Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/wGVnySr1Vxwk8Vwf3WbMSOnEqgM.roa
File: wGVnySr1Vxwk8Vwf3WbMSOnEqgM.roa (raw, json)
Hash identifier: tr4A1R5NSOzAzWj0Fv3RGP+WkvEKb92Ld8vYKBm40Bg=
Subject key identifier: C0:65:67:C9:2A:F5:57:1C:24:F1:5C:1F:DD:66:CC:48:E9:C4:AA:03
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 019B5041D28A2EEDB5F7C8FF092EC5DE7D41
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/wGVnySr1Vxwk8Vwf3WbMSOnEqgM.roa
Signing time: Wed 24 Dec 2025 12:07:29 +0000
ROA not before: Wed 24 Dec 2025 12:07:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48660
IP address blocks: 78.111.111.0/24 maxlen: 24
185.139.5.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:50:41:d2:8a:2e:ed:b5:f7:c8:ff:09:2e:c5:de:7d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Dec 24 12:07:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c06567c92af5571c24f15c1fdd66cc48e9c4aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:72:47:8c:a4:71:2d:58:0b:18:22:0b:92:
18:4f:ee:54:1b:c9:4d:0f:c4:a3:3b:2f:d0:eb:dc:
2d:1e:54:da:86:18:93:60:c9:9b:58:26:9e:e9:eb:
63:26:1d:2a:b2:d8:5e:7b:6d:59:c0:1b:24:8d:af:
7b:2e:24:a9:94:31:23:2c:f2:77:77:92:9d:af:39:
24:b9:49:05:1c:f0:6f:9f:d8:f3:f4:ea:17:09:ee:
ae:e0:25:4e:05:08:bb:ec:a3:65:04:ce:9c:d7:46:
ac:84:7e:8c:93:d2:c6:f6:42:73:33:96:73:a4:79:
10:07:02:6f:86:0d:e9:99:8a:40:7d:1b:e3:25:57:
3f:b4:20:e7:df:f1:9d:34:1a:28:52:d7:0f:9d:3b:
ae:54:67:5f:7e:1e:d7:86:a6:3b:59:05:24:5d:c1:
5e:4a:06:ff:36:35:32:16:3e:40:15:5f:b6:ae:4c:
fe:27:89:63:b7:35:b9:18:86:86:a1:a0:69:cc:c2:
1c:24:ea:44:bc:40:ab:95:3d:58:0b:30:5b:e7:6c:
a5:29:ee:26:4b:86:76:14:0e:23:ed:ac:95:22:f0:
5e:0d:85:3e:f8:62:5d:78:84:03:54:50:98:a9:e9:
db:c0:39:03:1e:74:5b:53:af:58:9e:49:b3:34:d6:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:67:C9:2A:F5:57:1C:24:F1:5C:1F:DD:66:CC:48:E9:C4:AA:03
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/wGVnySr1Vxwk8Vwf3WbMSOnEqgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
185.139.5.0/24
217.195.202.0/24
217.195.207.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3b:5f:eb:3e:1d:f6:79:26:9d:aa:0a:10:e9:c5:b6:8a:6e:
db:7e:f9:67:c4:a1:05:1f:5b:22:a6:24:5b:83:a8:8b:3a:b0:
9c:4c:a1:15:19:ed:19:57:cc:40:23:f2:9c:50:da:c8:9a:d2:
1f:be:81:1d:07:2c:e8:cf:ee:dc:2b:5e:bb:11:a6:d9:ab:ef:
99:db:9d:12:b3:c7:64:10:78:3a:32:1e:f3:1d:f2:8b:50:b1:
69:ea:bc:15:3e:9e:11:a3:46:fc:0e:54:0a:3f:aa:93:b9:52:
d4:13:da:ba:fd:36:de:e1:8f:ab:45:7c:db:47:0f:0e:45:71:
0b:b6:b1:73:7c:8a:d1:fe:24:2d:9f:36:cb:ce:39:48:1b:c8:
1e:11:0d:a2:a8:37:43:af:c8:69:2d:46:de:56:93:a5:04:79:
1d:6a:72:2d:93:0c:f9:3d:68:fd:bf:8b:24:70:df:e3:4d:53:
52:8c:73:00:30:42:6e:17:a2:38:45:3f:0a:aa:63:0c:79:fb:
d1:4d:e9:6e:37:da:d4:d4:4b:48:a6:b6:fb:80:f2:3a:4b:16:
8d:13:44:7c:14:df:8d:32:70:d0:0f:3d:71:bc:d5:4e:b8:8f:
6a:47:40:4e:e2:4d:48:6b:93:6b:f5:a1:87:9c:f3:b0:e8:70:
59:b8:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:44:19 2026 by rpki-client