Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BGX3j2oCk0Qe-sc3M_u2rlF3Qwo.roa
File: BGX3j2oCk0Qe-sc3M_u2rlF3Qwo.roa (raw, json)
Hash identifier: H7wUvu3/tTb/OmddhLpo3/r1PAU07CAUWXeQNIVIcNc=
Subject key identifier: 04:65:F7:8F:6A:02:93:44:1E:FA:C7:37:33:FB:B6:AE:51:77:43:0A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F1E56FAED551177AB18F4B567A91DE018
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BGX3j2oCk0Qe-sc3M_u2rlF3Qwo.roa
Signing time: Wed 01 Jul 2026 15:40:44 +0000
ROA not before: Wed 01 Jul 2026 15:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 77.93.136.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.87.0/24 maxlen: 24
81.168.96.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
89.213.202.0/23 maxlen: 24
217.144.145.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:56:fa:ed:55:11:77:ab:18:f4:b5:67:a9:1d:e0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 15:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0465f78f6a0293441efac73733fbb6ae5177430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:ca:b0:15:05:ce:17:eb:6a:41:6e:33:e2:
88:d9:de:3c:7e:c1:e5:a7:e0:ed:a8:49:49:2c:20:
2a:97:cc:bd:80:bb:ca:d0:a5:57:3b:1d:4e:39:e1:
60:8e:39:90:8c:19:14:4b:c5:e4:81:99:66:5c:f1:
61:7e:67:e0:7c:f8:87:86:44:06:1f:11:44:45:bf:
89:bf:27:e7:01:d1:91:02:ca:b9:8f:ac:c3:cc:dc:
b0:5b:7b:50:0f:91:6c:c8:9c:b5:6c:74:fb:af:f3:
48:d2:4f:e0:25:c3:90:d5:97:e1:6f:12:a4:bb:dd:
d4:68:a8:4a:5b:e5:bd:a8:28:f0:57:a2:c0:6e:7a:
12:e0:7e:0b:a5:d2:ea:6c:54:4c:04:17:0f:3c:30:
6a:00:dc:8f:9f:5d:94:f3:e0:ca:4e:fb:87:78:01:
36:bf:7a:f7:4f:fc:1d:46:03:ba:cd:15:dc:dd:06:
f9:b2:af:78:c4:b4:ac:b8:82:e8:fe:47:c8:0a:dc:
b7:53:c1:d2:ad:c1:73:31:81:58:2c:17:49:49:af:
6c:7f:f4:71:76:48:9a:ef:e3:cc:da:f7:2f:98:8a:
ab:83:18:26:87:fe:f4:8f:6f:84:80:a9:50:b1:f6:
25:fb:14:fd:18:4b:70:b3:2b:de:81:13:36:76:b5:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:F7:8F:6A:02:93:44:1E:FA:C7:37:33:FB:B6:AE:51:77:43:0A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BGX3j2oCk0Qe-sc3M_u2rlF3Qwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.136.0/24
81.168.58.0/24
81.168.87.0/24
81.168.96.0/24
81.168.122.0/24
89.213.202.0/23
217.144.145.0/24
217.144.153.0/24
217.144.156.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e3:de:4c:d3:0b:bf:a6:af:b0:75:8d:8c:09:34:0b:de:1e:
dd:2e:c7:c6:b2:a5:66:61:15:66:a6:42:83:a4:7f:49:56:ea:
70:a7:28:37:48:3c:33:1b:ed:c2:03:45:a5:b7:96:36:fe:f4:
3f:06:75:de:ca:ec:95:4f:ff:15:4d:5c:c8:2a:6f:2f:5c:1a:
f1:b7:9e:e6:21:3d:88:1d:42:f0:55:5b:8e:7f:f5:1f:13:bb:
1f:0a:45:83:04:64:ed:18:6e:b6:9c:c0:06:0e:28:b8:29:eb:
a4:21:94:d1:3d:f6:f2:bd:b4:10:39:4b:ab:a2:94:12:0b:5c:
98:a3:fa:a0:b6:ff:92:91:53:e2:6c:38:6b:f7:63:55:5f:6f:
8c:a1:40:7b:fa:44:0f:c9:5b:ec:20:50:45:e6:07:1d:04:19:
dc:14:6d:69:fc:68:c8:c4:ae:d2:65:4b:95:f0:fb:70:69:a9:
ec:32:71:5c:bd:75:97:e2:5e:dc:5c:a2:09:81:f4:90:92:93:
54:01:63:09:d0:7e:ab:89:a6:c8:c8:1a:76:1d:1a:32:72:20:
a1:9b:7d:2d:0a:0d:cd:85:c9:3c:bd:39:94:a5:f8:d4:b2:c9:
49:f7:72:14:ca:e6:b0:f0:b7:b0:6a:74:87:b4:98:6e:d9:cd:
a4:73:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:21 2026 by rpki-client