Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jmX4EjY20NljjXNEZ-SS4PLfr18.roa
File: jmX4EjY20NljjXNEZ-SS4PLfr18.roa (raw, json)
Hash identifier: s0aDSIE8FOYFnhXk7a7rAbCH0QOPQn0cur+76TWKqbg=
Subject key identifier: 8E:65:F8:12:36:36:D0:D9:63:8D:73:44:67:E4:92:E0:F2:DF:AF:5F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A154938F02625FA711B1C08E258C96AB14
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jmX4EjY20NljjXNEZ-SS4PLfr18.roa
Signing time: Mon 19 Oct 2026 14:31:58 +0000
ROA not before: Mon 19 Oct 2026 14:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 109.236.49.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:93:8f:02:62:5f:a7:11:b1:c0:8e:25:8c:96:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 19 14:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e65f8123636d0d9638d734467e492e0f2dfaf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:b5:1b:e1:7e:b7:92:d5:f9:00:e3:d2:e7:
53:85:e6:e4:ae:ae:c8:a3:92:59:a4:49:e1:ef:66:
7c:55:1b:4a:f0:cf:88:f4:75:b7:f3:eb:5f:3a:c4:
38:3d:02:91:19:cb:12:cb:87:f2:a7:31:47:85:e8:
f8:b0:d7:aa:c1:24:ad:44:26:bb:99:11:5a:f7:46:
6d:92:35:09:b6:16:19:ce:3a:38:9e:0a:fc:16:fd:
d2:96:7f:66:5f:bb:0e:7e:c3:1c:d6:65:ce:53:47:
a3:b5:14:74:af:d6:9e:cf:09:a9:46:e6:13:2c:8c:
b9:3e:d2:c8:c8:da:ef:59:d6:7e:47:31:20:48:65:
4b:ec:99:85:cd:c2:01:e6:ee:89:b1:41:f4:4f:8b:
38:00:59:3a:df:2a:da:f5:4b:41:84:8d:9d:11:e2:
12:f6:7f:59:0d:9c:5a:72:80:23:ad:f8:ef:88:a3:
5f:44:25:3c:60:7d:fa:05:d7:05:50:ac:49:4a:1b:
85:4d:2d:9c:d6:c2:d5:e2:df:88:5d:03:17:30:a5:
bf:75:14:bf:c7:b8:44:a4:11:0d:c3:3c:8b:45:7b:
1b:f6:cf:52:0a:77:4d:33:eb:52:81:9a:7c:da:0d:
c4:20:25:3b:90:87:9e:16:90:3b:70:84:d5:6d:3c:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:65:F8:12:36:36:D0:D9:63:8D:73:44:67:E4:92:E0:F2:DF:AF:5F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jmX4EjY20NljjXNEZ-SS4PLfr18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
185.254.28.0/24
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:53:bf:85:76:c6:48:cc:f9:db:cf:7e:a7:ec:33:af:6a:4f:
ac:6f:80:74:19:2f:00:f3:5d:70:6a:6c:fd:a9:c7:e1:73:16:
9e:4c:a2:e5:d2:15:03:63:e0:e3:69:ee:89:7e:5d:6a:4a:ec:
5f:90:59:a8:cf:79:ef:e0:3d:64:9e:23:72:96:bc:ad:17:cc:
77:f9:8d:59:aa:9c:78:cd:e8:0f:2d:96:23:16:3b:f7:1a:46:
49:79:d9:4a:0f:06:bc:e8:53:65:00:ab:f0:ba:78:4e:d2:94:
7e:4a:7b:a0:d0:e6:f1:68:0d:9b:74:50:7b:18:5a:73:4a:f1:
27:3a:72:19:2a:c1:8f:11:99:6e:9e:e4:c4:3d:4d:3a:22:06:
be:2e:48:5e:6d:cd:af:a8:20:be:5f:9e:f2:9c:d6:98:5c:5a:
e0:91:ec:fe:82:68:9c:0e:bc:6b:92:03:c0:b8:e7:f0:40:73:
2d:a0:b7:4f:9a:0b:7f:2d:38:95:56:14:9f:6d:f6:98:e8:3f:
8e:d6:a0:66:60:30:c7:e1:a6:3e:3e:5d:b7:b2:e1:a8:f6:7f:
f1:20:38:2b:53:5c:8f:6e:68:ba:ea:05:81:ef:18:50:97:c4:
a9:da:16:68:7e:e8:be:22:cb:48:97:01:e7:3d:41:35:5b:b1:
c5:3e:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:08:00 2026 by rpki-client