Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/s2Zr_cUJe_A1h0e212P3gwwDxFA.roa
File: s2Zr_cUJe_A1h0e212P3gwwDxFA.roa (raw, json)
Hash identifier: uwBA4Ojplz+EeROEkvYyoTN2wxPurNYx4KppRjn99aY=
Subject key identifier: B3:66:6B:FD:C5:09:7B:F0:35:87:47:B6:D7:63:F7:83:0C:03:C4:50
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019ECBB4A46B738B0C33A1FAD8F3B0F668E3
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/s2Zr_cUJe_A1h0e212P3gwwDxFA.roa
Signing time: Mon 15 Jun 2026 14:34:33 +0000
ROA not before: Mon 15 Jun 2026 14:34:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31514
IP address blocks: 83.217.196.0/24 maxlen: 24
83.217.198.0/24 maxlen: 24
83.217.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:b4:a4:6b:73:8b:0c:33:a1:fa:d8:f3:b0:f6:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jun 15 14:34:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3666bfdc5097bf0358747b6d763f7830c03c450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:1a:55:03:13:ef:c4:60:3d:69:d2:a5:d3:
65:8d:54:ed:20:e1:5a:4c:fe:e2:39:3a:b9:e7:5c:
bc:01:08:a2:95:d3:66:1e:7f:07:1d:65:9c:e7:a6:
f8:fb:0e:5c:6c:6d:84:42:91:51:34:f4:c3:2d:a9:
43:c1:5d:4b:c4:6f:ed:e3:f4:83:7c:6c:3c:ef:c3:
96:3b:58:2b:e2:7f:a6:02:1a:f2:63:f0:bb:11:0a:
65:21:6f:53:cd:4a:ef:c8:e2:f3:1c:34:50:d2:f3:
00:a4:5f:ab:f9:9d:b6:57:fe:20:48:ef:5a:a6:12:
be:c2:5e:06:ce:31:33:0f:21:f3:90:54:7b:a8:36:
4a:46:e9:c5:0d:a9:43:e0:65:49:ed:00:b5:f1:c5:
6f:fb:65:01:c6:55:0a:5e:a6:c7:b4:05:8b:de:f0:
dc:d2:c5:ed:52:2b:c9:e9:ca:23:f4:97:69:b5:d4:
ff:48:3f:a2:7c:45:df:ec:18:84:7b:35:74:1b:56:
99:ae:58:81:0a:78:7b:ff:cb:6e:ee:96:68:8e:4b:
d0:bf:1c:05:b3:f4:fc:7b:16:17:ca:17:94:0a:27:
5f:f7:56:a6:2d:bf:fd:84:d9:2d:ab:64:c2:63:71:
e4:65:00:e7:be:49:c7:73:c8:ff:25:b7:c1:d8:b1:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:6B:FD:C5:09:7B:F0:35:87:47:B6:D7:63:F7:83:0C:03:C4:50
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/s2Zr_cUJe_A1h0e212P3gwwDxFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.196.0/24
83.217.198.0/23
Signature Algorithm: sha256WithRSAEncryption
96:df:4c:e4:9e:73:c2:85:53:3d:d9:83:6b:2c:be:44:c9:74:
f6:e6:81:d1:cd:a7:85:20:90:01:1a:f5:b8:04:26:1e:52:62:
d2:a0:ef:2c:2d:57:2d:86:19:78:ee:72:f4:3f:38:0a:d7:7a:
fd:62:d3:1e:88:dc:49:6b:c7:26:3b:ec:fe:0f:67:4a:35:a1:
14:ff:4c:d4:c9:b5:2d:2b:f9:ac:81:bd:f7:96:6f:7e:f1:8c:
32:cb:8d:6a:31:fb:e4:51:71:5c:cc:d4:0b:4a:01:d7:9d:62:
c5:87:c7:d2:5d:7d:66:69:1e:9b:be:a5:a4:4f:9a:92:12:6c:
9d:26:ae:67:2f:8e:12:74:03:81:d8:7c:82:ee:0c:0b:d1:59:
42:dc:a9:25:34:83:df:88:8a:d1:b0:27:34:63:2d:84:df:0a:
f6:a5:c6:e6:35:59:a8:5b:1a:33:a3:fe:a8:47:c6:32:25:c2:
48:b7:b5:54:83:a0:07:93:0e:bb:21:9e:7d:9a:b7:5a:02:92:
76:c4:b1:fd:2f:de:9f:50:86:a1:42:33:63:e5:93:3a:5d:62:
c4:eb:cc:ca:d0:49:5a:5a:45:a7:83:66:3b:ea:b0:1f:0d:bb:
79:c9:65:7f:67:4f:64:50:0a:00:68:f0:09:69:28:7f:81:85:
d8:d2:8b:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7LtKRrc4sMM6H62POw9mjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjYwNjE1MTQzNDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzY2NmJmZGM1MDk3YmYwMzU4NzQ3YjZkNzYzZjc4MzBjMDNjNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2UaVQMT78RgPWnSpdNljVTtIOFa
TP7iOTq551y8AQiildNmHn8HHWWc56b4+w5cbG2EQpFRNPTDLalDwV1LxG/t4/SD
fGw878OWO1gr4n+mAhryY/C7EQplIW9TzUrvyOLzHDRQ0vMApF+r+Z22V/4gSO9a
phK+wl4GzjEzDyHzkFR7qDZKRunFDalD4GVJ7QC18cVv+2UBxlUKXqbHtAWL3vDc
0sXtUivJ6coj9JdptdT/SD+ifEXf7BiEezV0G1aZrliBCnh7/8tu7pZojkvQvxwF
s/T8exYXyheUCidf91amLb/9hNktq2TCY3HkZQDnvknHc8j/JbfB2LHMYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLNma/3FCXvwNYdHttdj94MMA8RQMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvczJacl9jVUplX0ExaDBlMjEyUDNnd3dEeEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU9nEAwQB
U9nGMA0GCSqGSIb3DQEBCwUAA4IBAQCW30zknnPChVM92YNrLL5EyXT25oHRzaeF
IJABGvW4BCYeUmLSoO8sLVcthhl47nL0PzgK13r9YtMeiNxJa8cmO+z+D2dKNaEU
/0zUybUtK/msgb33lm9+8Ywyy41qMfvkUXFczNQLSgHXnWLFh8fSXX1maR6bvqWk
T5qSEmydJq5nL44SdAOB2HyC7gwL0VlC3KklNIPfiIrRsCc0Yy2E3wr2pcbmNVmo
Wxozo/6oR8YyJcJIt7VUg6AHkw67IZ59mrdaApJ2xLH9L96fUIahQjNj5ZM6XWLE
68zK0ElaWkWng2Y76rAfDbt5yWV/Z09kUAoAaPAJaSh/gYXY0ouc
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:29:23 2026 by rpki-client