Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3jLXbYqT54pumW-VGXOmhr7iciI.roa
File: 3jLXbYqT54pumW-VGXOmhr7iciI.roa (raw, json)
Hash identifier: vYCA57IljPcolUSfbcyeIpzqDK+tozKdK8ahEvDMIBM=
Subject key identifier: DE:32:D7:6D:8A:93:E7:8A:6E:99:6F:95:19:73:A6:86:BE:E2:72:22
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F218B4AC9AAB6D416FBD58F1F32F28644
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3jLXbYqT54pumW-VGXOmhr7iciI.roa
Signing time: Thu 02 Jul 2026 06:36:44 +0000
ROA not before: Thu 02 Jul 2026 06:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 80.240.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:8b:4a:c9:aa:b6:d4:16:fb:d5:8f:1f:32:f2:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 2 06:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de32d76d8a93e78a6e996f951973a686bee27222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:52:ae:c9:2b:21:a2:67:90:bc:21:f1:31:
53:1f:7e:50:d0:7f:1f:00:d1:7f:2b:04:08:e8:aa:
81:a3:80:a8:53:22:05:dc:eb:a0:d9:d8:eb:87:ff:
a5:81:1b:32:80:a1:e2:ea:87:e0:e9:f8:ec:09:8a:
82:52:d3:2e:d8:fd:4d:3c:8f:8e:6a:e6:c2:56:3c:
89:69:2b:e9:ea:a6:b7:c1:30:99:09:8d:c3:9b:9f:
76:d3:eb:30:8a:76:e4:39:69:4a:4c:18:de:b4:77:
6b:96:f2:1d:ba:97:0a:e5:65:14:66:a9:26:e7:74:
09:87:de:31:e5:e9:15:f7:47:a2:dd:77:57:72:95:
2e:e1:fe:a9:8f:51:6d:44:2e:97:ae:65:d3:f4:ae:
dd:2b:5a:5b:e0:41:48:6b:96:17:66:61:b7:05:9e:
e9:ad:47:29:2b:af:4c:0d:9c:2d:ed:4c:6f:5c:15:
44:a5:75:a5:fc:77:f9:b4:13:06:df:a3:fe:c2:d4:
4f:80:2a:bc:18:73:90:ee:3a:79:65:0c:62:bd:2c:
0b:1c:2b:f2:b4:e9:11:a9:06:5a:36:88:37:e3:59:
74:ea:e2:64:40:02:65:19:29:17:9b:e6:5d:df:df:
0a:f0:71:c4:6c:21:b1:2c:34:07:f0:6b:6c:c7:58:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:D7:6D:8A:93:E7:8A:6E:99:6F:95:19:73:A6:86:BE:E2:72:22
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3jLXbYqT54pumW-VGXOmhr7iciI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.90.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e1:af:17:59:cc:a7:2f:fb:38:cd:a2:38:e2:a3:b7:99:26:
87:0d:ad:ed:14:6c:13:56:4f:55:11:84:7f:c6:f1:2b:cc:25:
4d:74:4d:05:fc:4c:4a:fb:1c:83:88:81:1e:c8:cc:1f:c9:ab:
74:d9:3b:d0:5c:f5:54:6a:7f:ea:47:1c:fa:fc:7a:91:a2:47:
67:7d:2a:db:c7:be:31:83:f5:92:0b:93:97:25:ed:55:07:98:
5a:1c:07:6c:1c:2d:1d:15:a1:de:a1:b7:89:34:8a:b4:d4:4b:
e8:69:21:7f:b9:0c:ae:0c:64:86:8f:f1:74:f9:05:bd:d2:08:
9e:c6:5e:42:a3:05:ad:f3:b3:7a:e8:b1:af:a9:d8:77:0b:67:
9a:64:93:5c:da:13:78:86:91:fa:35:de:92:9a:0f:55:bf:d0:
6d:2f:19:c3:d8:e0:f7:89:ae:55:e7:8a:25:b2:84:23:a9:16:
15:47:a9:0f:44:c3:d8:1f:99:b2:63:5c:d1:1e:98:82:79:16:
b7:d2:25:cf:a9:a9:d7:56:ab:d6:0b:0e:55:b7:d2:cd:7b:c5:
75:e0:82:c5:1c:9a:d3:5f:88:70:8b:d1:6b:db:8c:e8:9c:41:
fd:be:36:ad:83:80:1c:0a:64:88:c7:99:a8:0f:c4:7d:dd:e6:
f0:0c:62:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8hi0rJqrbUFvvVjx8y8oZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNzAyMDYzNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTMyZDc2ZDhhOTNlNzhhNmU5OTZmOTUxOTczYTY4NmJlZTI3MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddSrskrIaJnkLwh8TFTH35Q0H8f
ANF/KwQI6KqBo4CoUyIF3Oug2djrh/+lgRsygKHi6ofg6fjsCYqCUtMu2P1NPI+O
aubCVjyJaSvp6qa3wTCZCY3Dm5920+swinbkOWlKTBjetHdrlvIdupcK5WUUZqkm
53QJh94x5ekV90ei3XdXcpUu4f6pj1FtRC6XrmXT9K7dK1pb4EFIa5YXZmG3BZ7p
rUcpK69MDZwt7UxvXBVEpXWl/Hf5tBMG36P+wtRPgCq8GHOQ7jp5ZQxivSwLHCvy
tOkRqQZaNog341l06uJkQAJlGSkXm+Zd398K8HHEbCGxLDQH8Gtsx1jwzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4y122Kk+eKbplvlRlzpoa+4nIiMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvM2pMWGJZcVQ1NHB1bVctVkdYT21ocjdpY2lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPBaMA0G
CSqGSIb3DQEBCwUAA4IBAQCC4a8XWcynL/s4zaI44qO3mSaHDa3tFGwTVk9VEYR/
xvErzCVNdE0F/ExK+xyDiIEeyMwfyat02TvQXPVUan/qRxz6/HqRokdnfSrbx74x
g/WSC5OXJe1VB5haHAdsHC0dFaHeobeJNIq01EvoaSF/uQyuDGSGj/F0+QW90gie
xl5CowWt87N66LGvqdh3C2eaZJNc2hN4hpH6Nd6Smg9Vv9BtLxnD2OD3ia5V54ol
soQjqRYVR6kPRMPYH5myY1zRHpiCeRa30iXPqanXVqvWCw5Vt9LNe8V14ILFHJrT
X4hwi9Fr24zonEH9vjatg4AcCmSIx5moD8R93ebwDGL/
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:45 2026 by rpki-client