Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Tfcw63seI99SXAjeXeI9GAQQzI4.roa
File: Tfcw63seI99SXAjeXeI9GAQQzI4.roa (raw, json)
Hash identifier: T8ybdiOx18BXmiK8n3NJ17+KQPn/8daXEn7z2vnCgZ4=
Subject key identifier: 4D:F7:30:EB:7B:1E:23:DF:52:5C:08:DE:5D:E2:3D:18:04:10:CC:8E
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019EE5B35E6CEA31E013F8695077A73427A5
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Tfcw63seI99SXAjeXeI9GAQQzI4.roa
Signing time: Sat 20 Jun 2026 15:43:17 +0000
ROA not before: Sat 20 Jun 2026 15:43:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
161.104.28.0/22 maxlen: 22
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:b3:5e:6c:ea:31:e0:13:f8:69:50:77:a7:34:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jun 20 15:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4df730eb7b1e23df525c08de5de23d180410cc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:58:62:51:12:bd:ee:f6:3a:2a:60:34:19:
d7:78:6d:79:b3:83:17:ff:ae:4d:84:db:40:88:f0:
a3:92:91:1f:21:7c:23:8e:95:37:93:53:e2:e3:61:
2b:c3:78:b8:a5:3d:0e:a9:af:8f:ec:12:17:8a:76:
1f:7d:1c:c0:6c:9c:d2:8f:ed:fa:76:79:0d:4f:46:
1d:ce:62:a0:4b:43:c7:1e:ed:55:39:b3:4b:93:f2:
56:c1:0b:ff:f5:68:c6:2f:bd:f9:22:55:64:de:4a:
6b:dc:d5:ae:3f:0d:6f:27:ea:cc:db:86:af:ee:0f:
3c:60:13:a4:72:b9:c5:95:9f:95:ab:16:33:09:5a:
9b:07:66:e7:a0:6c:85:15:e2:90:d9:5d:ee:2a:e2:
5f:63:4a:27:bf:95:70:68:64:35:89:e2:70:ef:9a:
1a:c8:a2:fb:7b:74:4a:9b:2d:c7:c4:7d:c9:b2:3b:
2c:70:6e:79:f0:b8:0d:1f:65:4c:2a:9c:3b:ae:d1:
c6:b0:b2:c1:38:50:35:52:19:ca:25:92:48:65:3b:
6f:a9:3a:c6:c3:ea:2c:5a:e5:5f:fc:f1:2b:dd:13:
5f:d4:29:da:d6:ef:13:a7:88:75:af:18:21:c4:20:
ff:c9:1c:2a:34:8c:bd:2a:e2:4c:d6:4f:37:58:d1:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:30:EB:7B:1E:23:DF:52:5C:08:DE:5D:E2:3D:18:04:10:CC:8E
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Tfcw63seI99SXAjeXeI9GAQQzI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
161.104.28.0/22
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
86:20:6e:7c:85:2e:ee:08:95:d6:59:70:ff:9f:23:94:22:67:
dd:ca:44:a1:db:17:7d:a4:cc:a8:9f:f2:20:89:b0:5a:40:94:
b0:ad:14:89:c2:bc:09:4b:c0:69:08:e3:d3:dc:f7:15:00:cd:
89:7e:02:07:62:50:3d:79:db:bd:02:d1:af:74:fb:42:98:84:
4c:bb:b7:d2:85:35:d0:30:a5:97:61:62:d8:d0:d3:8b:2d:8c:
75:dd:f2:40:c1:f0:3c:a5:e5:5c:53:4a:40:c0:bf:a4:81:48:
b5:c2:77:49:10:a5:f4:2c:67:8a:9d:cf:e2:cb:de:ae:e9:35:
7d:54:fa:17:8b:45:e3:b8:a8:2b:b6:be:bc:03:2b:44:71:00:
4f:d4:8e:f6:5e:b3:60:10:45:51:39:04:e5:d8:60:a6:4e:dd:
d4:86:cd:6c:87:66:1b:f3:c6:32:44:65:ab:de:9b:4c:41:d4:
d5:ea:a8:3f:c5:5a:3d:26:37:ba:7c:54:28:f1:c2:11:66:d2:
a6:8a:d6:d2:94:53:93:35:d3:45:c1:1f:15:5a:c2:7d:ea:a4:
c7:f9:f5:b3:ae:57:75:1e:12:50:6c:3f:8a:23:19:b0:06:5d:
b4:df:d5:7d:b9:11:95:d1:37:2f:4c:27:8c:a3:c0:f9:7a:de:
80:40:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:28:58 2026 by rpki-client