Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/9_SX4oGPRwHwUs9dsAv0SkXttZU.roa
File: 9_SX4oGPRwHwUs9dsAv0SkXttZU.roa (raw, json)
Hash identifier: C5ZfhC1NpNdcaw48Kys3DIEsFtYzKthbyD7XSONyJXo=
Subject key identifier: F7:F4:97:E2:81:8F:47:01:F0:52:CF:5D:B0:0B:F4:4A:45:ED:B5:95
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019C01A13E891079B0C905792B8B5E25049C
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/9_SX4oGPRwHwUs9dsAv0SkXttZU.roa
Signing time: Tue 27 Jan 2026 22:44:30 +0000
ROA not before: Tue 27 Jan 2026 22:44:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:01:a1:3e:89:10:79:b0:c9:05:79:2b:8b:5e:25:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 27 22:44:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f497e2818f4701f052cf5db00bf44a45edb595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:b9:de:ec:1b:68:e2:49:a3:65:26:46:d9:
9d:c6:1a:a8:fa:2b:f0:fc:9b:29:60:89:50:65:71:
99:43:53:70:ce:1f:93:32:25:c0:9a:2a:54:59:db:
f3:ac:0b:47:86:da:30:17:2b:fc:8c:26:5e:25:a4:
31:3e:43:d4:7b:f7:20:95:db:26:9f:11:aa:ef:26:
a8:52:bf:0c:1c:ad:05:de:1b:f1:90:f4:e3:00:41:
05:94:05:0e:f7:f9:76:c3:77:8e:bc:eb:51:1b:0b:
2c:84:7c:fa:05:fa:fc:e7:f7:73:19:fe:01:e9:89:
67:bf:75:49:ca:67:db:f5:49:07:8d:cb:e0:8c:4a:
6b:13:0b:be:c4:c1:c4:a7:e8:21:9d:d0:5e:c8:83:
f2:13:98:55:8e:18:cd:14:64:f5:94:c9:ab:1e:77:
c3:0a:7f:85:5b:1c:1c:88:9b:66:1a:37:65:1d:0b:
a7:a0:c9:68:8f:26:54:07:94:99:32:df:f0:e5:f3:
dc:8e:07:dd:1c:d9:9e:87:75:f1:7b:0c:1c:27:5e:
a8:24:01:be:09:80:79:59:e4:97:6f:e4:ba:57:dd:
28:9e:d7:f3:33:d1:dd:2f:96:68:e8:60:a0:65:d3:
a7:c0:b3:32:c6:ce:55:bc:b3:c7:70:a2:02:8e:4e:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:97:E2:81:8F:47:01:F0:52:CF:5D:B0:0B:F4:4A:45:ED:B5:95
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/9_SX4oGPRwHwUs9dsAv0SkXttZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:40:61:43:23:50:0c:97:1e:2b:de:15:3a:b5:94:c5:ba:08:
c6:9a:ce:f1:fd:3a:0d:a2:ba:71:81:47:58:2c:c5:1b:93:ee:
3e:8f:5f:a8:ae:3d:b6:0f:08:05:9e:8d:cd:38:c5:29:07:65:
0a:7e:84:9e:af:b7:f0:95:e4:d5:9c:22:ad:38:89:83:11:77:
f7:82:63:c9:bd:5d:9c:3b:a1:2d:0b:1a:06:99:b7:f1:32:65:
f2:9b:4c:2b:7c:0f:29:16:b2:85:ae:86:7d:d9:cf:c5:a2:5d:
f7:f8:9d:05:67:f7:f1:8c:d2:33:18:54:9c:41:33:ca:ac:dc:
e5:a7:1e:68:36:c8:01:af:e0:0d:5e:4e:76:85:f6:99:d6:a2:
72:5a:5e:57:83:32:3b:d1:48:3e:76:98:b0:eb:de:94:57:eb:
fc:bc:5d:f5:eb:15:71:88:8e:e0:49:49:df:5b:a6:98:44:28:
7c:3c:45:8e:28:74:ca:e7:e4:45:c1:47:6d:a5:e7:b1:c3:f0:
cc:a8:53:ae:a4:52:bd:d8:b5:c1:2c:89:3c:7c:9e:8a:e2:36:
c0:c6:f7:43:b3:86:95:28:d5:db:76:75:95:4f:cc:e3:66:f1:
2c:12:47:43:ce:3b:21:41:31:7c:c9:10:49:be:7e:86:16:1a:
49:9c:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:07 2026 by rpki-client