Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/9RoWTjSKZacFHu0IHqaQe2lp1XQ.roa
File: 9RoWTjSKZacFHu0IHqaQe2lp1XQ.roa (raw, json)
Hash identifier: bwo5scBTIQZnQ6wkP0kxp26aYUwL1dvI/e+7fM/hnSg=
Subject key identifier: F5:1A:16:4E:34:8A:65:A7:05:1E:ED:08:1E:A6:90:7B:69:69:D5:74
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 019B791030062595D79507C97F54ADD4CD7C
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/9RoWTjSKZacFHu0IHqaQe2lp1XQ.roa
Signing time: Thu 01 Jan 2026 10:17:42 +0000
ROA not before: Thu 01 Jan 2026 10:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 185.188.30.0/24 maxlen: 24
2a12:d940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:30:06:25:95:d7:95:07:c9:7f:54:ad:d4:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Jan 1 10:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51a164e348a65a7051eed081ea6907b6969d574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:d9:6f:40:bd:e7:a1:dc:fb:2e:38:d3:5c:
d2:13:ca:f0:3c:ef:c2:af:77:ff:75:8e:5a:c0:f2:
3b:7d:22:5a:9d:aa:e1:d8:5a:d5:7b:f1:bb:de:ce:
35:32:c2:4d:f3:7b:13:d0:12:86:0a:7c:ca:83:5e:
e8:60:f9:e1:b8:93:a1:70:eb:87:b9:0c:58:b6:9f:
ae:c7:98:0c:2f:a7:b6:ed:b9:64:83:e5:c3:39:86:
73:50:80:e8:5c:79:52:74:f2:96:29:82:44:2f:ad:
93:2f:97:37:bd:78:78:05:8c:c6:f7:64:ce:10:54:
29:3b:8a:9d:f7:f7:d1:13:cc:0b:9c:6a:1a:aa:72:
ff:7d:1c:52:83:2c:19:3d:31:93:df:6f:e5:9d:a7:
e1:6a:b4:72:30:b6:af:0a:78:80:d6:7b:2b:09:ed:
7d:94:7b:73:c0:a7:24:b4:e7:37:ee:2d:34:b8:d7:
dd:d4:ed:e0:94:06:7c:7f:a6:d7:d5:dc:52:13:9f:
76:0e:0b:a4:33:2f:79:6f:77:dc:e9:44:c2:02:e7:
44:ba:97:61:22:f3:da:ff:98:e2:87:74:4c:8e:d9:
4b:06:7c:d4:82:d4:7c:d9:ff:65:c2:55:eb:31:e5:
10:e2:7a:07:a9:3a:91:92:68:86:8f:40:dc:be:9d:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:16:4E:34:8A:65:A7:05:1E:ED:08:1E:A6:90:7B:69:69:D5:74
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/9RoWTjSKZacFHu0IHqaQe2lp1XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.30.0/24
IPv6:
2a12:d940::/29
Signature Algorithm: sha256WithRSAEncryption
af:e3:9f:ab:52:63:0d:67:38:b4:44:1a:8c:5f:65:06:c9:b4:
4f:c5:db:66:a9:ff:19:a3:ea:c4:33:e0:62:a0:9a:68:3d:07:
a6:96:4c:a0:17:90:0b:fd:0b:46:68:b3:b6:12:8e:47:69:e3:
24:98:49:17:3b:b7:70:b6:a7:cd:e1:a9:c9:dd:76:53:25:85:
c0:8f:e6:26:7b:07:45:20:13:84:f3:ba:73:43:27:10:45:4c:
ec:a6:b1:7d:27:d7:ba:b4:20:cd:37:b3:96:19:77:4d:f3:7f:
be:60:b3:02:af:41:24:03:06:2a:87:71:1b:89:f2:04:bb:31:
fe:77:86:d8:ba:30:ff:7f:72:49:0e:97:f3:f3:1d:53:61:6d:
a6:8f:c8:f8:b6:ed:d9:5b:42:e5:76:7d:4c:ca:41:dd:14:38:
37:fc:3a:2b:9e:e0:9c:9c:51:2e:ab:54:7d:2e:18:71:c3:d4:
3f:0b:64:c4:31:97:66:a6:61:20:8f:48:19:dc:75:64:58:43:
f8:8f:b8:35:96:79:40:d2:70:c9:a9:71:09:bc:9c:22:f5:a0:
65:a5:95:60:82:7f:22:d2:f3:4c:a3:7e:b5:90:87:4c:96:a2:
54:bb:f0:8f:76:49:2a:6f:ab:a6:0d:d2:1a:2b:ac:d8:1f:71:
88:21:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:25:41 2026 by rpki-client