Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/MZaqkAgL3kfhUw3zJujCWw-ozSk.roa
File: MZaqkAgL3kfhUw3zJujCWw-ozSk.roa (raw, json)
Hash identifier: XOdjdpsOMrDqT52xqAiggU2qR7Vd+PX1gy4GbLDhefU=
Subject key identifier: 31:96:AA:90:08:0B:DE:47:E1:53:0D:F3:26:E8:C2:5B:0F:A8:CD:29
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 019B6F500437DEF65BF52C54DE57A7B1DFF0
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/MZaqkAgL3kfhUw3zJujCWw-ozSk.roa
Signing time: Tue 30 Dec 2025 12:51:13 +0000
ROA not before: Tue 30 Dec 2025 12:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6789
IP address blocks: 185.166.72.0/22 maxlen: 24
193.37.134.0/24 maxlen: 24
193.37.155.0/24 maxlen: 24
193.37.224.0/24 maxlen: 24
193.37.229.0/24 maxlen: 24
194.247.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6f:50:04:37:de:f6:5b:f5:2c:54:de:57:a7:b1:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Dec 30 12:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3196aa90080bde47e1530df326e8c25b0fa8cd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:d3:58:8a:9f:79:62:1a:98:32:63:01:e4:
ae:a1:d2:33:f4:93:b2:7e:1f:26:49:06:9b:7d:bd:
6f:93:ef:3b:8f:3c:16:67:ea:23:d1:fc:2b:8f:b7:
25:26:7d:44:3f:18:f2:a5:ff:c8:49:19:39:35:8e:
e2:34:d0:19:d4:17:f6:80:ab:46:16:40:6f:5f:71:
02:b8:8e:83:ea:e0:9a:95:32:d2:7f:7f:54:e1:d8:
04:08:07:6d:4d:4a:ae:4f:25:10:fe:55:7f:aa:a5:
3a:80:f6:e5:3a:a1:a5:39:6e:80:eb:53:42:94:67:
eb:64:50:62:ba:bd:03:fb:ce:02:bc:e8:eb:81:e9:
89:51:1f:bc:37:90:16:f4:f4:22:86:d7:31:82:69:
31:ea:39:cc:81:1c:77:c1:97:48:05:03:c5:98:a4:
30:fb:b2:3e:6d:4d:4b:6a:de:48:9c:45:67:1c:60:
5c:26:2e:09:8d:d4:7b:cd:21:a6:36:01:0d:d5:23:
a2:aa:15:12:42:f0:f4:e4:32:3a:62:a1:32:ab:fe:
87:3e:db:7b:2a:a4:c6:ea:52:82:46:df:70:f6:f5:
09:15:42:20:37:84:76:7c:20:a0:e9:b5:f1:5e:50:
17:b8:9c:5a:2e:85:d0:30:e6:55:71:65:b4:69:52:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:AA:90:08:0B:DE:47:E1:53:0D:F3:26:E8:C2:5B:0F:A8:CD:29
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/MZaqkAgL3kfhUw3zJujCWw-ozSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.72.0/22
193.37.134.0/24
193.37.155.0/24
193.37.224.0/24
193.37.229.0/24
194.247.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c0:24:a2:8a:b3:e4:a2:f4:a4:02:96:92:1e:fe:9b:50:70:
5e:65:11:69:66:5b:e8:aa:13:63:e2:d7:03:e3:6f:dc:1b:28:
d2:6c:95:7e:e5:f5:a5:bb:65:08:93:47:79:52:2e:eb:53:d5:
68:64:0b:19:1c:df:72:46:98:c0:9b:13:0c:fa:af:46:7e:69:
ef:dd:91:2d:96:0a:23:e9:1c:ab:da:19:9c:9c:77:35:2f:7a:
03:9f:8f:5f:0f:02:00:ff:41:1a:c8:f9:41:5c:53:86:cd:38:
73:0e:a5:09:f7:45:4f:8e:bf:b4:3d:26:21:f0:87:cd:63:c1:
01:68:74:b3:bb:7c:9a:22:63:76:47:84:af:12:96:80:2a:1d:
55:d4:cb:2a:a2:b9:4f:df:f5:f1:69:74:83:f5:70:27:24:6a:
d3:fe:63:2e:79:47:c9:5d:04:b4:e1:35:67:89:06:5d:6b:a1:
f3:03:82:fe:6d:14:a5:be:a7:ca:f8:29:ec:66:eb:6d:c5:e8:
6f:99:18:12:c4:fd:c1:b6:48:1e:3b:d0:e5:af:fe:be:75:0a:
a9:5a:74:ef:38:9b:17:16:38:9b:34:7d:64:51:21:14:01:0a:
19:0a:04:fe:3b:5c:00:be:08:4c:8a:76:c5:96:a8:38:b5:49:
c4:ff:92:e3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZtvUAQ33vZb9SxU3lensd/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk
ZTAyNjAwHhcNMjUxMjMwMTI1MTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTk2YWE5MDA4MGJkZTQ3ZTE1MzBkZjMyNmU4YzI1YjBmYThjZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRbTWIqfeWIamDJjAeSuodIz9JOy
fh8mSQabfb1vk+87jzwWZ+oj0fwrj7clJn1EPxjypf/ISRk5NY7iNNAZ1Bf2gKtG
FkBvX3ECuI6D6uCalTLSf39U4dgECAdtTUquTyUQ/lV/qqU6gPblOqGlOW6A61NC
lGfrZFBiur0D+84CvOjrgemJUR+8N5AW9PQihtcxgmkx6jnMgRx3wZdIBQPFmKQw
+7I+bU1Lat5InEVnHGBcJi4JjdR7zSGmNgEN1SOiqhUSQvD05DI6YqEyq/6HPtt7
KqTG6lKCRt9w9vUJFUIgN4R2fCCg6bXxXlAXuJxaLoXQMOZVcWW0aVJsTQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDGWqpAIC95H4VMN8ybowlsPqM0pMB8GA1UdIwQY
MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt
YmY3MTQ0OWQ5N2RkLzEvTVphcWtBZ0wza2ZoVXczekp1akNXdy1velNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk
LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCuaZIAwQA
wSWGAwQAwSWbAwQAwSXgAwQAwSXlAwQAwvchMA0GCSqGSIb3DQEBCwUAA4IBAQBd
wCSiirPkovSkApaSHv6bUHBeZRFpZlvoqhNj4tcD42/cGyjSbJV+5fWlu2UIk0d5
Ui7rU9VoZAsZHN9yRpjAmxMM+q9Gfmnv3ZEtlgoj6Ryr2hmcnHc1L3oDn49fDwIA
/0EayPlBXFOGzThzDqUJ90VPjr+0PSYh8IfNY8EBaHSzu3yaImN2R4SvEpaAKh1V
1MsqorlP3/XxaXSD9XAnJGrT/mMueUfJXQS04TVniQZda6HzA4L+bRSlvqfK+Cns
ZuttxehvmRgSxP3BtkgeO9Dlr/6+dQqpWnTvOJsXFjibNH1kUSEUAQoZCgT+O1wA
vghMinbFlqg4tUnE/5Lj
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:51 2026 by rpki-client