Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/xqowebWraueYZyk4JZ7-GAlD6Jc.roa
File: xqowebWraueYZyk4JZ7-GAlD6Jc.roa (raw, json)
Hash identifier: YbHVnVPnvbOJ6tEZZjo0dcGYHWOL8QJwq/pqRKmm4yk=
Subject key identifier: C6:AA:30:79:B5:AB:6A:E7:98:67:29:38:25:9E:FE:18:09:43:E8:97
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019ECBB4A3E12173D5317041832E4AC1FD56
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/xqowebWraueYZyk4JZ7-GAlD6Jc.roa
Signing time: Mon 15 Jun 2026 14:34:33 +0000
ROA not before: Mon 15 Jun 2026 14:34:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 83.217.192.0/24 maxlen: 32
83.217.193.0/24 maxlen: 32
83.217.200.0/24 maxlen: 32
83.217.201.0/24 maxlen: 32
83.217.220.0/24 maxlen: 32
83.217.221.0/24 maxlen: 32
83.217.223.0/24 maxlen: 32
85.198.80.0/24 maxlen: 32
85.198.81.0/24 maxlen: 32
85.198.82.0/24 maxlen: 32
85.198.83.0/24 maxlen: 32
89.169.0.0/24 maxlen: 32
89.169.1.0/24 maxlen: 32
89.169.2.0/24 maxlen: 32
89.169.3.0/24 maxlen: 32
89.169.44.0/24 maxlen: 32
89.169.45.0/24 maxlen: 32
89.169.46.0/24 maxlen: 32
89.169.47.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:b4:a3:e1:21:73:d5:31:70:41:83:2e:4a:c1:fd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jun 15 14:34:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6aa3079b5ab6ae798672938259efe180943e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:60:13:22:98:8d:e7:40:5a:32:55:c4:cc:
0d:de:37:c7:19:64:e1:0c:86:0e:f0:d4:d6:2a:a0:
86:e2:4e:7e:f9:29:12:db:30:ca:af:97:7b:38:97:
76:f6:94:c6:00:0b:be:ad:5f:a7:5f:65:f4:d0:d0:
08:46:50:4d:f1:f8:8a:40:e7:71:d4:9f:74:4a:4d:
c6:3c:55:d1:3c:c7:61:2f:a7:42:d6:72:6f:20:b9:
e0:60:fd:cb:53:87:9c:a8:12:28:2e:89:65:ee:c3:
e5:4b:c6:e2:22:b9:65:53:3c:72:b8:4a:cb:2c:ed:
9a:b7:92:d9:d1:60:36:97:92:a1:99:7e:78:6b:22:
06:aa:d5:76:11:c9:b0:22:b7:c1:72:f0:17:7c:67:
62:90:66:6b:bc:c1:73:2a:a9:3d:b7:27:de:1e:57:
ca:10:6c:92:da:28:81:25:6c:cf:56:fa:4e:ba:25:
9e:8b:79:c1:2e:06:53:e5:26:2d:ff:b4:1f:b9:49:
a1:aa:21:41:bb:e7:c9:4f:73:09:20:e7:83:46:6b:
a2:4a:a4:b3:72:3a:f5:c2:d7:37:79:28:8d:22:78:
27:db:1d:6c:1c:b0:02:54:d0:d4:bb:4a:7a:bd:23:
0e:73:07:b4:db:dc:67:20:3a:da:87:0d:68:77:cb:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AA:30:79:B5:AB:6A:E7:98:67:29:38:25:9E:FE:18:09:43:E8:97
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/xqowebWraueYZyk4JZ7-GAlD6Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.192.0/23
83.217.200.0/23
83.217.220.0/23
83.217.223.0/24
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:10:7e:c7:95:1e:54:16:fa:c8:8c:d7:17:89:b6:cb:a1:9c:
5d:02:44:3c:ec:28:b8:f4:31:c4:26:ad:5b:7c:a5:c2:ac:f0:
fe:ba:8b:02:a5:14:e3:d1:c4:df:a1:7e:a1:8d:1a:5b:dd:12:
aa:29:3e:20:91:73:d5:d5:3c:82:f1:5a:b1:f1:d5:d8:1b:82:
53:23:96:f4:e9:34:3c:17:ff:cb:b3:25:4b:9b:34:e5:68:56:
50:d2:0b:eb:ed:5e:2d:48:ff:e0:87:1a:ef:0b:2e:2e:9f:b1:
30:ed:6a:98:9c:c9:bd:6f:f4:c0:be:0b:6f:9e:8d:ce:23:45:
04:6b:26:7e:61:39:72:20:38:97:cd:70:fe:d9:71:b0:74:15:
45:a9:23:f9:92:50:57:02:ec:d4:82:6f:4a:33:78:a5:ab:e4:
81:30:8e:1d:2e:06:5c:6d:6d:7d:78:96:13:c8:a4:a2:bb:b1:
27:5d:21:94:e7:63:16:b7:3e:ff:2a:dd:8e:2c:a7:14:3e:b4:
c5:e6:18:21:b6:1f:ba:7e:98:fc:a0:44:c6:06:d8:fe:ef:69:
43:fe:17:5e:8f:ed:e7:55:7e:a4:03:4a:e5:55:aa:49:17:89:
82:47:79:88:c1:24:41:93:2f:a4:b6:d6:e1:25:84:67:bc:83:
a7:86:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:28:59 2026 by rpki-client