Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Y16M7h3lLY0Wrchg4tPLKQlM80M.roa
File: Y16M7h3lLY0Wrchg4tPLKQlM80M.roa (raw, json)
Hash identifier: 8501LQJ9v7zTRrl3cQgnWliFF5mHTAAKtvtuRJWYglg=
Subject key identifier: 63:5E:8C:EE:1D:E5:2D:8D:16:AD:C8:60:E2:D3:CB:29:09:4C:F3:43
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019BFB9343B6BE1E72746A573E33347BF4B2
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Y16M7h3lLY0Wrchg4tPLKQlM80M.roa
Signing time: Mon 26 Jan 2026 18:31:30 +0000
ROA not before: Mon 26 Jan 2026 18:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48336
IP address blocks: 45.86.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:93:43:b6:be:1e:72:74:6a:57:3e:33:34:7b:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 26 18:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=635e8cee1de52d8d16adc860e2d3cb29094cf343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:31:46:0a:a9:5e:8a:14:1b:21:05:39:e2:
95:4b:33:aa:3f:67:96:a7:54:24:72:5b:86:28:2e:
6b:a1:33:9f:a4:8e:23:c8:9f:71:5e:65:d5:c1:4d:
42:ca:b2:2c:ad:d1:23:01:34:76:c9:d5:42:45:17:
d3:0b:c6:ba:43:79:5b:77:84:6c:00:c7:f5:b5:d1:
ab:21:75:82:6f:fb:8e:f5:ef:20:d2:05:7d:ce:90:
49:be:9a:53:8a:66:bc:19:83:31:76:c2:a4:db:09:
29:ef:63:1f:67:af:8b:35:8d:59:6b:a8:2e:37:5c:
e8:01:bd:d6:70:28:be:f9:7c:c4:fc:38:85:51:d2:
bf:ac:31:b1:82:5d:51:16:e4:f8:1c:32:67:95:38:
5f:a6:69:d9:eb:f3:04:37:35:ba:3b:eb:bf:56:d5:
4a:b5:74:91:82:bc:8e:2f:81:45:73:0d:fa:43:a0:
c5:7d:6f:75:e2:72:8e:c0:0b:76:55:3b:10:82:c2:
b2:f1:57:a6:26:82:2b:ad:1e:d7:c0:ed:60:07:c2:
1b:63:9e:70:6b:40:87:2a:60:cf:57:be:2d:70:ff:
5e:23:84:66:bb:2d:26:42:67:f1:ba:68:d5:82:71:
7d:43:95:bd:13:76:7a:e7:d2:1b:f9:ae:83:89:13:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5E:8C:EE:1D:E5:2D:8D:16:AD:C8:60:E2:D3:CB:29:09:4C:F3:43
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Y16M7h3lLY0Wrchg4tPLKQlM80M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.240.0/24
Signature Algorithm: sha256WithRSAEncryption
53:81:7e:b7:83:07:9c:9c:f8:fe:91:97:48:a5:c1:de:ee:1a:
01:19:1d:24:34:eb:b7:be:cb:b7:2d:e3:10:a0:39:11:37:b6:
0b:23:2a:8e:54:fb:5f:7e:9e:41:f1:a9:a3:1c:ea:b8:74:27:
23:23:22:f5:54:3d:15:dd:b9:31:d6:a1:7f:f1:e1:cf:e8:0c:
49:28:9d:12:75:7f:99:89:db:62:e8:66:40:c3:7b:78:4d:ac:
d7:59:10:cd:52:d6:b1:a9:41:e8:2c:9d:e8:ca:f6:9d:12:51:
6f:be:0d:1b:19:85:7d:58:76:94:dd:27:1c:d6:09:0f:10:4b:
68:a4:4a:34:b7:89:e2:f4:62:9a:47:6f:89:16:63:dd:66:7a:
e9:9b:65:65:8a:e8:67:0c:1c:2c:69:5a:2f:9e:87:1e:36:41:
ff:b1:de:07:da:26:34:9b:ac:69:49:dc:f0:23:9c:e4:5a:0b:
a3:e9:b9:3a:7f:57:b1:ee:08:50:2a:82:75:fd:66:0b:15:2b:
24:ba:61:f4:e9:00:0a:e3:7d:8f:3e:66:9c:17:84:e7:60:fd:
bd:e8:c6:95:15:70:97:f7:9d:ec:bd:a5:9f:45:57:ed:c0:55:
a3:ea:b9:79:d9:c5:36:b7:47:39:dc:26:3e:96:b6:aa:90:d8:
cf:3c:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:02 2026 by rpki-client