Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bb_5dmYlimI7GubNnjSixwG8Y4c.roa
File: Bb_5dmYlimI7GubNnjSixwG8Y4c.roa (raw, json)
Hash identifier: 3G9tErdaakEHSmIrJ0GnnRnuRe31M39OFJzdd8dkRo4=
Subject key identifier: 05:BF:F9:76:66:25:8A:62:3B:1A:E6:CD:9E:34:A2:C7:01:BC:63:87
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F152D1B93DFDFED5896883E0850C524A3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bb_5dmYlimI7GubNnjSixwG8Y4c.roa
Signing time: Mon 29 Jun 2026 20:58:25 +0000
ROA not before: Mon 29 Jun 2026 20:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.136.0/24 maxlen: 24
77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.63.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.87.0/24 maxlen: 24
81.168.96.0/24 maxlen: 24
81.168.105.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.11.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
217.144.145.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:2d:1b:93:df:df:ed:58:96:88:3e:08:50:c5:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 20:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05bff97666258a623b1ae6cd9e34a2c701bc6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:e4:59:c2:32:e8:86:99:1e:e4:f2:89:86:
d1:73:54:2b:d2:f3:b9:c2:30:64:6f:1a:67:b8:0b:
91:93:77:9d:80:c8:c8:10:73:82:b3:d8:53:3d:e9:
3f:dd:f0:b9:eb:11:e6:e2:c1:52:ff:db:eb:d0:a5:
a9:97:59:1d:f2:00:e5:c4:7d:92:76:b5:e6:5a:3e:
e9:ac:1f:59:4f:e0:90:e3:24:7d:13:f9:07:b7:a0:
64:3a:d3:81:ac:37:bc:5e:1f:7c:61:95:30:36:68:
37:5b:65:24:b2:28:53:33:13:00:ea:9e:ee:c7:51:
3c:73:5b:72:0b:c9:72:de:2d:1f:9a:66:ad:80:29:
db:3a:f4:6f:ae:c0:2e:a8:55:e2:1c:ff:df:70:23:
c2:74:1b:40:08:3a:b6:7e:11:88:b3:8d:05:0c:4c:
ea:58:c9:c8:68:7a:62:34:f3:5c:e0:a9:c2:53:7e:
a0:46:55:6b:39:43:ea:59:d8:d8:7d:df:79:ff:64:
4e:72:09:7a:fe:fc:af:89:f2:f4:8d:a2:91:ee:a4:
26:b7:5b:ba:34:4d:22:f3:d1:de:76:db:04:ed:9a:
64:e0:dd:36:c0:57:80:a1:b4:f9:b0:3e:90:51:2b:
b5:9e:99:b1:6a:82:3e:96:02:ab:5b:aa:ff:20:9e:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:F9:76:66:25:8A:62:3B:1A:E6:CD:9E:34:A2:C7:01:BC:63:87
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bb_5dmYlimI7GubNnjSixwG8Y4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.136.0/24
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.63.0/24
81.168.65.0/24
81.168.87.0/24
81.168.96.0/24
81.168.105.0/24
81.168.125.0/24
82.152.1.0/24
82.152.11.0/24
82.152.102.0/24
82.152.117.0-82.152.118.255
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
217.144.145.0/24
217.144.156.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ca:47:04:ae:87:84:df:06:ad:73:f3:3c:a8:53:b2:46:b7:
07:e8:84:79:80:15:50:31:3f:06:28:e5:1b:6b:21:6a:78:91:
5a:ac:c6:23:ed:39:6b:cb:c6:75:09:6f:1d:ac:f7:f4:65:7d:
1f:e4:c1:ff:06:44:f4:2f:11:54:89:23:ca:f7:4e:18:9a:9d:
2a:c4:c5:70:26:fc:91:2b:d9:aa:d0:d0:78:9c:5a:83:5f:64:
05:02:b6:c5:a5:05:fa:5b:3c:f6:75:6d:c7:a3:4d:bb:4b:47:
7f:bf:cc:71:a8:62:1f:fe:91:a3:3c:3c:02:08:26:a0:07:3d:
60:15:93:0f:42:70:92:13:af:38:e5:09:f5:e0:41:52:b9:ef:
a3:c6:b8:86:1f:63:80:5f:b2:aa:3d:fb:ba:ef:57:44:5d:2a:
9f:74:e3:fa:11:96:d6:97:1a:be:e0:15:51:82:6e:8d:22:5f:
ac:a7:6f:b1:25:5c:d7:eb:7c:98:fc:cd:75:96:ed:d5:dd:dd:
e8:94:24:38:06:9c:69:22:2e:45:62:09:50:14:e8:98:74:74:
af:0b:9b:ff:e2:0a:37:7b:c6:b8:ed:85:c0:77:61:ac:a7:6e:
c0:07:f7:41:48:2f:51:fd:a2:df:2c:e4:a3:28:bf:7d:fd:d6:
37:07:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:50 2026 by rpki-client