Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3yDXj4V_x9FXgEyO8HQGiBIjMbU.roa
File: 3yDXj4V_x9FXgEyO8HQGiBIjMbU.roa (raw, json)
Hash identifier: gOFOuJOrf6d6VwDYACgkSxlZcxlbOXkMVDTUCxxvMGw=
Subject key identifier: DF:20:D7:8F:85:7F:C7:D1:57:80:4C:8E:F0:74:06:88:12:23:31:B5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF8DD5B8006A1E5F90870BEF653CCC4C4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3yDXj4V_x9FXgEyO8HQGiBIjMbU.roa
Signing time: Wed 24 Jun 2026 09:01:56 +0000
ROA not before: Wed 24 Jun 2026 09:01:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:5b:80:06:a1:e5:f9:08:70:be:f6:53:cc:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 09:01:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df20d78f857fc7d157804c8ef0740688122331b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:e7:8f:2e:04:37:21:c4:c6:af:c3:dd:8a:
d7:30:76:cb:16:15:28:ec:e3:e4:f2:b7:b5:4f:1b:
7b:04:87:28:ce:66:58:c8:8b:6f:a3:1e:fc:36:74:
89:42:14:2f:1c:44:2a:2d:3c:9d:93:f0:8d:e2:47:
96:bd:8a:83:81:28:59:ac:55:19:d9:20:9b:34:9c:
90:56:5f:34:ef:e2:da:7f:fd:b0:29:6d:ab:7e:b9:
31:ec:42:2b:0b:e1:3a:a0:f1:e3:d3:5c:07:56:52:
e0:fe:ed:98:b5:d8:88:28:44:8f:3a:d1:b7:5f:3b:
7b:96:48:82:5b:6e:51:c5:1b:f1:66:19:3d:82:c2:
33:a2:53:bf:91:dc:a6:95:cb:cb:31:05:7c:88:8d:
55:57:1c:ca:ca:7d:cd:24:79:7b:22:1f:76:5a:cb:
a9:10:33:d7:a4:9c:ed:53:82:c0:df:f0:bc:39:58:
ed:0e:17:b7:ae:b2:7d:3f:fb:a3:ee:8e:d9:43:0a:
8a:b9:62:43:57:ca:d0:9c:75:0b:c7:f9:23:eb:0d:
73:d3:6e:37:d4:67:b2:50:10:90:af:07:e1:0d:ee:
3f:b1:f8:09:2b:c8:7a:e2:88:c5:30:b5:43:3e:f2:
16:f3:da:a9:2e:71:91:46:42:a8:8a:0e:86:28:93:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:D7:8F:85:7F:C7:D1:57:80:4C:8E:F0:74:06:88:12:23:31:B5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3yDXj4V_x9FXgEyO8HQGiBIjMbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
109.176.248.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
06:35:9b:96:f9:82:17:da:fd:57:3d:85:b8:ee:a7:25:cc:39:
4f:9e:81:01:ca:4a:31:0e:e5:62:43:2a:1f:84:e7:5b:93:82:
50:fb:9e:99:17:52:cf:24:a9:bb:c1:13:3c:36:c1:2a:10:fe:
1d:05:46:24:e1:ad:d5:0f:9d:ad:b4:bb:c9:e8:0e:d4:bb:12:
1d:9f:fa:52:e7:c4:7c:e8:35:5a:1a:c0:17:79:26:83:cc:0c:
f9:e5:8d:ff:4a:95:57:8b:a3:f1:6d:6c:16:ae:e0:ac:a8:f4:
ba:25:13:5a:6e:b2:22:8c:9d:d1:d9:3e:ac:24:20:a4:90:19:
31:fa:d8:5e:f4:0c:67:da:96:90:19:d3:72:69:c2:ac:19:fc:
fb:0b:09:1f:a4:00:d3:37:4b:40:98:96:f5:be:2a:9b:f9:58:
12:e1:fc:43:b6:9f:24:75:5c:b9:21:e7:6e:4f:4e:68:1b:19:
c8:76:c6:73:74:0d:94:c1:77:a9:d8:ab:55:a3:d9:31:df:4f:
d4:41:6b:33:72:ae:1a:23:94:df:0c:c5:09:8c:c0:66:68:6e:
2b:40:51:23:95:65:02:ff:7f:ce:05:0c:4e:15:88:53:0c:2c:
cf:ee:f5:c4:e9:fd:97:e9:be:49:ba:11:40:45:17:7e:70:f6:
94:48:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:58 2026 by rpki-client