Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B1yyjrdhVot5P0-gDDb_ivC9h4A.roa
File: B1yyjrdhVot5P0-gDDb_ivC9h4A.roa (raw, json)
Hash identifier: XtwSosOHGirLpjjCE0+aAlbCF0RV06y721euHKLksGM=
Subject key identifier: 07:5C:B2:8E:B7:61:56:8B:79:3F:4F:A0:0C:36:FF:8A:F0:BD:87:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12440F6E931F755EE4D26AD1B60E4E59
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B1yyjrdhVot5P0-gDDb_ivC9h4A.roa
Signing time: Mon 29 Jun 2026 07:24:37 +0000
ROA not before: Mon 29 Jun 2026 07:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 81.168.18.0/24 maxlen: 24
82.152.61.0/24 maxlen: 24
82.152.71.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.127.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.42.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.80.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.90.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.144.0/24 maxlen: 24
82.153.155.0/24 maxlen: 24
82.153.180.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.64.0/24 maxlen: 24
89.213.70.0/24 maxlen: 24
89.213.71.0/24 maxlen: 24
89.213.73.0/24 maxlen: 24
89.213.74.0/24 maxlen: 24
89.213.77.0/24 maxlen: 24
89.213.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:0f:6e:93:1f:75:5e:e4:d2:6a:d1:b6:0e:4e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=075cb28eb761568b793f4fa00c36ff8af0bd8780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:ee:df:82:37:0c:ae:1e:74:f9:e7:09:2d:
b5:9c:8d:4a:23:72:1c:ef:19:d8:b7:5c:4d:85:6f:
db:0e:f1:fe:ef:70:a6:7c:e5:bc:6a:3a:27:de:27:
9a:05:85:62:d8:ab:41:91:05:fc:42:cd:80:2d:87:
fc:da:98:f8:1e:e2:7e:64:74:ba:e9:3a:88:53:c2:
c4:fa:26:6f:2d:af:f9:02:ae:0c:6f:bc:77:df:9c:
bd:51:5a:5a:a3:bb:46:79:a6:9d:b1:0b:f1:a5:9b:
e4:da:a0:bb:b7:ad:3b:40:b8:e7:65:4f:cb:a3:ed:
d8:51:d6:71:a7:29:4b:22:03:8d:fe:7b:0b:b9:30:
74:b7:e7:8f:db:6c:2b:4c:e2:43:fa:db:ed:ff:6f:
fc:8f:49:7e:6e:04:5a:8c:a0:12:6d:33:00:79:52:
93:e3:1a:76:af:6e:d2:34:26:4b:0b:c6:40:7e:9e:
b7:f6:84:7f:5e:4f:f9:77:29:4f:df:3d:28:35:d6:
ba:54:03:02:0f:cd:0e:41:75:d9:bd:86:74:c6:1c:
76:98:c3:29:3d:12:b8:5c:95:41:8e:43:6c:84:c5:
73:a3:bf:79:ad:6f:5a:cc:9a:64:f2:56:de:58:7d:
9b:21:72:9a:31:e8:27:c0:7f:89:6b:7c:bc:0e:27:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:B2:8E:B7:61:56:8B:79:3F:4F:A0:0C:36:FF:8A:F0:BD:87:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B1yyjrdhVot5P0-gDDb_ivC9h4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.18.0/24
82.152.61.0/24
82.152.71.0-82.152.72.255
82.152.92.0/24
82.152.127.0/24
82.153.41.0-82.153.42.255
82.153.53.0/24
82.153.58.0/24
82.153.80.0/24
82.153.86.0/24
82.153.90.0/23
82.153.144.0/24
82.153.155.0/24
82.153.180.0/24
82.153.203.0/24
82.163.15.0/24
89.213.49.0/24
89.213.64.0/24
89.213.70.0/23
89.213.73.0-89.213.74.255
89.213.77.0/24
89.213.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3d:09:65:f1:c1:6b:8f:21:95:e0:a4:cd:4f:8f:ef:e9:c8:
d1:1e:0f:9a:e7:ed:ef:2f:81:37:f8:07:22:73:c4:b5:68:9a:
91:b3:ef:08:04:31:dc:a4:07:65:72:b7:b9:e8:08:8d:0e:f8:
82:99:eb:5d:28:a1:f8:ed:8a:ee:fe:11:02:17:0b:73:04:fa:
14:12:6c:48:1f:89:da:fa:03:c6:b3:e7:8d:7a:a3:75:a4:b8:
f4:ff:1d:80:75:f4:80:88:0d:bd:20:0b:26:4f:19:05:ea:77:
0e:d4:26:bb:84:ff:29:f3:e5:fd:98:13:25:c0:4c:88:dc:d7:
e6:b6:59:08:d1:7a:c7:0f:91:88:95:76:31:bb:bb:7c:70:48:
67:b1:68:59:35:34:cf:5f:44:8e:8c:8b:9f:a7:0d:98:9a:9d:
1c:d3:92:36:3f:36:7e:45:e4:3a:5b:4c:1d:1c:d3:17:e7:b0:
3a:91:7a:30:75:c3:73:d6:2f:21:82:37:78:b4:66:06:f3:b9:
e7:e5:09:da:8d:7a:c7:4d:0f:d9:43:55:53:84:77:2e:77:9e:
42:7e:a4:02:5f:b8:5a:cc:17:24:c1:7d:f0:81:34:c3:d5:2b:
56:ec:a8:98:66:bd:d0:48:37:58:65:29:bb:62:15:ac:04:12:
3b:00:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:48 2026 by rpki-client