Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gZcIawQfvkVk14mQZ09Fe-crYPk.roa
File: gZcIawQfvkVk14mQZ09Fe-crYPk.roa (raw, json)
Hash identifier: HyUy2DJdyOV4a69TizjldfPNIZ6/7cU4Wnd86r1BGQ0=
Subject key identifier: 81:97:08:6B:04:1F:BE:45:64:D7:89:90:67:4F:45:7B:E7:2B:60:F9
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019ECBB4A50AA49A694A9B307A5C88BE37F4
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gZcIawQfvkVk14mQZ09Fe-crYPk.roa
Signing time: Mon 15 Jun 2026 14:34:33 +0000
ROA not before: Mon 15 Jun 2026 14:34:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 83.217.194.0/24 maxlen: 32
83.217.195.0/24 maxlen: 32
83.217.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:b4:a5:0a:a4:9a:69:4a:9b:30:7a:5c:88:be:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jun 15 14:34:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8197086b041fbe4564d78990674f457be72b60f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:46:cc:d5:02:26:2c:4f:23:2e:be:38:68:
2d:16:c2:e9:2a:73:86:aa:ff:30:f5:23:be:98:61:
43:45:e1:e5:ce:6e:6e:52:6a:0d:3e:cb:ff:4a:d9:
2e:b8:a1:b0:b1:2e:d0:28:fa:30:84:59:cc:6b:a1:
0f:92:aa:02:aa:d3:f0:90:80:2e:86:65:a6:82:ff:
0c:50:1f:05:49:7d:73:94:03:a1:57:95:32:d7:99:
b6:0d:bc:e9:c2:44:dc:50:6f:68:1f:25:c6:1a:2b:
94:49:9f:ea:1c:35:ef:f2:20:79:6f:38:91:84:67:
f5:64:38:c5:93:f9:47:87:8e:35:42:38:29:1c:4e:
06:b6:ef:0d:6d:ec:20:ab:3c:3d:41:c5:a9:43:f6:
8c:de:b3:81:1c:b2:a4:d3:05:9c:7c:18:45:be:44:
95:a5:0a:45:a5:37:2b:10:3d:58:c9:06:43:fb:4a:
9e:5e:c7:69:46:18:7f:0b:4d:ea:70:01:db:b4:10:
fb:55:93:3a:f8:00:58:18:c9:89:a9:a3:dd:58:50:
e0:2f:64:fd:73:2b:16:2a:69:87:e8:22:6b:65:95:
db:82:68:76:4a:69:b5:ed:97:b3:50:83:67:0d:c6:
83:87:93:a7:ee:71:08:ba:9f:b7:51:59:ae:97:ba:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:08:6B:04:1F:BE:45:64:D7:89:90:67:4F:45:7B:E7:2B:60:F9
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/gZcIawQfvkVk14mQZ09Fe-crYPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.194.0/23
83.217.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1e:81:78:39:9e:a8:49:03:88:3f:fe:45:01:3d:5b:e5:aa:
fd:9f:41:f1:0c:69:71:86:af:07:2c:b4:ba:5b:86:c2:51:ba:
79:b5:24:63:8d:ec:67:aa:bb:07:e8:73:1f:ee:9c:6d:2e:17:
26:1f:cb:07:ee:ef:1e:2c:e9:e4:56:d1:d7:5d:05:fe:d2:68:
56:f4:80:10:1d:39:0a:e5:2b:77:a3:f6:80:0d:10:c2:f1:6c:
90:16:60:4a:68:33:a1:65:3f:3a:53:6f:f0:51:a0:bc:67:79:
d8:9e:ed:3b:bc:c5:cf:05:1d:c6:4a:af:20:37:45:6e:a7:16:
74:f5:c2:e6:e5:79:31:be:a1:c0:6e:49:7f:71:40:50:33:02:
ba:be:3c:15:30:53:56:15:ef:9e:28:0a:b5:5f:58:17:72:71:
fb:aa:63:ae:28:e4:b5:2a:19:14:c5:49:dc:e5:38:87:24:2c:
ef:cf:7e:eb:3c:3b:5f:a3:67:63:bd:04:21:6c:d9:ab:99:eb:
86:b9:d8:c4:6b:18:47:81:53:0c:87:60:75:aa:d1:db:58:8e:
f9:3d:e7:1c:b8:85:4c:65:b5:12:d4:aa:46:f1:c8:3e:3c:3f:
1b:a7:ff:10:a6:cd:f3:20:36:d5:27:a9:14:5f:ab:80:96:61:
da:55:97:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7LtKUKpJppSpswelyIvjf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjYwNjE1MTQzNDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTk3MDg2YjA0MWZiZTQ1NjRkNzg5OTA2NzRmNDU3YmU3MmI2MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0lGzNUCJixPIy6+OGgtFsLpKnOG
qv8w9SO+mGFDReHlzm5uUmoNPsv/StkuuKGwsS7QKPowhFnMa6EPkqoCqtPwkIAu
hmWmgv8MUB8FSX1zlAOhV5Uy15m2DbzpwkTcUG9oHyXGGiuUSZ/qHDXv8iB5bziR
hGf1ZDjFk/lHh441QjgpHE4Gtu8Nbewgqzw9QcWpQ/aM3rOBHLKk0wWcfBhFvkSV
pQpFpTcrED1YyQZD+0qeXsdpRhh/C03qcAHbtBD7VZM6+ABYGMmJqaPdWFDgL2T9
cysWKmmH6CJrZZXbgmh2Smm17ZezUINnDcaDh5On7nEIup+3UVmul7pAuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIGXCGsEH75FZNeJkGdPRXvnK2D5MB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvZ1pjSWF3UWZ2a1ZrMTRtUVowOUZlLWNyWVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBU9nCAwQA
U9neMA0GCSqGSIb3DQEBCwUAA4IBAQA7HoF4OZ6oSQOIP/5FAT1b5ar9n0HxDGlx
hq8HLLS6W4bCUbp5tSRjjexnqrsH6HMf7pxtLhcmH8sH7u8eLOnkVtHXXQX+0mhW
9IAQHTkK5St3o/aADRDC8WyQFmBKaDOhZT86U2/wUaC8Z3nYnu07vMXPBR3GSq8g
N0VupxZ09cLm5XkxvqHAbkl/cUBQMwK6vjwVMFNWFe+eKAq1X1gXcnH7qmOuKOS1
KhkUxUnc5TiHJCzvz37rPDtfo2djvQQhbNmrmeuGudjEaxhHgVMMh2B1qtHbWI75
PeccuIVMZbUS1KpG8cg+PD8bp/8Qps3zIDbVJ6kUX6uAlmHaVZfb
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:29:22 2026 by rpki-client