Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/HvHtExS1BTflnRg2KdY95GWbMjU.roa
File: HvHtExS1BTflnRg2KdY95GWbMjU.roa (raw, json)
Hash identifier: 46JezNl3lJPdt532LIoL/aAhrojdiUiR3TTl/K2yKN4=
Subject key identifier: 1E:F1:ED:13:14:B5:05:37:E5:9D:18:36:29:D6:3D:E4:65:9B:32:35
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019D3DC43735745E8D1BA3A03F32EAD421A6
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/HvHtExS1BTflnRg2KdY95GWbMjU.roa
Signing time: Mon 30 Mar 2026 08:02:42 +0000
ROA not before: Mon 30 Mar 2026 08:02:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 178.236.224.0/23 maxlen: 24
178.236.227.0/24 maxlen: 24
178.236.235.0/24 maxlen: 24
178.236.236.0/24 maxlen: 24
178.236.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:c4:37:35:74:5e:8d:1b:a3:a0:3f:32:ea:d4:21:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 30 08:02:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ef1ed1314b50537e59d183629d63de4659b3235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:42:a6:ea:7b:25:ec:49:26:01:6c:ca:f7:
31:1e:fe:2d:fe:ee:cf:30:95:1d:c0:54:a4:3c:10:
b3:b9:95:f3:ff:93:b5:48:4a:d2:85:fe:5c:48:5c:
21:2c:1f:c9:64:1d:44:5b:68:f2:1f:3f:d3:50:fd:
24:e6:e3:ce:a1:2e:ae:81:40:36:4e:1d:26:b4:4b:
a5:3e:9c:e8:a0:b9:e5:99:42:4b:fd:a1:65:a8:4c:
49:01:d8:18:d3:a0:fc:c8:9f:58:f3:58:ad:ca:d5:
a9:37:6d:2c:a8:0b:34:f4:13:24:44:c7:32:20:2e:
32:bd:ce:39:79:cd:f0:62:25:c2:d3:38:ae:63:1b:
4b:16:33:5e:cf:cf:d6:11:f2:1e:b7:4e:bb:e7:df:
d4:a4:61:ff:0a:57:21:07:c4:dd:8b:aa:33:44:30:
bc:bc:1e:45:cc:b6:1f:29:fb:cc:63:e6:94:76:de:
8c:67:ca:b5:7b:44:b3:93:d2:c9:a7:25:78:32:f9:
c9:44:29:0b:91:a7:72:5b:cc:12:78:fe:15:15:96:
1a:92:9c:63:4e:d5:9e:92:68:62:11:17:60:fa:94:
fc:4f:1a:e4:cf:a1:12:87:8f:0b:ef:b7:d3:0c:c8:
3a:44:79:f5:19:2c:d3:a2:68:e5:ba:63:36:27:de:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:ED:13:14:B5:05:37:E5:9D:18:36:29:D6:3D:E4:65:9B:32:35
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/HvHtExS1BTflnRg2KdY95GWbMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.224.0/23
178.236.227.0/24
178.236.235.0-178.236.236.255
178.236.238.0/23
Signature Algorithm: sha256WithRSAEncryption
28:d9:3e:60:b3:4d:fe:03:1a:3b:38:8f:be:c8:86:83:62:00:
ae:02:39:97:5f:45:7c:44:85:a5:77:cf:fc:4b:e7:6a:0f:44:
3d:9b:f7:18:7f:28:f3:ad:24:42:e8:dc:ff:14:1c:d7:0b:19:
61:8c:38:90:f0:62:69:c9:14:a1:29:47:8e:4d:ea:54:58:e5:
c3:fa:4d:9f:c6:81:c4:5d:f0:54:b6:df:fb:e8:85:0f:5c:4d:
f0:ee:f3:2b:2b:20:8e:63:d8:c6:6e:60:96:d2:ff:0c:1d:5f:
e4:db:70:1d:64:fc:fd:1b:24:95:05:37:68:4e:79:1e:56:06:
5b:ab:b8:47:e6:f7:df:f0:8c:5c:22:49:dc:d2:fb:d2:a9:93:
ec:1f:53:be:75:a1:9d:ba:66:ea:db:ad:13:7c:af:29:cf:3f:
41:33:0f:07:ae:7f:a8:8f:2f:b2:0e:da:6d:63:af:cd:a3:79:
de:de:0f:d6:0c:09:be:65:43:4f:85:0b:07:99:9a:78:c1:3b:
8f:7b:ca:f6:51:55:54:a8:22:ff:8f:dc:d5:45:3f:84:94:40:
70:ff:d8:81:eb:b1:a5:f0:13:da:81:73:71:d1:9e:69:a7:1c:
e2:f2:d5:ab:da:0c:2f:47:6b:53:06:31:de:4a:d1:ab:c5:5f:
a4:f2:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:25 2026 by rpki-client