Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3232203d3e20323035313933.roa
File: 3138352e3230322e3134342e302f32322d3232203d3e20323035313933.roa (raw, json)
Hash identifier: 8LR54SRdn1B2k1ZPpEntBtuN7UKWFg2Y07sPAcvEO00=
Subject key identifier: CA:73:A6:BE:A3:82:F8:66:D3:DC:9D:B7:5D:8D:97:C8:4D:BB:43:F2
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 1A5DE208219EAAC9A645C3985E90A1B9789DBABC
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3232203d3e20323035313933.roa
Signing time: Tue 23 Dec 2025 12:21:41 +0000
ROA not before: Tue 23 Dec 2025 12:16:41 +0000
ROA not after: Tue 22 Dec 2026 12:21:41 +0000
asID: 205193
IP address blocks: 185.202.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5d:e2:08:21:9e:aa:c9:a6:45:c3:98:5e:90:a1:b9:78:9d:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Dec 23 12:16:41 2025 GMT
Not After : Dec 22 12:21:41 2026 GMT
Subject: CN=CA73A6BEA382F866D3DC9DB75D8D97C84DBB43F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:6e:8f:4e:70:d3:40:b6:40:2c:70:1e:b2:
7e:0d:c6:d2:97:d8:84:e6:ac:0e:eb:b7:bd:77:c1:
53:f8:32:f9:e4:75:ac:a4:fe:37:21:b8:07:bd:e3:
5e:91:66:59:79:7f:27:bc:0a:29:12:0b:5d:95:d6:
7c:c1:7c:a9:58:6b:98:f4:39:6c:3f:e3:71:45:39:
c6:67:af:6e:25:9d:9e:5f:92:45:23:b9:14:c3:3c:
bf:d2:42:29:61:5d:ec:69:4e:c4:18:5a:98:8e:d9:
72:7d:6e:ca:fe:ab:46:2d:00:db:53:57:b9:03:ca:
93:86:e5:21:dc:5f:41:14:50:72:8b:f7:6d:83:ec:
50:d6:8b:de:1f:63:97:3c:b8:fa:40:16:2f:4c:6e:
96:40:aa:da:e3:72:34:07:92:12:5d:60:ff:23:fb:
b8:00:84:a8:8d:e7:99:9b:10:7e:38:f8:5d:9a:26:
3e:90:63:c5:75:d3:e0:10:48:a5:bf:64:69:e5:97:
90:58:1d:3a:79:d3:c3:68:74:5a:9e:13:47:50:ef:
28:bd:0d:84:03:c5:16:38:a3:20:47:6f:ec:9c:2c:
91:f0:88:1e:ad:7c:8c:ac:61:8e:80:cb:cc:77:bf:
fd:77:c9:33:bd:80:48:ae:73:1d:b9:06:67:d9:53:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:A6:BE:A3:82:F8:66:D3:DC:9D:B7:5D:8D:97:C8:4D:BB:43:F2
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3232203d3e20323035313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:9b:77:7e:15:65:f5:e2:26:dd:90:28:a6:07:8b:52:8c:20:
52:c3:dc:1b:b4:fd:14:02:7a:78:40:7e:bb:b6:22:58:d0:e2:
b0:ce:e0:c6:50:81:f1:bb:b5:15:95:4e:80:4b:c7:59:6e:53:
2d:0f:49:19:fc:d8:95:54:7d:45:5e:b0:2c:1b:9f:21:e0:dc:
da:e6:2f:ae:62:18:52:b1:ee:16:ca:3c:2f:9f:b3:62:18:4d:
54:1f:91:3c:85:ed:ba:ed:71:35:ed:6d:8b:90:ad:c3:36:59:
e7:b4:4a:84:8d:41:c2:85:59:6d:78:9f:75:74:97:cc:2b:d4:
e5:fa:58:dd:18:1d:0f:5b:5a:2b:7e:07:17:fd:aa:95:0d:90:
7d:ad:f3:66:f5:77:a0:dd:b8:8b:2a:84:90:f7:fb:65:ca:0a:
e8:66:2f:45:f7:ae:e4:99:95:c8:8a:a8:7d:54:18:ec:15:fb:
1b:dd:98:56:09:ae:ba:7f:af:26:37:b8:65:98:dc:47:e5:64:
a2:3d:6c:8c:ed:68:35:87:c8:58:17:87:25:fa:07:05:49:88:
8f:d6:66:e6:2d:fe:1b:eb:f9:de:69:b5:63:db:a1:55:42:a6:
ce:09:a4:36:cf:83:c2:6d:be:c4:b0:b9:15:7e:bc:fb:e6:a7:
3e:25:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:43 2026 by rpki-client