Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/plpcbxquEzG0ta998BGzpeFUFvA.roa
File: plpcbxquEzG0ta998BGzpeFUFvA.roa (raw, json)
Hash identifier: fIPQ+c0xFbDOx8gkU9vjLOomlGr6fxYB4npVKt9GMCQ=
Subject key identifier: A6:5A:5C:6F:1A:AE:13:31:B4:B5:AF:7D:F0:11:B3:A5:E1:54:16:F0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019C46DE82928073E5D861C991714DBBA066
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/plpcbxquEzG0ta998BGzpeFUFvA.roa
Signing time: Tue 10 Feb 2026 09:25:13 +0000
ROA not before: Tue 10 Feb 2026 09:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.185.1.0/24 maxlen: 24
89.185.3.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:de:82:92:80:73:e5:d8:61:c9:91:71:4d:bb:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 10 09:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65a5c6f1aae1331b4b5af7df011b3a5e15416f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:1c:60:c8:ce:83:db:3c:9f:61:8a:54:03:
36:ca:bc:14:43:13:ac:d6:a1:4b:a6:cf:91:d2:7f:
07:b9:f6:02:04:2a:c3:12:ba:66:0a:0d:20:75:d1:
50:85:b0:70:56:bf:e7:47:b8:54:c0:46:2a:26:8f:
63:91:c0:7a:2e:19:cb:6d:24:29:b7:e1:c3:ac:c1:
60:ed:fc:af:ee:e9:59:56:77:df:36:46:5a:e8:72:
f9:de:f2:cd:ca:f5:91:dd:72:51:ea:eb:28:aa:8c:
ee:42:93:5c:ee:4a:97:9b:93:6a:d1:36:ba:18:0d:
e5:bf:b1:0c:80:cb:37:16:05:69:c4:8a:59:e2:44:
9d:b2:93:47:b7:13:62:3f:9f:a2:be:77:04:d1:35:
54:0a:97:36:0e:33:65:98:31:1d:73:a7:2c:d8:e1:
3c:c9:d9:8b:b6:1e:78:59:40:bc:61:4b:c5:66:6a:
b3:65:e1:a7:de:2b:b3:7d:1b:cd:13:ac:c6:4a:09:
14:62:6f:a2:e2:76:e0:e9:92:55:d3:c4:78:63:39:
79:3d:f0:c0:a1:be:d7:17:64:7b:f5:fe:e3:9e:15:
ff:4d:6a:b7:cc:4b:94:a4:4b:eb:9d:32:89:8b:71:
27:23:4b:b8:3c:4a:6a:3a:4d:c7:9e:2f:69:2b:56:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:5C:6F:1A:AE:13:31:B4:B5:AF:7D:F0:11:B3:A5:E1:54:16:F0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/plpcbxquEzG0ta998BGzpeFUFvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.1.0/24
89.185.3.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:34:6d:ad:a1:f4:28:92:b0:0c:3e:34:a6:79:c3:f6:59:5d:
61:66:e8:cb:31:1c:4b:10:0d:70:45:34:1b:2e:21:b3:a1:85:
97:9c:60:ec:12:18:ba:f8:d3:15:4f:06:a8:26:d8:c3:52:b3:
48:6c:87:a8:e0:59:91:15:13:f8:80:7e:8e:d6:67:57:c9:de:
ad:0c:c0:a7:cf:bc:36:4b:01:3a:da:4d:00:30:12:a8:5c:aa:
06:f9:11:83:eb:47:3b:57:80:13:83:19:5b:62:7d:15:96:08:
35:b5:0a:b5:d6:05:b0:e4:44:ff:a8:5f:c6:13:39:9d:7b:03:
de:f2:63:d6:cd:1f:2b:8c:d9:0b:04:49:16:45:42:4e:4e:a9:
5e:de:8a:4b:7e:d6:8c:37:2b:59:4c:c5:96:63:80:64:a8:81:
87:8e:73:db:60:f1:17:de:b6:2b:d0:a0:ac:42:2f:f0:d7:07:
c2:18:5e:bc:b0:ad:0c:7b:75:35:6c:10:72:1b:17:e1:b5:5d:
49:b3:99:ad:43:93:86:e2:16:87:24:a1:db:fd:67:06:d4:1c:
22:5a:59:5f:60:b6:4c:56:0f:fa:7f:1e:28:95:ff:9c:a5:56:
f8:4c:61:24:d3:8d:c3:37:53:73:36:5e:f1:e8:3c:2c:b7:48:
31:3f:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:27 2026 by rpki-client