Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9AgOZpNp_eziBNnjnIKs1hkK3kA.roa
File: 9AgOZpNp_eziBNnjnIKs1hkK3kA.roa (raw, json)
Hash identifier: AWGCSEojkAzMUJszUpWw5NKjtIsmI/7ju2ozBxHyGuo=
Subject key identifier: F4:08:0E:66:93:69:FD:EC:E2:04:D9:E3:9C:82:AC:D6:19:0A:DE:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF49AA8DB173C1F2E7F4D55D46148C043
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9AgOZpNp_eziBNnjnIKs1hkK3kA.roa
Signing time: Tue 23 Jun 2026 13:10:36 +0000
ROA not before: Tue 23 Jun 2026 13:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 81.168.104.0/24 maxlen: 24
82.153.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:9a:a8:db:17:3c:1f:2e:7f:4d:55:d4:61:48:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 23 13:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4080e669369fdece204d9e39c82acd6190ade40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:0b:cf:af:b8:30:5f:78:c4:bd:a5:08:75:
a2:db:82:69:af:70:d3:80:60:8b:51:7d:87:22:4f:
32:9a:ba:da:4d:0f:8b:9d:17:08:3c:ff:7e:a1:aa:
d2:41:fb:ad:9c:11:3a:9a:4c:dc:0e:60:c1:bb:2d:
dd:7b:13:8b:f5:11:b4:c0:29:26:d7:f9:f8:8b:5b:
86:bb:52:70:d6:e8:cf:d0:24:24:c5:9b:f3:3c:dc:
4c:d0:52:f7:c0:f9:fc:19:b4:86:34:98:6f:6c:70:
75:2e:94:09:2d:9d:6b:ae:83:39:26:c5:69:f7:e3:
0a:b6:72:2c:65:02:91:c5:d7:3e:d3:dd:9e:06:d3:
30:bd:8d:47:ed:ec:b2:43:13:b5:ac:aa:ab:e0:22:
a9:37:0c:3a:3c:4b:e7:4c:9f:94:98:8e:99:4b:f8:
c9:80:e2:40:de:7f:6d:56:1b:10:9f:43:ec:40:2b:
a3:06:ba:e5:b1:b7:28:35:37:11:23:b2:a3:33:de:
5d:34:ba:6d:dc:94:5c:fa:07:bd:cc:6b:75:25:32:
25:35:1d:88:08:2e:88:03:95:dd:14:45:87:66:f8:
51:30:a1:77:00:6b:f7:ed:c9:7c:e4:b9:6a:f2:32:
99:92:ea:87:c5:fa:92:d1:d9:05:b4:64:90:3d:5c:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:0E:66:93:69:FD:EC:E2:04:D9:E3:9C:82:AC:D6:19:0A:DE:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9AgOZpNp_eziBNnjnIKs1hkK3kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.104.0/24
82.153.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:27:64:fc:a0:4e:23:58:5b:dc:36:5b:d3:a8:b2:f5:8f:db:
12:43:ec:80:07:29:d2:e4:e3:60:ac:1f:67:44:5f:1c:62:90:
82:df:d7:a4:3d:c4:a6:7a:f7:f0:ac:43:35:2f:3d:df:a7:65:
1c:3d:39:f0:c6:29:e3:64:c4:41:62:6c:82:b9:95:c6:43:26:
cf:da:5c:59:12:a6:b8:94:ed:76:00:45:37:a4:84:92:66:0a:
b0:8d:3e:49:fb:ec:2c:e0:07:72:5b:d8:ee:e7:b8:d2:cb:41:
dd:de:31:a5:59:f5:2b:b3:6f:fc:32:8c:a1:8b:a2:88:65:7f:
83:4c:f1:bd:6c:9d:f3:71:99:2c:20:2c:34:08:f0:8a:75:38:
72:72:16:3b:7c:24:7f:59:20:85:69:06:ed:65:42:a7:9c:e6:
e3:a1:7d:5d:0a:7b:50:b9:f5:bc:eb:84:e9:01:27:21:be:3b:
79:92:bd:09:ef:e7:b6:76:16:26:00:af:62:15:21:ef:e5:e1:
df:9a:cf:87:03:2b:09:5f:e3:6c:19:5d:44:30:e3:e6:3e:19:
49:22:01:c2:36:a2:fb:ee:12:8e:86:f3:12:40:f6:e0:8e:9a:
ab:c9:f1:31:6f:12:8a:cc:94:10:11:3b:99:fc:9d:3b:50:94:
5f:f2:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:45 2026 by rpki-client