Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1N7BQW5VpVQY5_al4_8Bs8t8OB4.roa
File: 1N7BQW5VpVQY5_al4_8Bs8t8OB4.roa (raw, json)
Hash identifier: gWpB/7mHT00u6jzUpo0y2WwPUpUTXzhV2AWQkuG8pcM=
Subject key identifier: D4:DE:C1:41:6E:55:A5:54:18:E7:F6:A5:E3:FF:01:B3:CB:7C:38:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12440D79C562C4B57767939E40BDF4F3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1N7BQW5VpVQY5_al4_8Bs8t8OB4.roa
Signing time: Mon 29 Jun 2026 07:24:37 +0000
ROA not before: Mon 29 Jun 2026 07:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:0d:79:c5:62:c4:b5:77:67:93:9e:40:bd:f4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4dec1416e55a55418e7f6a5e3ff01b3cb7c381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:b7:a2:46:9c:db:47:82:08:0f:78:d8:f7:
4c:59:08:5e:8d:f1:21:bb:8c:d4:66:4d:4e:c3:41:
fd:51:6b:06:bb:c9:6e:ca:34:32:11:a2:07:22:12:
31:ce:53:91:71:0b:ea:36:ae:00:c6:98:8a:fa:84:
e1:91:e9:65:46:a7:c1:0c:e3:76:be:94:21:25:bf:
61:7e:63:af:33:fc:2a:a4:9f:cb:b1:e8:66:eb:78:
1d:4d:7f:d6:d6:67:0d:50:db:30:e9:02:a7:ec:1f:
2b:43:7c:f6:91:b3:b3:3a:ee:06:3d:d6:33:bf:a6:
0c:34:19:ae:26:e8:35:20:97:b9:1e:bf:76:41:a1:
8d:1e:b5:33:d8:7f:5d:f4:b4:78:0e:c0:b1:24:aa:
e4:dd:b4:b2:2b:dd:7f:0f:00:fa:b2:14:3d:e6:d5:
6a:2c:c6:23:c7:4f:9e:0e:7a:12:bd:7f:e6:a8:cf:
31:66:d9:ac:80:ca:66:32:18:e9:21:b6:74:f8:91:
29:13:ab:b9:15:a3:49:12:cf:56:db:6a:45:bd:f1:
fa:3d:b7:e0:bb:e8:24:41:68:22:09:9e:12:ae:cf:
15:62:30:27:0d:e9:81:3c:3b:40:7c:5e:bb:56:11:
f6:00:3f:bb:b1:ac:79:e1:47:e5:84:81:6c:c4:75:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:C1:41:6E:55:A5:54:18:E7:F6:A5:E3:FF:01:B3:CB:7C:38:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1N7BQW5VpVQY5_al4_8Bs8t8OB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.118.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e9:6c:00:b3:24:27:93:ea:4c:0f:f5:ca:ef:7b:bb:32:c4:
a9:11:a4:d3:df:2d:7b:80:2a:eb:eb:b7:87:8c:62:4c:1c:b1:
01:46:84:6b:18:aa:b1:3d:be:09:7a:e0:7c:df:5b:d3:a1:13:
e5:5b:13:6b:d5:30:6c:f9:ef:48:24:8f:e1:d8:1f:c3:5d:88:
ad:3d:9e:6d:16:61:90:31:e5:2a:64:ef:e7:b9:0b:a9:20:ff:
45:fd:dd:b4:54:f2:46:53:27:19:6b:dc:07:fd:ec:b3:6e:93:
a0:d1:ec:86:f5:a3:d2:bb:d0:8a:0c:ba:3a:72:37:40:b3:2a:
9e:e5:fd:2d:87:bb:aa:87:8d:b8:c8:54:71:f4:12:26:ba:f0:
37:7a:45:8f:98:0e:26:e9:ae:14:cf:0f:fa:33:f4:d2:7a:bc:
e6:2c:bd:3d:c0:c5:cd:4e:ca:ce:ff:f5:b7:98:e3:9c:32:ee:
39:5d:36:c6:ae:8b:bc:f7:92:9f:3c:bc:bd:71:31:18:b1:40:
5e:f6:f1:93:ac:bc:0f:bc:4b:cb:bf:ba:80:bf:a4:76:4f:62:
5f:49:4c:3b:96:47:06:59:df:a6:87:e7:4f:03:db:bd:41:0d:
53:d4:f9:5b:e2:70:37:80:65:2c:02:b8:41:dd:02:25:3b:9e:
72:1b:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:41 2026 by rpki-client