Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/oQsNb-5VlThb2JT3EPE2LAG1bEo.roa
File: oQsNb-5VlThb2JT3EPE2LAG1bEo.roa (raw, json)
Hash identifier: /6zEksBWZtlmzedZ/2nP1TLSrYkNLgloUiNgSbxGNBs=
Subject key identifier: A1:0B:0D:6F:EE:55:95:38:5B:D8:94:F7:10:F1:36:2C:01:B5:6C:4A
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019D7200119F9B8F434E7A97ADA6FE072098
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/oQsNb-5VlThb2JT3EPE2LAG1bEo.roa
Signing time: Thu 09 Apr 2026 11:28:20 +0000
ROA not before: Thu 09 Apr 2026 11:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 62.106.83.0/24 maxlen: 24
77.246.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:00:11:9f:9b:8f:43:4e:7a:97:ad:a6:fe:07:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Apr 9 11:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a10b0d6fee5595385bd894f710f1362c01b56c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:c1:f2:0c:88:45:d2:0c:e4:d1:c9:9b:72:
6d:6c:31:3f:8e:a3:7d:0c:0c:70:a0:59:b2:f8:f4:
b3:9d:eb:86:37:f7:06:36:c8:07:2a:fe:13:3f:d1:
c9:df:b7:d2:2b:dd:ae:3e:6a:7b:0a:bb:11:49:35:
22:04:35:fd:df:60:22:78:5f:cf:54:b5:e3:83:b5:
08:5a:24:58:b2:92:53:ba:67:58:1c:56:60:fc:64:
05:7e:91:32:50:75:ce:14:e5:28:e4:78:d0:69:ae:
ef:a6:f0:1b:06:96:df:77:c7:2e:c5:22:d3:36:3a:
60:d2:3c:04:da:e5:6f:1b:0a:20:b1:0e:39:b7:df:
d0:14:28:7b:31:84:b9:bb:6f:e7:c3:d6:fa:65:4a:
bd:56:7a:1b:c7:e2:79:55:92:f5:2e:36:25:11:63:
fb:45:42:93:8e:64:17:a2:ae:80:e9:45:ae:9d:ba:
d8:9e:3e:a5:8a:96:5e:3b:a8:56:13:8e:cb:2f:fe:
88:fb:fe:90:64:09:32:7a:69:1d:51:09:1c:f1:32:
2c:9e:a5:49:08:85:2a:f0:0a:11:1f:e2:6e:ef:97:
ff:ba:98:8e:66:d8:b7:9a:e8:ad:13:d3:5d:18:40:
61:8b:8a:cb:5d:a2:dc:c8:34:29:3a:33:c2:52:f1:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:0D:6F:EE:55:95:38:5B:D8:94:F7:10:F1:36:2C:01:B5:6C:4A
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/oQsNb-5VlThb2JT3EPE2LAG1bEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
77.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
59:16:67:f7:84:45:f6:68:28:34:a5:11:98:f7:2d:12:8a:ec:
1a:87:ed:83:22:ce:be:04:f0:2e:6a:2a:16:7e:58:a1:ef:c2:
0f:e6:fe:a1:ed:8b:23:2f:dc:a0:16:63:3b:a7:6a:85:a1:36:
db:39:0d:04:d7:08:9b:6e:da:60:74:39:ee:af:80:11:37:b4:
c6:6c:da:3b:d9:e3:f3:44:ea:62:f0:37:38:dd:54:b4:5b:5c:
8a:4c:0a:ea:92:11:29:09:96:56:26:50:af:bf:76:f3:b8:f7:
ce:73:85:f6:8c:ce:a8:eb:08:2a:25:d5:04:0e:62:f4:ea:29:
73:02:52:6d:9f:7d:dd:af:38:37:33:11:ec:3c:19:9b:46:30:
08:e8:46:2d:60:af:11:a9:59:e2:fa:be:68:ae:f7:c5:e1:ab:
74:3f:32:30:09:41:3b:07:c3:fc:0c:3a:7b:a0:10:1d:28:3f:
1e:68:cb:15:37:95:d0:11:c0:e8:03:a3:b9:35:83:50:79:56:
3d:fc:c6:2f:5b:25:a2:61:47:d3:f2:ad:86:1a:d8:6e:4b:38:
f2:02:2a:64:1a:11:58:69:1e:e8:ca:f8:96:a9:0f:dd:47:a3:
22:bc:a8:15:d7:e2:ae:87:d0:2f:59:56:70:2d:c5:1b:6f:2b:
e6:b3:ba:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1yABGfm49DTnqXrab+ByCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjYwNDA5MTEyODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTBiMGQ2ZmVlNTU5NTM4NWJkODk0ZjcxMGYxMzYyYzAxYjU2YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArunB8gyIRdIM5NHJm3JtbDE/jqN9
DAxwoFmy+PSzneuGN/cGNsgHKv4TP9HJ37fSK92uPmp7CrsRSTUiBDX932AieF/P
VLXjg7UIWiRYspJTumdYHFZg/GQFfpEyUHXOFOUo5HjQaa7vpvAbBpbfd8cuxSLT
Njpg0jwE2uVvGwogsQ45t9/QFCh7MYS5u2/nw9b6ZUq9Vnobx+J5VZL1LjYlEWP7
RUKTjmQXoq6A6UWunbrYnj6lipZeO6hWE47LL/6I+/6QZAkyemkdUQkc8TIsnqVJ
CIUq8AoRH+Ju75f/upiOZti3muitE9NdGEBhi4rLXaLcyDQpOjPCUvE+FwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKELDW/uVZU4W9iU9xDxNiwBtWxKMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvb1FzTmItNVZsVGhiMkpUM0VQRTJMQUcxYkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPmpTAwQA
TfbyMA0GCSqGSIb3DQEBCwUAA4IBAQBZFmf3hEX2aCg0pRGY9y0Siuwah+2DIs6+
BPAuaioWflih78IP5v6h7YsjL9ygFmM7p2qFoTbbOQ0E1wibbtpgdDnur4ARN7TG
bNo72ePzROpi8Dc43VS0W1yKTArqkhEpCZZWJlCvv3bzuPfOc4X2jM6o6wgqJdUE
DmL06ilzAlJtn33drzg3MxHsPBmbRjAI6EYtYK8RqVni+r5orvfF4at0PzIwCUE7
B8P8DDp7oBAdKD8eaMsVN5XQEcDoA6O5NYNQeVY9/MYvWyWiYUfT8q2GGthuSzjy
AipkGhFYaR7oyviWqQ/dR6MivKgV1+Kuh9AvWVZwLcUbbyvms7pw
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:31 2026 by rpki-client