Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wnqtligZY5xWEAla2JUFSoEbmT0.roa
File: wnqtligZY5xWEAla2JUFSoEbmT0.roa (raw, json)
Hash identifier: v/otbbkjFVINITA5ogReTKxgrOlvj4WjHZMRcMlVgGo=
Subject key identifier: C2:7A:AD:96:28:19:63:9C:56:10:09:5A:D8:95:05:4A:81:1B:99:3D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019C01A22959E3DDA8495B94647505BD2EB0
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wnqtligZY5xWEAla2JUFSoEbmT0.roa
Signing time: Tue 27 Jan 2026 22:45:30 +0000
ROA not before: Tue 27 Jan 2026 22:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.168.186.0/24 maxlen: 24
193.168.187.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:01:a2:29:59:e3:dd:a8:49:5b:94:64:75:05:bd:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 27 22:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c27aad962819639c5610095ad895054a811b993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:46:08:2e:37:19:3e:88:f3:7d:2b:00:34:
ea:77:b1:ec:2c:de:fc:3b:4a:53:3c:cf:7d:2c:be:
70:9a:dc:82:db:7b:df:02:58:f4:e7:cc:57:bb:90:
d8:a4:a2:05:33:8f:48:0f:0a:0e:b9:67:4f:73:55:
29:57:1e:51:35:92:4a:9d:aa:f5:69:a9:1b:cb:77:
5c:37:86:41:7d:c1:50:e5:e3:6e:77:b0:49:f3:1b:
c2:80:88:f3:4c:90:68:9c:f7:f9:6e:56:50:57:8d:
16:01:7c:87:f4:9e:a5:3f:ed:0d:e9:38:1f:b3:75:
48:96:ed:f3:d1:39:c3:b8:b8:46:d7:c6:9e:e3:47:
58:20:1b:17:c1:c6:dc:10:66:74:a5:d3:66:7e:ae:
f4:31:08:c7:85:ec:a6:71:9c:45:18:80:cb:fc:b3:
52:ac:6a:b3:00:f4:27:45:e6:5b:4c:07:83:2b:ac:
c3:03:e7:da:91:c0:c2:51:23:c8:30:91:2a:14:4c:
88:e5:e0:a5:f8:98:90:94:55:3e:b3:15:21:6d:6c:
a3:11:1d:0f:88:f2:b2:ed:f6:4b:1d:71:c7:af:4a:
19:12:56:fe:d9:5e:55:cb:2e:40:24:db:42:92:10:
14:a8:c6:fb:c5:48:53:f2:4f:7a:60:07:92:2d:d6:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:AD:96:28:19:63:9C:56:10:09:5A:D8:95:05:4A:81:1B:99:3D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wnqtligZY5xWEAla2JUFSoEbmT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.186.0/23
212.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
49:78:09:9c:ac:00:88:e5:1a:d3:06:c9:7f:43:81:75:5e:86:
8c:60:8d:87:2c:e3:5c:e4:9c:17:da:da:eb:4e:16:e3:ae:ff:
02:d8:9d:d0:d0:af:b2:e7:31:b9:15:83:0d:8a:c9:5e:25:76:
54:ee:fa:a8:11:8b:2c:ea:09:cb:47:c2:4f:ab:d8:58:d1:09:
7e:22:d0:67:d5:b4:17:6b:7e:b0:0a:e1:57:34:58:35:10:3d:
77:3d:09:31:77:bf:3d:78:03:53:93:96:2f:13:05:cb:df:46:
50:d3:a2:22:96:a9:8c:cc:0c:75:e8:f4:8b:81:23:07:41:27:
28:ac:f5:56:96:b6:57:d0:60:22:69:c6:d9:67:b0:03:1a:ac:
12:a7:94:c9:92:c0:f7:ae:29:09:cf:45:9d:ab:50:c9:ff:e7:
03:94:c5:63:ca:6f:2a:0d:21:70:b4:d7:2e:6d:3d:84:a1:5a:
39:46:1a:4c:f8:35:9f:4f:39:36:66:67:0f:a3:eb:d7:cd:6d:
c8:5c:70:b9:d0:ec:dd:eb:ee:37:6a:13:0d:db:c2:cb:db:3f:
35:fa:01:c4:04:8b:fb:ef:64:77:fb:6a:80:83:6f:3a:f3:85:
e4:93:7e:04:82:26:a8:5f:63:04:0a:88:99:a7:51:59:a7:bd:
15:21:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:38 2026 by rpki-client