Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2TwKjAVabVcYJUh5Ma03lhbnPhE.roa
File: 2TwKjAVabVcYJUh5Ma03lhbnPhE.roa (raw, json)
Hash identifier: JGn8wrVhR5EZpImAsGbBTBjGhT+ag75+oTqAP0pHgEI=
Subject key identifier: D9:3C:0A:8C:05:5A:6D:57:18:25:48:79:31:AD:37:96:16:E7:3E:11
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12440E69BB1F5FCA7BB1EF0B8D9BCDEA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2TwKjAVabVcYJUh5Ma03lhbnPhE.roa
Signing time: Mon 29 Jun 2026 07:24:37 +0000
ROA not before: Mon 29 Jun 2026 07:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 82.152.9.0/24 maxlen: 24
82.152.65.0/24 maxlen: 24
82.152.219.0/24 maxlen: 24
82.152.244.0/24 maxlen: 24
82.153.105.0/24 maxlen: 24
82.153.106.0/24 maxlen: 24
82.153.107.0/24 maxlen: 24
82.153.108.0/24 maxlen: 24
82.153.124.0/24 maxlen: 24
82.153.230.0/24 maxlen: 24
82.153.237.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:0e:69:bb:1f:5f:ca:7b:b1:ef:0b:8d:9b:cd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93c0a8c055a6d571825487931ad379616e73e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:fb:c6:77:a9:c8:6f:78:ed:a9:b7:42:43:
c3:51:ce:4c:c4:89:0c:3d:22:ba:80:14:4f:ee:b1:
94:d2:97:7b:f7:a7:1f:7b:87:dc:7a:25:77:69:0e:
73:41:77:89:fd:99:a7:42:06:b8:b4:fc:08:81:34:
5e:91:0e:24:c9:a2:1f:ac:da:cc:1d:09:27:3a:6d:
a3:95:d1:b9:1e:2a:58:b7:ac:08:9d:e0:76:7d:23:
af:94:24:30:1f:00:5a:9f:9b:d5:38:30:25:d5:7d:
16:1e:a2:42:01:74:9e:ab:91:87:dd:55:3e:df:7c:
4e:c7:9a:cb:b4:36:16:55:f7:38:f8:ee:9a:eb:24:
0f:b5:68:26:00:d4:dc:e2:b8:b8:7f:cc:40:bf:6e:
fc:f0:5a:a8:be:61:4b:f2:1e:c5:02:2b:7a:63:3b:
a0:0e:5e:f2:41:d0:ff:12:be:f8:e7:87:32:66:fc:
2b:59:fe:25:4e:45:f1:af:f2:7e:88:fa:a4:40:21:
77:17:6a:7e:7a:b8:5f:66:78:b2:13:02:82:fc:bf:
50:a8:24:2a:25:dd:1d:46:b5:24:ea:07:4c:50:f3:
33:12:cf:5b:35:27:41:55:d0:c4:80:8a:32:e3:88:
ab:51:b9:98:b1:e0:67:86:6b:68:aa:09:1a:b8:03:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:0A:8C:05:5A:6D:57:18:25:48:79:31:AD:37:96:16:E7:3E:11
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2TwKjAVabVcYJUh5Ma03lhbnPhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.9.0/24
82.152.65.0/24
82.152.219.0/24
82.152.244.0/24
82.153.105.0-82.153.108.255
82.153.124.0/24
82.153.230.0/24
82.153.237.0/24
212.38.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:92:9d:a1:56:18:98:d6:7a:f0:bc:df:60:30:97:fa:fb:
e0:f5:e0:c7:ad:2c:9c:b0:4b:ef:24:af:f2:52:6f:89:d9:8b:
5a:8a:21:cc:14:0e:d3:0b:e4:b9:7d:36:6a:69:28:60:97:0b:
c0:fb:57:52:b0:88:35:ee:25:51:66:93:be:12:0b:64:31:38:
88:c5:7a:fc:21:d7:86:b2:30:64:25:5e:53:d4:9b:54:8e:96:
a3:51:0e:77:f7:3c:e8:8b:36:c3:7b:ed:15:34:52:2a:c6:8b:
6a:57:67:0e:a0:5f:ae:e5:61:28:91:9c:bc:76:56:6f:29:64:
ec:9b:a9:da:0f:47:4d:e4:ea:82:d1:ad:3d:09:46:f2:63:54:
6f:53:94:24:cd:34:54:53:8d:40:e7:16:42:78:43:17:da:42:
db:9a:9a:36:80:b2:d0:81:e7:b1:71:f1:94:18:84:3c:e0:05:
16:e6:7b:ef:5d:f6:07:6a:cd:43:36:58:cb:9e:92:5a:76:10:
f7:4b:f3:4b:57:ec:2a:e6:7a:69:5b:27:c7:84:de:29:79:48:
85:07:73:ad:57:2f:fe:d0:8e:2b:e1:50:63:34:bc:0d:a1:67:
10:12:67:27:a5:63:ea:10:1c:1b:54:b9:51:fb:d0:b9:06:a8:
14:45:85:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:51 2026 by rpki-client