Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSLNWbf9EaFCqJjtmxIp2K5BSDo.roa
File: HSLNWbf9EaFCqJjtmxIp2K5BSDo.roa (raw, json)
Hash identifier: b7Cl9YeeDyPjr4FS9kSS9S8k/eb9i1cCOeSQQUhqEYM=
Subject key identifier: 1D:22:CD:59:B7:FD:11:A1:42:A8:98:ED:9B:12:29:D8:AE:41:48:3A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12441164B6A29BA2762AA95D2C95389A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSLNWbf9EaFCqJjtmxIp2K5BSDo.roa
Signing time: Mon 29 Jun 2026 07:24:38 +0000
ROA not before: Mon 29 Jun 2026 07:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 81.5.160.0/24 maxlen: 24
81.5.161.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:11:64:b6:a2:9b:a2:76:2a:a9:5d:2c:95:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d22cd59b7fd11a142a898ed9b1229d8ae41483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:c8:2e:99:52:1f:b1:2a:aa:84:45:6b:83:
6b:1a:3b:3d:8e:cc:09:de:84:11:f6:8b:d6:ab:ec:
2f:ef:e2:87:30:04:78:7e:b1:32:64:ac:c9:92:3b:
0e:e0:1a:3f:7f:57:f6:db:d3:9f:ca:27:98:40:4a:
c5:91:ea:c3:f6:f3:33:6c:3c:a3:46:26:d7:55:0a:
03:ba:11:af:45:21:56:b6:b9:39:2a:5e:3f:f5:b9:
98:d9:8f:17:93:5e:f1:17:57:63:a9:d4:d4:4d:2b:
5a:c5:1c:2c:bb:3c:f5:a9:f2:58:c3:6d:99:3a:cc:
04:53:e4:2b:08:1e:8c:3b:ba:1c:3b:ac:b2:0e:51:
8b:a9:67:31:4e:c5:44:bb:91:e5:66:3d:ee:5d:d0:
03:42:53:3f:51:de:41:5c:4e:f1:16:9e:74:da:44:
e1:0b:76:bb:2e:45:a8:4d:34:2c:e5:62:0f:0b:4d:
0f:bb:f6:d5:de:5f:5a:38:a4:ab:e3:36:d2:fd:01:
d4:cd:02:71:d1:8a:05:cb:f1:d4:cd:62:f9:a8:c5:
15:b7:34:7f:5a:3b:62:76:ae:9e:e2:f4:be:c2:00:
ba:8a:58:95:9a:5a:af:b5:bb:56:e5:64:05:34:5b:
37:90:61:1f:40:57:98:2e:7d:6e:4d:e5:de:d0:b3:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:CD:59:B7:FD:11:A1:42:A8:98:ED:9B:12:29:D8:AE:41:48:3A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSLNWbf9EaFCqJjtmxIp2K5BSDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/23
82.152.63.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d8:a7:2a:ad:87:4c:3a:44:56:72:7a:4e:8f:39:0b:9a:98:
ec:e4:8b:72:8d:81:b8:45:b0:7c:9c:a7:61:2d:e6:b8:2d:ea:
31:16:f9:bd:1e:d8:ea:a8:62:70:da:e5:2a:b8:06:70:df:71:
8e:39:24:7e:31:f8:97:bd:ff:93:62:20:ee:a9:34:e6:15:71:
f8:e8:f9:86:22:db:7b:b4:3b:92:4d:7d:04:f2:ca:a3:54:c8:
18:5d:ff:b4:7e:3f:70:07:a8:9d:00:2f:a9:ca:86:7a:84:bf:
5f:53:b6:6c:15:5e:7f:7f:09:bb:17:5a:9c:08:97:41:6a:96:
11:30:4e:9c:0c:22:18:77:21:ae:02:ac:32:bb:eb:49:34:d9:
cf:de:83:5b:d2:0b:f1:46:75:fc:d9:fb:34:73:da:cf:32:bf:
8f:b4:5e:7e:03:9e:9c:4e:ba:23:c7:b9:96:99:37:8e:a1:6c:
0a:c7:bf:c9:35:c4:32:5c:eb:ee:52:69:73:56:d1:7e:64:39:
4e:b8:74:1e:28:9e:ce:e7:bd:a1:fd:0f:ce:8a:3c:a0:2d:29:
e6:82:8a:d5:2b:79:5a:fe:57:7b:d1:3b:87:3f:f7:67:ba:d8:
5a:47:6a:30:cb:2b:d0:6d:2d:93:9f:ba:48:1b:71:21:a5:bd:
21:ed:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:10 2026 by rpki-client