Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/RxXjGiE0VKrKe6ethNytfNMyZVc.roa
File: RxXjGiE0VKrKe6ethNytfNMyZVc.roa (raw, json)
Hash identifier: +j12Qw85VJVRqHpW/xk7TkiKWNCnLP/VHru49pmnsrM=
Subject key identifier: 47:15:E3:1A:21:34:54:AA:CA:7B:A7:AD:84:DC:AD:7C:D3:32:65:57
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 019C7A4788D05EB49AFCAD67FCA91E1AF305
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/RxXjGiE0VKrKe6ethNytfNMyZVc.roa
Signing time: Fri 20 Feb 2026 09:00:34 +0000
ROA not before: Fri 20 Feb 2026 09:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15763
IP address blocks: 149.232.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:47:88:d0:5e:b4:9a:fc:ad:67:fc:a9:1e:1a:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: Feb 20 09:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4715e31a213454aaca7ba7ad84dcad7cd3326557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:fc:ab:7c:dc:50:32:fe:f0:1b:24:d6:f0:
35:3c:71:8a:dd:74:d1:d8:5f:ce:a7:69:62:f2:00:
94:90:5c:b9:82:66:98:b3:e3:d7:a8:6e:05:db:c3:
c0:25:86:69:dc:4a:ea:78:4a:2e:0c:f7:96:68:48:
1e:6d:98:7e:7d:ef:22:cc:d0:7f:0b:3f:b6:c3:8b:
a0:fe:f2:8a:a1:62:5b:36:a6:6c:ee:85:15:c2:cd:
fc:33:9a:14:28:df:27:51:80:df:31:b5:65:e6:60:
72:6e:f4:ef:30:bd:11:60:4a:9f:ae:5f:7d:5c:b0:
69:d5:7b:0b:61:94:d3:91:e0:8d:66:0c:60:6c:d0:
a9:a1:ce:a4:4f:c5:8b:af:b1:09:9c:65:b2:6e:14:
af:0d:a6:2a:3c:d5:55:b4:31:b0:56:a8:0e:ab:37:
5d:47:ca:cd:db:2e:fe:7c:55:50:e6:7a:70:22:0e:
55:5b:1e:81:d1:24:f8:f4:66:43:1b:94:f1:de:bd:
8b:37:ef:bc:94:ff:c5:88:1a:06:30:cf:72:ca:1d:
b0:f3:18:d8:e9:3e:bc:58:4c:64:a9:39:27:a5:c3:
81:3a:1b:bc:55:85:8e:53:a0:3b:2f:05:5f:51:d5:
80:99:47:64:5a:e9:47:7b:50:6f:d1:74:8c:00:0b:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:E3:1A:21:34:54:AA:CA:7B:A7:AD:84:DC:AD:7C:D3:32:65:57
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/RxXjGiE0VKrKe6ethNytfNMyZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.0.0/20
Signature Algorithm: sha256WithRSAEncryption
92:da:25:1f:7b:ef:c3:a1:c9:01:b6:5f:c9:6a:58:ec:25:f2:
00:bd:55:d4:51:77:a6:c9:f5:95:f8:3e:f2:9a:ca:96:79:5f:
b5:d2:86:09:aa:40:84:aa:62:33:61:ce:7e:0b:02:f3:33:a2:
6e:52:4f:29:98:e3:51:cc:e0:45:59:b3:13:4c:fa:e7:57:93:
55:26:c9:53:ec:8c:a5:a7:4c:35:96:18:33:88:a2:d0:a0:5d:
6e:2b:8b:6e:7c:b7:f9:41:99:a2:3c:1f:3d:f7:9a:7b:d7:71:
cf:92:2f:71:65:b5:83:cd:9b:7e:1b:3e:7e:7f:60:28:61:23:
ed:b8:cb:86:ed:2a:6b:d5:5c:b6:b6:88:8e:f6:21:b3:2c:02:
83:0f:6f:8b:d3:48:52:b8:c3:b3:ae:9d:88:34:f8:a9:aa:01:
1a:01:5d:cb:ae:bb:11:9a:48:83:3f:2b:2d:e3:13:56:55:ac:
14:7d:98:3a:55:85:49:ae:3f:04:0d:57:f3:ce:08:40:d8:5e:
e8:bb:06:c3:1b:83:34:bd:b0:da:4d:9c:e6:40:62:bf:12:ec:
09:d8:23:e7:b7:21:d9:08:b8:8c:4a:ce:d9:16:f1:34:ef:11:
bc:b4:24:60:0f:67:cf:8a:04:96:e0:84:7d:1d:02:f7:d6:43:
cd:96:01:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZx6R4jQXrSa/K1n/KkeGvMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5
N2MxYTMwHhcNMjYwMjIwMDkwMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzE1ZTMxYTIxMzQ1NGFhY2E3YmE3YWQ4NGRjYWQ3Y2QzMzI2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/8q3zcUDL+8Bsk1vA1PHGK3XTR
2F/Op2li8gCUkFy5gmaYs+PXqG4F28PAJYZp3ErqeEouDPeWaEgebZh+fe8izNB/
Cz+2w4ug/vKKoWJbNqZs7oUVws38M5oUKN8nUYDfMbVl5mBybvTvML0RYEqfrl99
XLBp1XsLYZTTkeCNZgxgbNCpoc6kT8WLr7EJnGWybhSvDaYqPNVVtDGwVqgOqzdd
R8rN2y7+fFVQ5npwIg5VWx6B0ST49GZDG5Tx3r2LN++8lP/FiBoGMM9yyh2w8xjY
6T68WExkqTknpcOBOhu8VYWOU6A7LwVfUdWAmUdkWulHe1Bv0XSMAAtt0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEcV4xohNFSqynunrYTcrXzTMmVXMB8GA1UdIwQY
MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvUnhYakdpRTBWS3JLZTZldGhOeXRmTk15WlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElegAMA0G
CSqGSIb3DQEBCwUAA4IBAQCS2iUfe+/DockBtl/JaljsJfIAvVXUUXemyfWV+D7y
msqWeV+10oYJqkCEqmIzYc5+CwLzM6JuUk8pmONRzOBFWbMTTPrnV5NVJslT7Iyl
p0w1lhgziKLQoF1uK4tufLf5QZmiPB8995p713HPki9xZbWDzZt+Gz5+f2AoYSPt
uMuG7Spr1Vy2toiO9iGzLAKDD2+L00hSuMOzrp2INPipqgEaAV3LrrsRmkiDPyst
4xNWVawUfZg6VYVJrj8EDVfzzghA2F7ouwbDG4M0vbDaTZzmQGK/EuwJ2CPntyHZ
CLiMSs7ZFvE07xG8tCRgD2fPigSW4IR9HQL31kPNlgHM
-----END CERTIFICATE-----
Generated at Sat May 16 18:37:09 2026 by rpki-client