Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/XebnCKap0j-NtgbFPdSdKBn3-VA.roa
File: XebnCKap0j-NtgbFPdSdKBn3-VA.roa (raw, json)
Hash identifier: 2q764mNe/SuQvZ1ES8wUHdfsH5UtBobLUA/sir5K4Ms=
Subject key identifier: 5D:E6:E7:08:A6:A9:D2:3F:8D:B6:06:C5:3D:D4:9D:28:19:F7:F9:50
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 019B7CEE430147513DA2904966FD4EBBCE93
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/XebnCKap0j-NtgbFPdSdKBn3-VA.roa
Signing time: Fri 02 Jan 2026 04:19:08 +0000
ROA not before: Fri 02 Jan 2026 04:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 185.210.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:43:01:47:51:3d:a2:90:49:66:fd:4e:bb:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jan 2 04:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de6e708a6a9d23f8db606c53dd49d2819f7f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:99:5a:31:51:6e:89:fa:f6:01:ba:af:7c:
2e:5b:e4:19:24:d7:12:47:e1:d4:fb:e4:94:2a:cd:
33:1a:96:b2:7f:7d:30:cf:e1:7f:eb:3b:30:a9:27:
bc:29:b5:f5:c9:ba:e8:25:a1:b0:0b:c1:f9:9b:c1:
69:d5:f7:1c:6d:7f:69:5e:80:ba:e1:cc:0d:f1:f2:
1b:77:d6:70:65:fd:62:64:5f:97:28:80:d4:60:98:
72:ba:c6:03:9a:cf:05:10:60:11:33:93:f5:ff:35:
3e:73:1c:25:57:bb:3e:0f:e6:34:50:92:df:59:f2:
63:4f:f5:0e:f3:d9:fc:4c:ae:4e:85:9c:4b:10:7a:
7e:da:1d:e2:36:fc:62:5b:61:cc:f7:4c:4b:5b:f1:
4c:66:ee:ea:a4:cf:62:b6:f0:0f:8c:2f:a8:da:0b:
ab:bf:7d:50:65:26:31:ec:b2:b6:3d:0e:e1:59:d4:
3e:0e:ef:2f:7e:9c:9b:49:c6:2f:4a:d0:07:d0:34:
15:81:b4:50:b2:a9:61:e9:33:db:3c:12:8a:86:f7:
39:f7:53:c0:6f:16:e1:da:01:ab:26:28:a1:19:5c:
43:97:45:82:fa:8c:bb:95:2d:2c:d8:89:d5:23:85:
da:4e:9a:87:0a:ad:d1:e5:6c:23:ae:b8:44:c6:81:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:E7:08:A6:A9:D2:3F:8D:B6:06:C5:3D:D4:9D:28:19:F7:F9:50
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/XebnCKap0j-NtgbFPdSdKBn3-VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.248.0/22
Signature Algorithm: sha256WithRSAEncryption
68:3b:0b:12:4c:69:7a:e5:e5:b8:e8:ce:1a:1e:ff:35:38:9b:
75:81:87:c4:9e:11:7f:91:b9:38:b8:f4:3c:24:4f:1c:9b:3b:
14:38:3e:95:0f:ec:e2:10:e7:e9:1a:07:b9:72:af:7f:bf:31:
f6:05:e5:ed:00:2e:55:34:02:3d:27:fe:2a:1f:cc:1c:72:29:
fd:17:c6:a7:aa:23:be:0b:a9:c2:ca:84:93:ed:6e:8e:7a:b2:
8e:c5:05:41:7b:2b:5c:da:4d:7c:51:2f:f1:54:80:87:9f:10:
4a:e8:aa:a5:34:73:d8:0d:81:b8:e0:b7:86:cd:20:47:32:7c:
d2:80:06:0b:fd:38:97:2b:76:7e:74:cc:20:33:8b:ea:94:c4:
ec:d7:40:49:c9:c6:30:fa:0e:03:f5:13:b8:48:ae:67:1f:7d:
f4:f2:48:fc:ff:e9:3f:52:75:3e:d7:65:97:f1:01:1d:7a:cb:
45:26:45:a1:9c:4d:33:0e:4e:5d:46:01:72:8a:c2:ff:c9:a3:
38:70:9b:65:ed:be:d0:92:02:f2:45:4e:80:3c:0c:23:3d:6d:
e2:b5:e0:54:1c:41:96:b6:82:6c:99:e2:bc:08:cd:80:e0:a4:
c1:5b:0b:8d:c3:96:ba:93:aa:40:43:6e:1d:4e:9f:e8:5e:01:
c5:80:8c:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87kMBR1E9opBJZv1Ou86TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2
ZDAxNTQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU2ZTcwOGE2YTlkMjNmOGRiNjA2YzUzZGQ0OWQyODE5ZjdmOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjqZWjFRbon69gG6r3wuW+QZJNcS
R+HU++SUKs0zGpayf30wz+F/6zswqSe8KbX1ybroJaGwC8H5m8Fp1fccbX9pXoC6
4cwN8fIbd9ZwZf1iZF+XKIDUYJhyusYDms8FEGARM5P1/zU+cxwlV7s+D+Y0UJLf
WfJjT/UO89n8TK5OhZxLEHp+2h3iNvxiW2HM90xLW/FMZu7qpM9itvAPjC+o2gur
v31QZSYx7LK2PQ7hWdQ+Du8vfpybScYvStAH0DQVgbRQsqlh6TPbPBKKhvc591PA
bxbh2gGrJiihGVxDl0WC+oy7lS0s2InVI4XaTpqHCq3R5WwjrrhExoF7TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3m5wimqdI/jbYGxT3UnSgZ9/lQMB8GA1UdIwQY
MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt
OWJlODY5YTljNjBjLzEvWGVibkNLYXAwai1OdGdiRlBkU2RLQm4zLVZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj
LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudL4MA0G
CSqGSIb3DQEBCwUAA4IBAQBoOwsSTGl65eW46M4aHv81OJt1gYfEnhF/kbk4uPQ8
JE8cmzsUOD6VD+ziEOfpGge5cq9/vzH2BeXtAC5VNAI9J/4qH8wccin9F8anqiO+
C6nCyoST7W6OerKOxQVBeytc2k18US/xVICHnxBK6KqlNHPYDYG44LeGzSBHMnzS
gAYL/TiXK3Z+dMwgM4vqlMTs10BJycYw+g4D9RO4SK5nH3308kj8/+k/UnU+12WX
8QEdestFJkWhnE0zDk5dRgFyisL/yaM4cJtl7b7QkgLyRU6APAwjPW3iteBUHEGW
toJsmeK8CM2A4KTBWwuNw5a6k6pAQ24dTp/oXgHFgIwy
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:15 2026 by rpki-client