Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JosQJhVp9cd8woGT7-wCw1LyGYw.roa
File: JosQJhVp9cd8woGT7-wCw1LyGYw.roa (raw, json)
Hash identifier: imPJqymnXhhF6HLa4F7TDNY+L3YQ87siMbG/G6dT2mc=
Subject key identifier: 26:8B:10:26:15:69:F5:C7:7C:C2:81:93:EF:EC:02:C3:52:F2:19:8C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F1CC7CF6DED7DF1802995861199363E77
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JosQJhVp9cd8woGT7-wCw1LyGYw.roa
Signing time: Wed 01 Jul 2026 08:24:44 +0000
ROA not before: Wed 01 Jul 2026 08:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 81.5.160.0/24 maxlen: 24
81.5.161.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:c7:cf:6d:ed:7d:f1:80:29:95:86:11:99:36:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 08:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=268b10261569f5c77cc28193efec02c352f2198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:9b:eb:38:3a:19:26:98:e9:11:e8:0c:f4:
22:f5:6c:bf:76:00:95:80:8d:aa:7e:9e:7a:e2:c0:
8b:ac:da:f5:e9:34:0b:91:7c:b0:a2:bc:2f:c6:e7:
76:b1:d7:df:08:61:92:33:30:52:3a:0a:d9:97:39:
fb:10:0e:af:8d:fa:e9:c4:ff:ee:4d:5a:3a:7b:0b:
b5:e7:bb:4e:a1:23:c0:88:70:d4:81:07:96:8f:c3:
34:46:f3:4f:d6:4e:d5:99:e7:e7:aa:20:fb:0c:76:
0a:a9:8c:87:9c:8e:84:75:48:f8:3c:67:74:11:6f:
88:7c:ca:a2:df:0b:ab:4f:f3:b1:cd:e6:1d:86:33:
fa:6e:4b:fc:42:e2:84:8b:b3:45:5a:da:fe:07:86:
de:07:61:b9:57:df:df:fc:7e:3e:fa:37:52:28:fe:
d4:25:c1:47:01:9d:a3:b0:11:85:12:72:68:a3:82:
b2:eb:5a:c6:94:71:bb:53:5f:77:fd:d6:08:3a:76:
2f:78:d7:83:08:8f:81:f6:8e:04:1b:e1:78:6c:c8:
42:30:f3:a4:8c:59:7b:9e:1f:8f:ac:a0:d8:e1:84:
9f:f8:b6:10:57:2a:d8:83:c8:55:d2:fc:31:73:f4:
69:8a:a3:ab:ae:df:82:3a:03:d0:0c:87:9b:7c:90:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:10:26:15:69:F5:C7:7C:C2:81:93:EF:EC:02:C3:52:F2:19:8C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JosQJhVp9cd8woGT7-wCw1LyGYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/23
82.152.63.0/24
82.152.220.0/24
82.152.223.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
58:69:cf:85:96:2b:c4:6e:e0:a3:30:c2:06:b7:42:19:e7:36:
ba:98:b3:43:79:8c:1a:44:40:c8:7d:43:88:d8:40:7a:c9:cc:
6c:8b:8c:2c:22:dd:07:f7:94:27:4b:e6:27:8b:31:18:d1:6b:
bb:5f:b5:06:72:a6:c9:24:cf:8c:0c:6e:fd:51:1e:fd:30:47:
07:56:b0:a1:ac:a4:86:f5:b2:5a:28:54:77:5b:04:73:85:ff:
92:4a:2b:2b:b8:67:30:d5:d5:1b:3b:33:17:ed:19:db:4f:90:
d3:9a:ba:0a:03:82:cb:a5:3f:4c:84:15:01:07:49:da:06:e6:
9b:7a:f9:06:ea:6d:90:66:75:58:18:0d:68:24:8f:bb:f9:70:
01:a0:7d:79:ef:7c:71:f1:f9:b9:1b:0f:1d:a0:c7:9f:d4:a4:
57:05:6a:3e:cb:3e:34:26:d0:b5:36:21:f8:d6:e6:c1:af:eb:
a2:10:35:fb:21:0e:e0:5e:6e:d4:90:16:c4:45:49:b0:ab:c3:
d7:41:8c:44:56:0e:67:0e:5d:75:4d:ca:a1:15:11:f2:55:1f:
5a:08:3a:d8:58:c5:69:a4:80:fa:3a:8f:e3:4c:8b:13:c9:52:
a1:4a:9e:7e:30:14:e7:d0:f8:70:37:9d:c1:bf:bf:51:a6:0e:
c9:46:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:00 2026 by rpki-client