Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/lKrsqoRUlAfdPlpFj4hJ0uCp1sw.roa
File: lKrsqoRUlAfdPlpFj4hJ0uCp1sw.roa (raw, json)
Hash identifier: F3G64nEmjDg9O0NyHwg32mn/8AN+Z+kq3XvvzAvf7Gs=
Subject key identifier: 94:AA:EC:AA:84:54:94:07:DD:3E:5A:45:8F:88:49:D2:E0:A9:D6:CC
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019D72020671E3B3F226F58C2E453357E374
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/lKrsqoRUlAfdPlpFj4hJ0uCp1sw.roa
Signing time: Thu 09 Apr 2026 11:30:28 +0000
ROA not before: Thu 09 Apr 2026 11:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49527
IP address blocks: 194.26.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:02:06:71:e3:b3:f2:26:f5:8c:2e:45:33:57:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Apr 9 11:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94aaecaa84549407dd3e5a458f8849d2e0a9d6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:9c:ba:b2:de:d7:7a:46:13:90:c0:80:9f:
d2:5c:db:c4:19:48:b7:28:37:ef:99:3b:d9:49:38:
87:8d:e2:03:4b:b9:a8:7c:d9:d3:76:0c:ba:24:8c:
19:00:49:b5:d0:8d:25:30:ea:42:7f:88:c2:15:94:
f2:1c:f1:22:e5:e8:13:6c:5f:cf:8f:fd:7e:26:3d:
a8:92:b7:7f:6f:9c:e3:e1:5a:94:f3:be:01:36:05:
09:90:57:5a:c9:8c:86:c6:e9:0a:20:eb:0b:dd:cd:
0b:2f:48:c1:97:54:dd:57:11:40:06:fe:19:11:1f:
f6:71:69:ea:27:50:55:0b:36:78:df:48:54:a2:12:
ed:9e:a9:ec:33:e6:aa:e3:91:11:d0:5f:12:95:b3:
a6:c3:6d:71:b4:fe:68:bc:fe:07:e9:37:a0:79:7d:
8b:aa:56:d2:a7:b9:59:ca:9b:79:0e:73:d2:d4:62:
7c:cb:27:98:23:8f:96:67:e1:f6:d0:a4:f4:c9:fe:
e7:d7:c8:b0:c0:1e:8b:d1:52:c6:72:16:8b:61:8a:
00:7f:73:3d:bc:38:6d:55:18:28:bf:bd:41:91:09:
10:30:d9:70:61:0b:a8:fd:97:71:4b:b3:f6:38:1f:
bf:39:20:25:26:b6:c4:b4:2e:c8:70:fc:25:87:a9:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:EC:AA:84:54:94:07:DD:3E:5A:45:8F:88:49:D2:E0:A9:D6:CC
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/lKrsqoRUlAfdPlpFj4hJ0uCp1sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:27:58:b1:7b:cf:50:fb:db:82:84:45:64:49:f9:2d:d1:92:
6a:d6:db:53:ed:d3:2a:5d:58:6f:bd:75:ba:0c:b4:8f:ff:f0:
c0:81:65:14:63:d8:af:87:f2:cf:03:f5:5f:e3:82:4c:82:91:
4f:62:ae:08:5e:89:f6:80:a6:3d:7c:9a:66:4f:27:b7:ed:72:
61:65:3a:e3:72:5a:8c:a4:64:f6:34:30:f9:2c:2d:a6:37:f7:
ca:8f:07:fe:17:1f:2b:93:7e:7c:d9:fb:7e:75:83:cd:79:d0:
6e:1b:5e:26:05:2a:1b:44:ad:0f:81:84:f9:c2:d3:91:3a:aa:
9a:ad:ab:83:25:55:5a:be:69:7a:ba:e0:3e:e5:5e:45:e5:2f:
0c:58:ae:ae:76:1f:eb:da:14:9f:61:9d:a8:41:d3:ac:19:fb:
e4:2b:e5:90:d1:a1:1a:0c:50:bf:33:a6:6f:af:0a:cf:65:f4:
b1:81:fd:68:55:56:a9:f0:b5:d0:5c:76:b9:56:66:89:5e:c6:
c5:e7:11:02:95:79:c3:23:d5:a6:0c:23:82:dd:f6:57:50:7d:
96:94:ba:bc:ca:40:32:f0:64:d4:c9:f6:56:08:6f:1e:3b:38:
63:b6:fa:c4:91:ae:98:ff:a6:55:a4:5b:8f:2f:51:7f:01:12:
17:37:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:27 2026 by rpki-client