Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/jD2KOK7nnCfoxA95zCDnHjpO1vk.roa
File: jD2KOK7nnCfoxA95zCDnHjpO1vk.roa (raw, json)
Hash identifier: XBEOGZS/vh8Wv0MRTNCLARz58IIyQNAWCRBGP3lCnBs=
Subject key identifier: 8C:3D:8A:38:AE:E7:9C:27:E8:C4:0F:79:CC:20:E7:1E:3A:4E:D6:F9
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 019B3C1296229601E58529791E73C1AB38C3
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/jD2KOK7nnCfoxA95zCDnHjpO1vk.roa
Signing time: Sat 20 Dec 2025 14:03:29 +0000
ROA not before: Sat 20 Dec 2025 14:03:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 93.157.106.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:12:96:22:96:01:e5:85:29:79:1e:73:c1:ab:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Dec 20 14:03:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c3d8a38aee79c27e8c40f79cc20e71e3a4ed6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:ae:9f:10:4c:11:c3:2f:32:41:9e:ba:f6:
04:0f:d7:5b:c4:23:16:b1:8c:31:d8:a5:20:08:88:
48:f7:ed:da:5a:03:ec:e6:b2:b0:3c:53:94:c1:4f:
a3:6a:a7:e2:71:08:a0:41:d4:9a:b7:f3:45:5b:2d:
1d:1f:92:90:66:56:33:9d:33:36:70:47:de:8d:61:
e5:fc:cd:7a:43:be:84:0f:04:aa:6f:c1:40:1a:f0:
38:82:a3:0d:fa:96:a3:a5:23:e6:66:72:d3:20:3f:
c6:55:34:2f:74:1b:3a:10:92:57:75:21:d4:99:7a:
f1:80:21:d6:19:f9:4c:25:39:6a:27:7b:be:8f:01:
79:a2:8f:0d:0f:4a:a8:60:40:0f:47:0f:09:9c:35:
c1:03:3b:b0:56:01:c5:e3:fa:89:29:df:bc:d4:73:
60:19:70:a7:94:1e:67:a8:0c:7f:ba:bc:97:aa:7b:
45:f0:0d:1e:9a:fe:93:8a:68:80:46:b6:0e:8c:d8:
b3:7e:5b:f6:15:71:60:fe:1f:23:bf:d3:fa:67:9c:
9e:ef:fa:76:03:f3:87:17:a7:96:55:bb:79:bc:b4:
48:51:4e:62:82:79:b6:d9:f6:61:2d:08:5c:15:a6:
9a:82:58:69:5e:4d:fd:e1:f4:b4:91:31:42:70:e3:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:8A:38:AE:E7:9C:27:E8:C4:0F:79:CC:20:E7:1E:3A:4E:D6:F9
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/jD2KOK7nnCfoxA95zCDnHjpO1vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
94.103.188.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
86:80:f1:70:ed:d6:be:04:ff:69:89:54:0d:93:9f:5d:bf:28:
1e:47:f5:d3:91:aa:89:16:5c:5a:7f:fc:28:23:70:07:db:67:
d0:5a:65:76:95:73:d7:71:1c:2b:5d:48:87:94:61:93:15:0e:
9e:d3:07:39:f4:f8:e5:42:39:01:a5:ea:c3:29:e3:76:1e:79:
b7:de:bf:03:eb:b7:6b:2e:26:27:82:fe:ba:56:c3:0d:73:08:
3c:d6:27:d9:b2:f1:5e:c1:0c:88:8f:ae:1e:09:c1:16:a0:6b:
c2:36:fb:be:7f:89:e2:49:98:73:fd:3f:55:f0:cf:94:c7:f3:
f5:61:9c:2c:61:00:15:74:41:dd:ef:44:15:c8:91:e3:32:39:
c1:62:5d:a0:de:56:da:17:8b:95:81:e9:bf:f5:5e:40:ed:f4:
85:f5:a3:f4:9b:a4:a3:ca:8c:51:17:d9:1c:f2:b6:5d:98:c3:
1c:d2:d3:0a:05:22:93:6c:57:7a:65:4f:3f:96:60:dc:71:e2:
a1:4c:50:5e:30:0c:95:40:de:80:98:0a:76:83:a5:1b:82:28:
ab:d1:33:fd:1b:d1:57:d6:8a:c1:6c:7d:7e:cb:06:bc:7f:2a:
d1:08:1d:af:1d:fd:a0:27:e4:82:0e:c6:16:ba:3e:ce:0c:aa:
08:ed:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:50:37 2026 by rpki-client