Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/38QuIRdQ3ILgtw5V6Gn-NWOL66A.roa
File: 38QuIRdQ3ILgtw5V6Gn-NWOL66A.roa (raw, json)
Hash identifier: EjjVqAzyl+i+DfNv76gU8i4pe2Gw8IgJPoJQJCloa5I=
Subject key identifier: DF:C4:2E:21:17:50:DC:82:E0:B7:0E:55:E8:69:FE:35:63:8B:EB:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F1CC7CFA3C86C5FE471C6C014394FB70B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/38QuIRdQ3ILgtw5V6Gn-NWOL66A.roa
Signing time: Wed 01 Jul 2026 08:24:44 +0000
ROA not before: Wed 01 Jul 2026 08:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 81.5.161.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:c7:cf:a3:c8:6c:5f:e4:71:c6:c0:14:39:4f:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 08:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfc42e211750dc82e0b70e55e869fe35638beba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:2d:26:c6:ce:b0:1e:66:b3:21:bc:82:6b:
39:2d:8c:02:aa:bb:20:5a:ea:dc:85:85:d8:92:1c:
92:cd:a3:47:50:ec:0e:ef:d6:bb:19:40:3f:5a:81:
70:d2:d5:d7:8f:f9:4f:66:ce:9d:1e:22:49:7a:49:
41:9f:b8:40:c5:41:c4:b3:5f:8d:c8:ec:68:b7:a2:
d6:ac:fe:de:a8:bb:f2:03:4d:fe:81:98:e1:56:70:
f0:1f:11:2b:a1:dc:e6:00:c3:c2:49:21:5c:75:ab:
c6:4d:fd:3f:5b:3d:6f:96:b0:70:8f:3c:0d:8b:a5:
ef:82:76:a8:2e:fb:20:02:eb:0c:27:b8:78:9c:4e:
0b:fc:59:6f:8e:3b:ce:e1:a0:dc:d6:71:4a:7d:1c:
16:36:73:b0:51:20:fe:e2:fd:32:e7:59:b9:b9:28:
7f:1d:81:03:f0:33:e0:82:5f:2a:d7:30:4d:85:93:
a5:f6:24:23:72:73:63:cb:20:17:db:06:b6:fa:73:
e9:5a:e0:64:6b:0a:f4:2c:c0:d5:1e:d8:69:66:68:
bb:1e:a7:69:18:bf:92:ef:f9:20:5c:81:48:c9:76:
ed:2d:c6:bf:83:2d:fc:97:26:e5:be:10:5f:0d:41:
04:67:bd:f8:69:6b:b5:aa:04:63:15:ff:06:4c:cf:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:2E:21:17:50:DC:82:E0:B7:0E:55:E8:69:FE:35:63:8B:EB:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/38QuIRdQ3ILgtw5V6Gn-NWOL66A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
82.152.63.0/24
82.152.220.0/24
82.152.223.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:7c:8f:12:f6:2a:ae:59:b2:cb:e1:5d:79:87:06:fd:a8:3f:
e5:37:66:b3:78:a0:e0:e4:8b:ac:85:96:4c:d9:a6:b2:76:a0:
c1:78:2a:55:24:92:d6:89:56:25:48:1e:0a:03:62:d6:1d:76:
18:bf:8f:36:b1:d3:0f:5d:3c:48:d2:31:a9:86:69:20:6b:e6:
e6:99:6f:c5:13:6a:f4:3f:7a:ce:4e:06:67:f7:25:92:fa:f6:
f5:bc:e5:ec:67:f7:18:04:4f:92:76:6b:be:9e:8c:70:c8:5c:
41:4d:d4:c3:fb:56:24:cb:f8:93:c6:5f:b1:aa:d0:8a:02:f0:
a0:fc:1f:f9:31:b9:47:9c:d0:83:5c:78:15:34:bd:a0:f6:63:
eb:98:03:f4:6a:a7:78:fc:13:c2:de:be:0f:d0:fd:ea:d4:ef:
1d:bf:bc:46:8d:7f:14:8d:b0:35:91:22:d3:a6:c6:16:60:7c:
4f:5e:83:1b:f8:62:0b:c9:81:b5:6e:e9:ea:5d:1f:96:0b:6a:
12:60:23:13:69:b9:f6:48:cc:41:39:87:a8:e7:d1:68:87:b4:
c6:52:af:4a:63:c2:b4:d6:fc:e4:21:84:6f:05:81:f8:3a:f0:
78:3e:8a:fd:49:2e:a3:d7:b4:e9:fd:18:e5:83:4d:ab:59:92:
5b:89:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:21 2026 by rpki-client