Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/m2l9i5O_B-NARmdGWcf9ojAr-_k.roa
File: m2l9i5O_B-NARmdGWcf9ojAr-_k.roa (raw, json)
Hash identifier: 6HJm2hrwxg3ZhvBhFtMJAAFP4EizKCisNVouMcXzkt8=
Subject key identifier: 9B:69:7D:8B:93:BF:07:E3:40:46:67:46:59:C7:FD:A2:30:2B:FB:F9
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 019F1351329E5B174E618F5BFE06885BF444
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/m2l9i5O_B-NARmdGWcf9ojAr-_k.roa
Signing time: Mon 29 Jun 2026 12:18:36 +0000
ROA not before: Mon 29 Jun 2026 12:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209231
IP address blocks: 2.56.140.0/22 maxlen: 24
86.110.204.0/22 maxlen: 24
89.232.174.0/23 maxlen: 24
185.161.236.0/22 maxlen: 24
185.251.36.0/24 maxlen: 24
2a09:c540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:51:32:9e:5b:17:4e:61:8f:5b:fe:06:88:5b:f4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jun 29 12:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b697d8b93bf07e34046674659c7fda2302bfbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:48:42:72:e4:b4:3e:36:19:e4:45:a3:06:
5d:60:08:24:47:0a:89:fe:ce:22:42:af:10:31:a9:
8d:a3:8c:ea:0f:94:c1:d4:51:47:8b:1a:19:9a:c9:
09:71:8b:c3:19:2f:d8:18:73:9a:70:64:4e:d7:a7:
a4:18:4d:0e:c2:7d:ff:cc:18:72:90:0e:4b:e2:6e:
3e:2c:6f:cf:52:35:83:b2:bd:68:3c:2e:fa:86:6a:
8e:f3:ca:ac:a5:67:47:b9:e0:fb:ce:ab:da:b4:d0:
be:8e:63:1a:9e:45:8b:6a:9d:b3:39:8a:cf:4c:e5:
cc:d5:1a:c5:64:15:6f:da:c0:a4:8b:07:ae:1d:80:
62:7a:13:29:1c:ac:4c:cc:ed:ac:c8:42:a8:6b:46:
65:3b:ff:0e:95:6e:87:2a:b7:50:65:f1:12:7d:7e:
6c:e2:7d:dd:69:42:8d:d0:59:02:af:2c:4d:ad:07:
9c:ad:fa:86:7c:2e:d3:d2:9e:36:07:df:fc:00:2b:
a7:1d:ec:74:3a:2d:39:a7:77:52:4c:83:6c:9b:ad:
e3:6a:57:0d:eb:17:04:9f:1c:2f:9f:76:21:b4:c6:
d3:66:ba:d4:50:f5:81:2d:9a:66:82:e5:6d:e6:c7:
56:31:11:9a:11:1d:dc:04:df:29:35:2a:47:4f:c9:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:7D:8B:93:BF:07:E3:40:46:67:46:59:C7:FD:A2:30:2B:FB:F9
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/m2l9i5O_B-NARmdGWcf9ojAr-_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
86.110.204.0/22
89.232.174.0/23
185.161.236.0/22
185.251.36.0/24
IPv6:
2a09:c540::/32
Signature Algorithm: sha256WithRSAEncryption
b5:d8:9c:65:38:01:8c:f5:a2:58:b3:d6:58:cd:84:91:c8:e1:
62:f2:90:fc:1a:9e:51:17:61:54:cc:14:e7:86:0c:ab:f5:73:
e8:9e:95:6a:94:d9:ff:67:d9:ef:56:11:c8:6b:84:85:0e:23:
26:6a:b4:66:16:60:36:c0:7b:e3:0e:17:d3:17:93:21:cb:08:
12:3f:fd:60:cd:a7:d2:5b:f9:0d:07:37:bb:51:7e:08:ab:bc:
c8:e4:b1:bf:95:1d:d1:14:b1:fd:04:db:ef:7e:36:79:5a:ee:
85:14:77:f1:5a:ad:a4:2f:1a:09:d4:8b:e0:74:64:73:bb:80:
04:c6:a7:be:db:c5:d3:b8:06:a1:b4:ab:f6:80:1b:0c:65:b9:
b1:ef:2a:2d:37:af:34:f9:61:07:c0:d6:29:b4:b3:af:4f:28:
df:cc:6a:71:42:41:a5:36:8f:bc:92:6e:2b:5c:06:e4:9c:2c:
83:17:3e:c9:94:ad:ce:98:22:35:ec:56:bd:f3:92:a7:99:e7:
81:e8:82:a7:a4:09:eb:c7:cf:85:4a:27:11:d1:70:76:47:6b:
a2:e1:67:f6:38:f1:03:a3:66:55:97:c9:78:8a:5d:83:1c:0e:
4b:ba:34:97:1d:fa:c1:d6:8d:6f:c7:9b:43:4a:f0:96:04:0d:
01:e2:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:21:29 2026 by rpki-client