl8vR4
EqHMj+tjdbKHhEiF2UvYg2db3Y+N2mdrmsDxAFdGxRx/MQyaA5JFRScR2K2In56e
5mxYhTMiFsf/rJWF4r/DhVduoF2dh0vOzouaQKVmhjPN/0Q33Begl1XPsw6zPgKv
2yLkRPfsmSjxTlLofN7kspVE6FdvVYoeVEZr5111Vw8Z6bugs68hrISyQ3eDJJWj
qdO0B2Lnwt7454OqzOB4JCKt9uKwiFAz1vatK87xksHMKRgx6/uO6xGCX0qZ+7fY
+vyYUHeWfbrOrAkIsVWa3yvcJg+F9Ao0CvGH0/hFZIxG6sGfMu6kbejMYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHwNfp9Spj0hHMCxmKSTkwehLNlMB8GA1UdIwQY
MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt
OTA5YjZhYjg1ZWU5LzEvd2ZBMS1uMUttUFNFY3dMR1lwSk9UQjZFczJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5
LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw87yMA0G
CSqGSIb3DQEBCwUAA4IBAQBIKtWaS/f2D1qQaiv4CMSkOJH20ECqb/n6u4IiEIPB
GgMr1PAc87pl5zMJdkQVWjH64VGJcS3z9fKhm3Kr7YLmYIvNUPnOnsRLYe7S2zgD
5nDJRsmC4v+qTPbKK9MtC08GhDXK+9at9VH2q2oEBHJeuv1KoNUPnBM9d6uWJI4x
zlmdVyPon2Kl0KSiI8RUpNiS10pFoYlHTjMeMV70b3JCrntp3GtAsfKSTdik23cG
mK/Ie0WDrjXGzNOphzZc/fS+dMCOxUfYT9zDRAPdYbHah7EdGyfpeJiD9wtQ+ie7
96P0er7WKMIkxTue0B9pnGXVmD6Y4aZlnLuL1IF9cHUN
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:10 2026 by rpki-client