Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVVoEQU3y2KXA7E3qjt-cahC1AU.roa
File: FVVoEQU3y2KXA7E3qjt-cahC1AU.roa (raw, json)
Hash identifier: SHl7M0pYpfRYY6HyFHP9usJSU00dq8/DrGJHhdEQID0=
Subject key identifier: 15:55:68:11:05:37:CB:62:97:03:B1:37:AA:3B:7E:71:A8:42:D4:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F2204270239646564B63D6BB0A92B860C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVVoEQU3y2KXA7E3qjt-cahC1AU.roa
Signing time: Thu 02 Jul 2026 08:48:45 +0000
ROA not before: Thu 02 Jul 2026 08:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.235.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:04:27:02:39:64:65:64:b6:3d:6b:b0:a9:2b:86:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 2 08:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=155568110537cb629703b137aa3b7e71a842d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:40:f6:62:23:3c:44:c6:36:b5:87:9a:b3:
d2:2a:a7:b5:4c:d1:e6:96:27:90:f7:3c:cb:1c:6a:
55:e3:9b:84:9f:b6:78:04:5c:ef:d4:12:58:9b:99:
20:57:4b:91:29:2e:33:41:9a:49:1f:80:a8:20:a9:
d1:0b:a6:2c:c6:ae:a6:b5:ec:12:14:47:78:e0:cd:
1e:77:28:b2:b8:11:d4:c0:67:aa:31:11:bd:50:b4:
d8:2f:29:76:9c:ae:73:3a:61:a1:07:e5:3b:20:4b:
89:9d:99:8a:13:3c:3a:2e:ef:a3:8b:e9:4d:50:9c:
06:e9:7b:79:0d:b5:ac:46:7c:87:6c:58:4d:8f:93:
59:16:b4:13:a5:62:59:41:2d:09:13:d3:dd:a9:47:
53:04:6e:0c:f3:e3:70:ca:37:cb:af:50:1e:ca:01:
89:60:4f:b8:05:d1:62:29:55:e5:db:41:f1:63:48:
0c:e5:6d:d1:f4:57:65:e9:54:cb:45:71:5a:59:06:
1a:17:c4:3f:e3:a2:7e:20:32:08:05:40:b6:b7:7c:
24:98:5e:cf:83:e3:f9:ca:a2:65:db:8e:f4:a8:6f:
d3:47:83:2d:ee:34:3b:9b:b4:50:68:f0:99:ff:e6:
71:b0:04:9a:1d:ad:19:da:ef:ca:c1:5d:9a:8b:86:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:68:11:05:37:CB:62:97:03:B1:37:AA:3B:7E:71:A8:42:D4:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FVVoEQU3y2KXA7E3qjt-cahC1AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.79.0/24
82.153.83.0-82.153.84.255
82.153.132.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.98.0/24
89.213.232.0-89.213.237.255
109.176.27.0/24
109.176.32.0/19
109.176.235.0/24
109.176.247.0/24
109.176.251.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0-213.218.232.255
Signature Algorithm: sha256WithRSAEncryption
87:52:37:0d:1c:12:97:99:6d:a5:23:18:27:20:ef:e2:22:08:
ea:cb:bc:4e:80:b4:1b:d5:0e:62:1b:a0:3f:35:ca:f6:a0:54:
67:14:90:a7:47:84:9c:8f:24:a0:89:fb:d2:7e:fe:46:6a:c8:
c4:47:77:13:d6:98:41:f9:61:57:77:e1:20:7d:4e:91:39:3f:
58:cb:97:c6:34:5c:80:d6:5e:87:63:3e:af:c5:4d:4b:c5:02:
56:28:34:b7:5a:f4:80:42:a2:d9:94:57:67:32:8c:e5:75:e9:
1e:b9:3d:0c:4c:f9:50:95:cf:25:e4:f6:8a:7b:03:b3:2d:a3:
61:5e:8e:77:5d:e1:70:e2:07:e4:3a:56:c3:2d:24:c3:24:f7:
30:93:7c:6b:7b:55:f6:b4:8a:1f:ba:dc:b1:7b:34:f8:1c:b6:
b1:68:0c:f1:62:d6:49:c6:e4:45:e8:13:9c:e7:18:05:b5:51:
89:fa:72:1b:15:87:b3:c0:96:75:05:ee:d2:56:da:b9:6c:0c:
55:06:d9:7a:e4:15:b5:32:4b:b2:98:ab:53:80:e6:22:5b:a0:
49:c7:91:d1:a2:55:14:b7:7e:76:fe:0f:d2:54:0f:96:43:84:
b6:25:7d:9f:88:43:f0:71:77:fc:bf:e9:da:52:18:b9:4a:40:
54:81:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:39 2026 by rpki-client