Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/r3ftpmBzAThgYmjsGS_6jjMXBIo.roa
File: r3ftpmBzAThgYmjsGS_6jjMXBIo.roa (raw, json)
Hash identifier: toVR1JN48t4q25jaG9MCy5lnqI/z7wsVFP/n4zQTYmg=
Subject key identifier: AF:77:ED:A6:60:73:01:38:60:62:68:EC:19:2F:FA:8E:33:17:04:8A
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019BF983E97BCE64616EABC87348A8E36743
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/r3ftpmBzAThgYmjsGS_6jjMXBIo.roa
Signing time: Mon 26 Jan 2026 08:55:30 +0000
ROA not before: Mon 26 Jan 2026 08:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50825
IP address blocks: 185.160.20.0/22 maxlen: 24
2a02:1d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:83:e9:7b:ce:64:61:6e:ab:c8:73:48:a8:e3:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 26 08:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af77eda660730138606268ec192ffa8e3317048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f0:db:7a:5a:68:6b:f9:6c:da:d6:93:cf:61:
c4:79:02:1f:75:07:82:ef:89:83:e9:4b:42:3a:c3:
48:d4:73:09:67:1b:bd:9b:66:76:27:38:65:7f:38:
28:85:15:61:f3:df:03:ec:f5:53:18:64:e7:6c:5c:
82:f2:73:75:22:b0:80:99:5c:b1:97:72:98:a7:d8:
72:bd:1f:2f:04:05:d5:83:81:53:2e:3c:6f:4c:69:
a1:17:66:3f:b1:90:09:f2:14:ff:05:89:09:d7:30:
05:86:a1:08:35:25:45:46:4e:c9:c3:9f:34:b0:bc:
2d:6e:22:a1:95:94:99:03:52:ee:a0:a8:c0:54:aa:
da:bc:0b:43:56:73:e9:ee:34:31:8a:56:b9:ab:18:
c5:dd:d9:a8:8c:80:00:51:9d:78:94:e7:ea:1e:14:
28:f5:1a:c7:ec:7b:f7:85:f8:9a:d9:dd:f1:6c:a9:
10:e3:e5:b9:cf:53:44:9b:6d:ea:35:58:9f:86:7f:
08:5b:e7:11:c8:2e:41:18:ee:e2:6c:7a:a4:8c:ce:
b3:40:12:8e:70:aa:20:b1:0f:2f:cc:4a:6f:01:28:
ac:92:d3:4e:1b:79:76:47:2f:d0:b6:2e:b2:89:d9:
cc:92:8f:74:d8:57:95:ea:6c:f7:96:c7:86:d7:68:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:ED:A6:60:73:01:38:60:62:68:EC:19:2F:FA:8E:33:17:04:8A
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/r3ftpmBzAThgYmjsGS_6jjMXBIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.20.0/22
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
87:dd:16:4a:b5:ae:f3:9a:90:ef:75:aa:47:96:5d:22:e6:77:
a0:48:55:76:9e:57:71:eb:f3:ee:71:98:8e:9f:e0:7b:78:5e:
84:f5:0b:b9:27:7b:ba:b2:32:b6:5c:23:14:d2:11:cb:e7:7c:
9c:e7:6e:46:68:d5:42:0d:80:aa:b3:e5:d9:12:a4:4f:82:5b:
e2:7b:b1:7f:da:f9:9e:c7:6f:d6:8a:03:9d:62:24:b3:ce:06:
5b:be:f1:e5:32:14:a1:24:7b:a3:87:2d:ac:67:d9:78:e5:eb:
17:36:67:72:f3:de:0e:72:40:8b:90:bc:a9:41:c0:89:c6:5f:
b4:66:56:4e:5e:7e:a6:11:5c:15:99:4d:f5:21:fc:ff:d6:df:
13:60:e3:c4:45:2a:48:a4:51:e1:dd:50:08:0c:7d:40:05:f3:
97:25:54:62:95:5c:6d:1d:d9:53:2f:0e:30:c6:47:5f:ab:92:
eb:89:49:16:77:3f:41:b1:40:74:0d:9c:51:1f:dd:c7:81:1c:
59:9f:eb:1a:10:5a:9e:ca:fa:fc:6f:05:7e:be:84:4f:8f:ed:
4c:15:d9:1e:bc:97:66:be:d8:d4:d4:50:a8:91:b5:b1:83:11:
52:cd:17:0b:dc:e0:62:26:fd:f7:6a:e0:c3:7b:0e:3e:a8:e4:
56:d7:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:20 2026 by rpki-client