Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/k8oJ6ae85Gbz_BhgEqIgdkJrOEU.roa
File: k8oJ6ae85Gbz_BhgEqIgdkJrOEU.roa (raw, json)
Hash identifier: SBS0vTpksahLkzNEIgAILgLeMygWN79Rn7apJ6806Po=
Subject key identifier: 93:CA:09:E9:A7:BC:E4:66:F3:FC:18:60:12:A2:20:76:42:6B:38:45
Certificate issuer: /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial: 019D6628D87B3F02980D488811195AD4A6F9
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/k8oJ6ae85Gbz_BhgEqIgdkJrOEU.roa
Signing time: Tue 07 Apr 2026 04:17:26 +0000
ROA not before: Tue 07 Apr 2026 04:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 185.130.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:28:d8:7b:3f:02:98:0d:48:88:11:19:5a:d4:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Validity
Not Before: Apr 7 04:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93ca09e9a7bce466f3fc186012a22076426b3845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:eb:e0:d6:2c:c0:cd:30:df:b4:f3:ee:04:
a1:6d:54:9c:90:24:ed:50:2e:20:fc:5e:01:8d:69:
49:6c:32:04:1d:80:8f:15:33:15:0b:26:ac:06:d8:
81:ba:0e:0d:4a:9c:88:13:a3:a6:67:b0:75:5c:fb:
1a:7b:85:01:aa:4e:b2:5f:66:fb:9a:dd:75:8c:01:
98:68:4e:58:6d:11:14:1b:69:e1:00:58:ae:34:f5:
f2:7f:ab:51:b8:3e:f9:97:7c:95:33:fe:f7:9c:9c:
31:ed:22:cf:31:76:32:89:0e:c1:95:16:03:b7:4c:
98:1d:d1:0e:9c:27:a4:b9:dc:85:0d:9b:38:43:60:
94:ab:8c:72:e8:74:5f:6a:ba:6a:c9:10:61:fd:d5:
9f:22:ac:2d:f3:ab:d8:d9:d6:1f:4c:c5:97:1b:92:
b1:6b:95:93:c7:ac:3d:93:5e:48:55:2e:c3:81:8a:
54:9e:e3:34:6d:b3:6d:b4:23:bb:8a:fc:37:4d:c8:
d2:d9:ff:51:d2:18:ce:6d:05:e7:2f:d0:57:54:5a:
0c:97:58:ed:6d:98:2a:a3:15:22:33:41:39:b1:fa:
9b:f9:b5:c1:cb:d8:5e:f0:55:dc:90:0b:2f:32:87:
d6:32:3d:1a:22:fc:3b:83:67:ad:c6:a0:a0:e5:9f:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:09:E9:A7:BC:E4:66:F3:FC:18:60:12:A2:20:76:42:6B:38:45
X509v3 Authority Key Identifier:
keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/k8oJ6ae85Gbz_BhgEqIgdkJrOEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6c:19:02:dc:0d:13:51:1c:de:3f:fd:be:dc:20:c9:02:1f:
1e:81:5c:82:a1:9b:dc:78:52:c7:37:04:d4:08:2c:08:e8:94:
a2:f7:da:a3:a9:9d:f6:1d:58:f4:25:51:64:b2:85:cf:be:3a:
04:53:29:38:a8:58:0b:8c:b3:56:38:83:7c:39:3a:1e:4a:74:
a0:29:d0:a0:15:43:08:5b:bd:46:da:dd:d4:24:b7:38:32:e0:
ac:9d:93:92:16:70:ed:77:69:ae:91:bf:a8:57:28:cd:d3:9e:
9d:3b:37:d6:b7:5a:51:d0:25:bc:53:92:d7:fc:3b:42:08:9c:
ac:59:f6:cc:c6:78:dc:17:f1:99:79:46:fc:6a:69:7f:1a:02:
63:f9:81:2c:9e:fe:b6:56:30:da:7a:d1:2b:9d:f6:4c:bc:04:
33:d1:e7:aa:3e:fa:05:70:46:e1:da:7b:bc:f2:d9:6a:8a:61:
41:2d:45:6d:f8:33:03:e2:1d:88:ce:20:19:5f:ec:be:e3:aa:
d0:14:cd:3d:b8:73:26:fe:b8:29:f9:f6:b4:8c:b4:20:48:0f:
ee:99:f0:1d:ae:73:eb:87:67:bb:b4:0d:c2:32:4e:c8:72:63:
b9:ed:b1:ce:6a:18:7c:dd:ff:8a:62:87:e8:b6:3a:24:fb:9f:
39:cc:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:12 2026 by rpki-client