Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Og8WeP-xAgbHb6NzczmpH8HdpI.roa
File: 5Og8WeP-xAgbHb6NzczmpH8HdpI.roa (raw, json)
Hash identifier: OQDi0O3epr4v5oynDVHbGJyZOlx3JClTdG22N29iRD4=
Subject key identifier: E4:E8:3C:59:E3:FE:C4:08:1B:1D:BE:8D:CD:CC:E6:A4:7F:07:76:92
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F22E1B3650C290D6A65BB78A1D5B447B4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Og8WeP-xAgbHb6NzczmpH8HdpI.roa
Signing time: Thu 02 Jul 2026 12:50:44 +0000
ROA not before: Thu 02 Jul 2026 12:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 80.240.95.0/24 maxlen: 24
82.152.56.0/24 maxlen: 24
82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.113.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.125.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.137.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:e1:b3:65:0c:29:0d:6a:65:bb:78:a1:d5:b4:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 2 12:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4e83c59e3fec4081b1dbe8dcdcce6a47f077692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:97:1a:de:9e:16:7d:b6:5b:7d:90:5b:7b:
d0:72:1f:27:19:cf:b1:01:b2:c2:4f:7d:cd:77:a6:
5b:eb:1b:ab:c3:ff:45:e9:56:4c:82:a1:b5:82:5e:
1e:a0:de:7f:26:b7:d5:2d:a6:f1:8a:4a:84:11:18:
da:ba:3b:0d:d7:67:a1:74:af:3e:6f:16:8d:83:ba:
1a:7d:b3:64:2b:fe:75:0b:fa:75:81:d5:42:e7:0f:
5b:df:f6:3a:36:df:dd:83:00:bf:7e:69:69:71:c2:
6d:11:c1:00:1e:05:10:5b:24:7d:e3:e7:5d:af:f4:
a6:dc:ec:59:fe:2b:9b:14:c1:38:0b:a4:81:da:cb:
dc:a8:fb:e7:71:d2:9e:24:fc:0b:cc:6f:90:04:64:
38:a5:c3:12:44:ce:e7:84:c5:ad:12:6b:43:6c:4e:
0a:bb:96:72:f1:cd:7f:1c:9e:ef:e4:2f:1b:74:1b:
3f:4e:42:03:6f:cd:5e:07:92:f8:96:a2:dc:23:d4:
22:4a:99:1a:4e:98:87:28:83:f6:ad:69:bf:72:42:
bb:84:81:4c:53:11:a1:4a:d1:bf:d0:14:f7:26:25:
b4:d2:fe:2b:ff:e7:b5:90:13:fc:97:b5:de:aa:ae:
24:45:30:90:7e:7b:09:a8:7f:1b:5b:d0:67:b6:35:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:3C:59:E3:FE:C4:08:1B:1D:BE:8D:CD:CC:E6:A4:7F:07:76:92
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Og8WeP-xAgbHb6NzczmpH8HdpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.95.0/24
82.152.56.0/24
82.152.78.0/24
82.152.80.0/24
82.152.112.0/23
82.152.119.0/24
82.152.123.0-82.152.126.255
82.152.135.0/24
82.152.137.0/24
82.152.185.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.47.0-82.153.48.255
82.153.59.0/24
82.153.87.0/24
82.153.176.0/24
82.153.188.0/24
Signature Algorithm: sha256WithRSAEncryption
38:12:c6:cb:2a:79:20:db:15:39:18:da:5e:4e:9a:58:09:f4:
c8:3c:08:d6:6d:2b:e2:68:55:fd:63:33:9e:c5:0f:42:00:20:
07:be:43:cf:d6:ae:4b:9b:72:37:82:36:10:5c:b8:1f:5f:3f:
ad:d4:4e:12:bb:52:d1:5a:c9:45:6d:d0:0a:1d:65:3f:95:d3:
aa:a7:21:92:d9:53:c0:50:01:54:46:5a:dd:e1:d0:db:21:8d:
9e:5d:5d:56:cf:79:a1:b3:51:ad:c3:fe:3b:87:4f:98:5c:6e:
db:23:e9:4b:c0:50:42:02:3c:ea:47:4b:6f:8e:22:e8:f8:47:
be:88:4c:ae:cb:c1:d7:0d:fd:2b:1d:ad:ea:51:20:b6:37:39:
5c:e2:40:9f:b7:2d:0e:9f:38:06:11:7f:bf:76:07:b6:a5:3c:
6b:9f:c0:c4:c0:fe:71:26:54:53:c7:2f:8d:17:2d:f3:1e:35:
00:d2:df:46:24:4f:f8:2e:ab:b2:01:1c:e6:2f:39:89:ea:6e:
1a:6f:27:8d:c4:b1:83:23:85:af:e6:9e:02:28:2e:7b:66:8b:
21:4c:88:a7:b7:f7:06:f2:7a:ee:d8:df:70:ad:d8:cb:35:8b:
ba:b4:fb:7d:54:6f:a1:49:31:72:9e:7c:c2:e8:58:bf:1c:8e:
2a:ed:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:22 2026 by rpki-client