Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/2KkdgWDAF4hzaiY1ClltnwHEdhg.roa
File: 2KkdgWDAF4hzaiY1ClltnwHEdhg.roa (raw, json)
Hash identifier: f4GrmKnz64SocslZcE+7ZEH4/5X2b7wq9TkKjq6HVmc=
Subject key identifier: D8:A9:1D:81:60:C0:17:88:73:6A:26:35:0A:59:6D:9F:01:C4:76:18
Certificate issuer: /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial: 019D6D64F06933800A93FD90F4BDA99F819B
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/2KkdgWDAF4hzaiY1ClltnwHEdhg.roa
Signing time: Wed 08 Apr 2026 14:00:24 +0000
ROA not before: Wed 08 Apr 2026 14:00:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39889
IP address blocks: 185.173.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:64:f0:69:33:80:0a:93:fd:90:f4:bd:a9:9f:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Validity
Not Before: Apr 8 14:00:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8a91d8160c01788736a26350a596d9f01c47618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:c4:69:20:0b:bd:96:2c:30:50:da:bd:78:
03:4a:c7:e1:1a:9e:ba:bf:38:e8:28:56:f8:37:ae:
e0:50:7e:7e:d7:78:e0:77:4c:b6:b5:a4:6c:85:dc:
67:08:c0:eb:27:29:6c:54:ed:d5:08:3f:89:41:38:
98:f9:cf:d7:c4:48:ae:43:53:dc:be:aa:dd:83:88:
ac:08:2f:54:22:45:ad:1e:c8:85:a4:e2:bb:55:89:
b1:28:16:46:48:e8:b4:30:64:04:55:8a:f3:2c:db:
f4:33:3b:0f:08:44:d2:57:53:35:9f:c5:ac:a5:c8:
5a:83:aa:fd:b3:eb:63:4d:2c:3f:72:6b:39:4b:a0:
98:14:f1:ce:72:dc:7d:c0:6a:63:f9:ff:71:3a:17:
b2:80:bc:2f:c3:5b:ce:82:19:cc:f9:fc:fe:de:57:
fa:27:c0:d2:3b:36:fd:dd:f7:1c:82:0e:f8:a8:b7:
68:84:05:fa:f2:ad:11:51:28:06:22:d4:02:21:00:
13:96:a4:96:db:18:ca:b4:89:e5:02:ae:d5:d0:0d:
0b:02:21:25:71:74:d8:c6:91:12:81:47:72:eb:b1:
b7:fc:3f:2d:65:39:94:70:9c:d3:75:ef:96:8e:bb:
e2:07:9c:d9:9b:bb:70:ee:dd:a1:cd:f6:16:57:90:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:1D:81:60:C0:17:88:73:6A:26:35:0A:59:6D:9F:01:C4:76:18
X509v3 Authority Key Identifier:
keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/2KkdgWDAF4hzaiY1ClltnwHEdhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:fe:42:a2:92:23:1e:97:07:26:41:e0:32:9b:d1:8a:8e:f1:
33:b3:14:62:64:bb:e8:56:e7:29:cd:02:36:53:fc:d6:0f:e6:
7c:5d:a8:d6:54:2a:fe:15:8d:e5:0a:41:6e:76:a1:69:c4:42:
98:ef:83:95:47:f3:8c:63:1f:7b:8c:5f:3a:69:f4:5e:f4:fb:
7a:ad:28:7e:dd:7c:f9:b4:b6:e7:1c:b5:9f:68:28:a1:94:b8:
37:59:3f:69:f4:cf:45:ab:f6:56:23:dc:63:3f:bd:0c:d3:b7:
3d:39:c1:11:d2:c2:04:f8:81:d5:57:07:cf:94:2a:80:09:e3:
c7:23:b8:59:aa:27:48:da:5e:a9:f2:fb:09:50:1e:01:19:e2:
0f:9d:d6:1b:b7:35:a8:e2:3a:2c:14:49:d5:51:7a:4b:0f:40:
1a:d2:0c:e1:23:f8:79:24:3b:92:e6:51:54:21:01:ab:bb:90:
83:39:54:4e:d6:76:40:d2:13:d6:2c:63:87:3c:68:b8:8a:07:
42:fe:c8:c1:7e:c0:da:10:63:51:7f:ff:f5:36:12:b8:b6:51:
e5:eb:dc:85:f8:d2:06:0a:9a:d7:db:a6:84:6b:21:51:e4:51:
49:dc:be:e6:0b:32:9a:85:36:26:e7:3a:80:67:11:a8:b8:fe:
21:4a:e7:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1tZPBpM4AKk/2Q9L2pn4GbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMThjYTljOGIzZDdkZTZhYWNjM2QxNDJjNzdkZWY2NWQ5
ZDlhMTMwHhcNMjYwNDA4MTQwMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGE5MWQ4MTYwYzAxNzg4NzM2YTI2MzUwYTU5NmQ5ZjAxYzQ3NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03LEaSALvZYsMFDavXgDSsfhGp66
vzjoKFb4N67gUH5+13jgd0y2taRshdxnCMDrJylsVO3VCD+JQTiY+c/XxEiuQ1Pc
vqrdg4isCC9UIkWtHsiFpOK7VYmxKBZGSOi0MGQEVYrzLNv0MzsPCETSV1M1n8Ws
pchag6r9s+tjTSw/cms5S6CYFPHOctx9wGpj+f9xOheygLwvw1vOghnM+fz+3lf6
J8DSOzb93fccgg74qLdohAX68q0RUSgGItQCIQATlqSW2xjKtInlAq7V0A0LAiEl
cXTYxpESgUdy67G3/D8tZTmUcJzTde+WjrviB5zZm7tw7t2hzfYWV5C64QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNipHYFgwBeIc2omNQpZbZ8BxHYYMB8GA1UdIwQY
MBaAFA0YypyLPX3mqsw9FCx33vZdnZoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYt
N2Y1MDQyNzFjZjkwLzEvMktrZGdXREFGNGh6YWlZMUNsbHRud0hFZGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYtN2Y1MDQyNzFjZjkw
LzEvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua3cMA0G
CSqGSIb3DQEBCwUAA4IBAQDG/kKikiMelwcmQeAym9GKjvEzsxRiZLvoVucpzQI2
U/zWD+Z8XajWVCr+FY3lCkFudqFpxEKY74OVR/OMYx97jF86afRe9Pt6rSh+3Xz5
tLbnHLWfaCihlLg3WT9p9M9Fq/ZWI9xjP70M07c9OcER0sIE+IHVVwfPlCqACePH
I7hZqidI2l6p8vsJUB4BGeIPndYbtzWo4josFEnVUXpLD0Aa0gzhI/h5JDuS5lFU
IQGru5CDOVRO1nZA0hPWLGOHPGi4igdC/sjBfsDaEGNRf//1NhK4tlHl69yF+NIG
CprX26aEayFR5FFJ3L7mCzKahTYm5zqAZxGouP4hSuep
-----END CERTIFICATE-----
Generated at Thu Apr 30 00:59:04 2026 by rpki-client