Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/QlfRJ9ZCkpJ9M2yA8FS9E7Xg5Ss.roa
File: QlfRJ9ZCkpJ9M2yA8FS9E7Xg5Ss.roa (raw, json)
Hash identifier: u+jCrKFpn0oJ20V+9k4+0daWyqyxT8hatjGAQTsS7ho=
Subject key identifier: 42:57:D1:27:D6:42:92:92:7D:33:6C:80:F0:54:BD:13:B5:E0:E5:2B
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E386806987B2EB9EB1E4AE8E80A936E
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/QlfRJ9ZCkpJ9M2yA8FS9E7Xg5Ss.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 185.91.127.0/24 maxlen: 24
2a12:de40::/29 maxlen: 29
2a12:de40::/32 maxlen: 32
2a12:de40:42::/48 maxlen: 48
2a12:de43::/32 maxlen: 32
2a12:de44::/32 maxlen: 32
2a12:de45::/32 maxlen: 32
2a12:de46::/32 maxlen: 32
2a12:de47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:68:06:98:7b:2e:b9:eb:1e:4a:e8:e8:0a:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4257d127d64292927d336c80f054bd13b5e0e52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:6c:d1:25:e2:33:27:c4:a8:dc:f8:79:43:
58:5c:59:c3:0f:72:29:83:54:34:0a:17:68:7f:4d:
a3:19:57:66:5d:d3:50:fa:5b:19:b3:74:01:5f:66:
ee:5e:24:29:b2:26:42:77:9d:c0:c0:b2:cb:95:df:
0a:0a:75:17:dc:0f:78:e8:fb:74:98:5e:26:9b:6b:
95:50:99:6d:1e:89:42:3e:ad:0e:73:a5:d8:b9:19:
cd:24:c7:39:dc:2c:c8:a0:53:3a:58:9b:97:0e:b4:
bf:4f:05:12:47:78:65:1c:33:84:6e:8e:60:0d:6f:
cd:88:17:ce:ee:b3:65:e7:80:af:1d:6c:d5:d5:ef:
78:bb:8b:fb:9b:99:75:e1:6c:9f:6e:6a:05:80:c1:
0e:fd:e0:18:3f:91:bd:1a:92:3b:da:b7:da:74:a2:
4a:0c:c5:97:72:5c:14:d9:d3:ac:27:d9:3c:c3:a8:
7b:d3:6a:1c:50:63:57:cd:e1:ec:a2:de:8b:32:aa:
4a:31:22:24:4d:bf:a9:8a:a2:d3:86:1c:b4:97:7a:
5c:9f:e0:ca:88:38:ba:61:c1:b2:4f:f5:91:37:a1:
15:73:f2:6c:35:bd:7e:34:a8:68:16:f7:a6:5b:67:
eb:f4:d7:bc:21:cc:fc:99:5d:4c:59:5a:cb:6d:ab:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:D1:27:D6:42:92:92:7D:33:6C:80:F0:54:BD:13:B5:E0:E5:2B
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/QlfRJ9ZCkpJ9M2yA8FS9E7Xg5Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.127.0/24
IPv6:
2a12:de40::/29
Signature Algorithm: sha256WithRSAEncryption
5d:3f:b4:78:7c:2e:c9:cf:ad:07:50:20:72:26:06:dc:63:32:
c0:04:45:75:9b:fe:4f:f0:46:ee:f0:8e:05:14:d6:02:cd:f8:
2a:e0:bc:04:32:32:aa:b7:97:4e:68:59:0e:32:e3:f8:c4:ea:
9a:9b:78:5d:45:77:32:28:a2:68:6b:17:10:34:50:4e:b4:31:
28:18:e9:bb:33:49:ba:3b:7e:f7:fb:82:b9:ea:46:76:63:cb:
1e:8f:fe:b3:1a:cb:43:a9:fa:46:80:7c:b3:17:8a:c0:13:48:
97:c4:42:36:f2:82:dc:a5:72:cf:6f:ac:f1:f0:a0:9c:27:49:
ed:6b:88:d0:7f:a7:da:44:4c:9f:17:c6:a6:84:01:40:29:30:
7b:a2:20:4a:ad:1d:bc:62:51:73:5f:36:4d:07:19:1e:59:6a:
b0:79:83:4d:30:e3:5e:b3:44:87:ab:80:41:c5:f2:46:47:5c:
f6:43:6a:32:c0:57:67:85:7b:50:8f:4e:19:68:dc:55:52:fa:
4b:ba:5b:3b:25:a9:5b:b6:83:8a:03:96:b3:1e:05:ca:f7:d5:
92:05:4d:ff:58:c7:9e:85:b9:1d:fa:50:c6:70:87:d4:6d:81:
b6:bd:a9:74:de:e1:7d:08:b6:94:f3:8a:cb:77:0b:9f:a7:94:
23:15:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:57 2026 by rpki-client