Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1IH9WSXaG3pl-7G37RslQeds738.roa
File: 1IH9WSXaG3pl-7G37RslQeds738.roa (raw, json)
Hash identifier: 3mip7Be+tWbcX+vZvav/g7WBcPXKv/QoLhTf7nIA1gk=
Subject key identifier: D4:81:FD:59:25:DA:1B:7A:65:FB:B1:B7:ED:1B:25:41:E7:6C:EF:7F
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019F18CCD0B7BA0B29618C9E864BB45F7796
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1IH9WSXaG3pl-7G37RslQeds738.roa
Signing time: Tue 30 Jun 2026 13:51:43 +0000
ROA not before: Tue 30 Jun 2026 13:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50214
IP address blocks: 95.181.154.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
185.12.124.0/24 maxlen: 24
185.12.125.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
2a11:f840::/32 maxlen: 32
2a11:f841::/32 maxlen: 32
2a11:f842::/32 maxlen: 32
2a11:f843::/32 maxlen: 32
2a11:f844::/32 maxlen: 32
2a11:f845::/32 maxlen: 32
2a11:f846::/32 maxlen: 32
2a11:f847::/32 maxlen: 32
2a12:9c0::/29 maxlen: 29
2a12:2d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:cc:d0:b7:ba:0b:29:61:8c:9e:86:4b:b4:5f:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jun 30 13:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d481fd5925da1b7a65fbb1b7ed1b2541e76cef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:79:a9:2b:e0:2a:f6:bf:d5:f8:7a:cb:4a:
d3:f3:63:6e:e5:56:da:30:24:19:4e:5e:e7:fa:f1:
0e:d1:d5:7c:95:0d:a8:4e:a3:fe:36:ab:c0:49:a4:
5f:59:e5:c1:5b:d0:e5:be:e9:19:77:64:7d:ab:dd:
d7:0a:92:0b:03:e9:5d:de:57:bc:aa:99:02:c5:18:
d5:b5:12:46:73:30:2d:5f:cc:3f:14:7d:59:80:f6:
f8:0b:58:85:04:af:96:c7:10:26:ef:40:3b:f5:90:
dd:90:8d:75:1e:67:71:03:a2:61:7a:64:ac:bd:ec:
51:ef:b8:3f:28:84:41:9f:e6:dd:e7:9c:76:48:a3:
f8:3f:c1:4e:ed:2a:df:59:09:d2:ab:14:44:ab:c1:
a9:a0:71:81:a6:af:48:83:16:8c:ea:2b:ea:b8:be:
73:88:45:c6:40:a8:6e:96:4c:38:c2:9e:0e:bf:5b:
51:81:2f:a5:a5:53:33:85:93:91:c1:c4:df:5c:6e:
c6:66:fa:2d:71:d5:03:dc:76:a2:4a:ec:af:d5:c8:
4b:b3:b5:65:b0:60:0e:96:08:34:0c:68:29:b0:df:
47:a0:e6:e5:e6:d5:f4:43:d0:b0:13:65:b9:cc:95:
33:be:38:ba:f2:7d:f7:91:02:91:11:74:e8:6a:8f:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:FD:59:25:DA:1B:7A:65:FB:B1:B7:ED:1B:25:41:E7:6C:EF:7F
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1IH9WSXaG3pl-7G37RslQeds738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.154.0/24
95.181.171.0/24
185.12.124.0/22
IPv6:
2a11:f840::/29
2a12:9c0::/29
2a12:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
04:dc:5a:ea:a6:57:ff:41:a0:58:ba:58:96:8b:fb:5a:cc:98:
23:a1:de:12:24:ad:89:fb:c3:c8:72:f2:a4:01:3a:4a:0c:a3:
a5:63:83:80:71:3e:1c:31:41:80:76:fc:e1:00:c6:38:8e:96:
4d:5b:f3:c5:86:8b:6c:f2:d3:d5:7f:e7:14:9a:e3:70:33:91:
6f:18:ee:e0:09:05:89:19:53:07:9c:8e:4c:27:3c:f3:69:9f:
f3:b1:62:c1:7c:f8:3d:84:90:6b:f4:fa:a3:f9:31:d7:12:aa:
b3:c0:b5:8d:f8:46:5e:26:00:45:6c:c8:fb:11:27:ca:0d:29:
53:a3:af:06:75:8e:bb:93:41:c6:f5:c5:f3:78:70:95:18:ec:
54:14:e9:19:d1:05:3b:66:d2:84:1a:76:c4:23:d6:aa:47:66:
cf:05:55:d8:5a:62:75:a7:66:02:41:8f:90:18:ab:14:be:59:
35:cb:8d:fa:1f:b1:b6:32:a9:be:46:f1:af:f0:32:b9:30:10:
ca:ec:53:d7:06:92:f0:2e:8c:b1:88:3e:fb:62:bb:3a:3a:6c:
97:9b:fc:39:19:6d:c2:a2:c0:32:e0:75:78:5d:ab:7f:cf:26:
e0:9c:5f:8a:15:31:05:93:6a:b3:f7:cd:97:dd:82:ed:bc:f8:
83:36:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 01:35:37 2026 by rpki-client