Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/JesPQuP-Iktm2nGZyYVeZ_qfyaY.roa
File: JesPQuP-Iktm2nGZyYVeZ_qfyaY.roa (raw, json)
Hash identifier: Q50eQQX809OefT9RrMlLvZME6Loqe3vFMCNilJuylKE=
Subject key identifier: 25:EB:0F:42:E3:FE:22:4B:66:DA:71:99:C9:85:5E:67:FA:9F:C9:A6
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 019B7D5D0D0368465B69B16FC45D0FF75EB9
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/JesPQuP-Iktm2nGZyYVeZ_qfyaY.roa
Signing time: Fri 02 Jan 2026 06:20:08 +0000
ROA not before: Fri 02 Jan 2026 06:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 130.185.72.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
185.8.172.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
2a03:2dc0::/36 maxlen: 36
2a03:2dc0:1000::/36 maxlen: 36
2a03:2dc0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:0d:03:68:46:5b:69:b1:6f:c4:5d:0f:f7:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 2 06:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25eb0f42e3fe224b66da7199c9855e67fa9fc9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:a9:7a:fb:ca:ee:02:3c:42:cd:2c:11:6c:
6c:08:3d:60:19:02:ca:e2:a8:01:94:5a:96:82:5e:
16:b9:23:89:50:38:c0:25:c7:3a:ad:78:58:c8:fd:
47:c9:80:2a:19:df:3c:9b:e0:2d:87:09:f8:e3:b5:
1a:e5:04:a2:ff:18:9c:4d:d7:b4:1e:9d:48:36:85:
17:06:1f:b5:43:fa:e9:83:46:24:62:91:ab:7a:c9:
47:59:14:b7:19:6b:71:12:94:09:7a:60:f6:18:79:
57:85:3b:84:3e:aa:d6:49:d1:71:01:78:16:ab:c0:
4a:36:43:9b:24:1e:03:bb:87:0e:ac:44:f1:cf:19:
db:4d:b6:96:df:5b:68:6a:3a:0e:2e:af:aa:10:35:
2f:4c:12:c4:81:e8:42:fe:da:c8:a1:f4:7a:df:d2:
cb:5b:b0:43:93:94:b8:3c:cc:63:9b:c4:69:b5:28:
1f:e6:87:84:2a:24:a9:40:62:da:55:04:ac:7d:d9:
9e:61:04:d2:a0:f9:08:42:1f:72:e0:44:ea:32:98:
ad:b7:e8:8d:a2:67:94:b7:45:8c:90:1e:9c:a7:a9:
1d:83:e9:9b:0e:24:dd:04:d4:52:9c:8a:c4:e1:f6:
a5:10:0c:ae:57:ad:a4:59:c0:7c:59:36:aa:ab:52:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:0F:42:E3:FE:22:4B:66:DA:71:99:C9:85:5E:67:FA:9F:C9:A6
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/JesPQuP-Iktm2nGZyYVeZ_qfyaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::-2a03:2dc0:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:cf:0d:60:49:6e:f0:dd:a7:af:ac:3a:a5:c1:2d:ec:ae:6c:
2a:b8:b8:8a:84:8b:12:56:ab:ca:82:b7:eb:8d:0b:8a:0c:bb:
24:07:ee:e1:a8:2b:69:43:18:15:dd:66:c6:ae:97:1b:1d:dc:
8d:90:cd:e9:15:b2:3e:14:07:03:35:b8:9d:d0:a3:b3:7f:4a:
0e:0a:94:17:d0:2d:e5:3c:f1:8c:8c:af:36:ef:3d:67:cd:b9:
cb:6a:8f:e2:96:f6:39:1d:1f:5b:b6:2c:1a:e0:2c:9e:f0:a4:
11:82:77:54:99:22:0c:de:2b:76:e2:21:5d:d9:09:a8:9b:e4:
39:81:29:f9:fe:53:58:46:ae:70:0a:29:0f:b2:72:93:49:6a:
38:6e:a0:8e:7b:08:60:68:56:59:a0:24:28:5e:e7:ca:13:51:
f0:b1:92:e2:26:fb:e1:95:54:ea:77:33:5f:5c:de:a0:64:90:
93:e8:96:95:0e:e5:03:88:f9:d9:4c:a7:b4:d2:bc:9b:a4:d3:
46:b4:10:e1:38:df:0c:7f:c7:77:77:a3:8e:4a:54:07:d8:06:
78:a2:8f:70:ed:14:15:cb:ce:31:c1:75:e4:ea:37:50:fe:ec:
39:52:23:a7:7b:5d:29:a5:2c:6b:9d:a9:6f:92:16:84:e1:04:
91:77:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:58 2026 by rpki-client