Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LrEinDzrI2pJohjPO5ywPGL4dEQ.roa
File: LrEinDzrI2pJohjPO5ywPGL4dEQ.roa (raw, json)
Hash identifier: SC0pQl3iJaY8wwWFm5vVx4rEry/zQiKsbJKHw64Kbqw=
Subject key identifier: 2E:B1:22:9C:3C:EB:23:6A:49:A2:18:CF:3B:9C:B0:3C:62:F8:74:44
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019ED4BB7C7375C3802B526D11AFA1A1AB41
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LrEinDzrI2pJohjPO5ywPGL4dEQ.roa
Signing time: Wed 17 Jun 2026 08:38:37 +0000
ROA not before: Wed 17 Jun 2026 08:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203054
IP address blocks: 82.152.197.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:bb:7c:73:75:c3:80:2b:52:6d:11:af:a1:a1:ab:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 17 08:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb1229c3ceb236a49a218cf3b9cb03c62f87444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:1c:bf:b1:64:d4:cb:8c:c8:12:0b:74:de:
51:3a:1c:ee:e1:ed:15:03:74:ae:6e:d2:94:8e:88:
f2:f8:bc:91:1e:e8:1e:c5:18:87:61:62:15:cf:8e:
7d:56:bb:74:3e:a7:5a:b7:c3:d7:09:27:a8:85:47:
7d:5e:b5:69:69:dd:44:2e:79:3f:50:3e:59:46:88:
a8:0a:46:0a:57:66:28:a2:2f:fa:6f:b2:9f:a8:9b:
a1:8a:93:83:a1:fd:7c:2e:4a:9c:b8:86:9d:1a:90:
d7:6c:62:05:0e:5c:60:8c:ec:b6:f3:65:6a:a4:02:
22:a5:65:d7:73:8c:ce:55:a6:bd:63:85:23:ae:4d:
2f:35:d3:28:d6:8f:3b:dd:3c:12:ca:a5:89:f7:04:
4c:30:33:f1:0a:5a:b5:57:24:36:28:b3:be:e6:95:
99:17:da:b5:b3:69:ea:42:46:37:38:27:f3:ff:e6:
6d:8c:9c:11:28:cf:2e:85:18:d5:93:d2:6c:c4:da:
ad:8e:67:ee:cc:ff:bb:54:cd:5e:22:b7:b4:2a:e6:
14:04:88:6c:d8:ab:85:dd:a5:0a:c5:22:49:b9:ff:
26:41:6a:ca:81:01:86:aa:ef:8e:1e:3d:1a:43:d3:
2f:f5:b6:18:b7:1e:a1:c5:65:f7:f6:65:7a:fe:50:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:22:9C:3C:EB:23:6A:49:A2:18:CF:3B:9C:B0:3C:62:F8:74:44
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LrEinDzrI2pJohjPO5ywPGL4dEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.197.0/24
82.152.211.0/24
89.213.161.0/24
Signature Algorithm: sha256WithRSAEncryption
73:07:fc:40:d2:2f:fa:57:81:35:e4:52:b8:8b:10:42:50:20:
ef:77:33:d8:d7:39:3d:f8:a9:00:47:40:97:12:68:0c:08:d3:
51:65:7c:ea:d3:82:15:c6:98:92:7c:40:1a:5f:ef:f5:9d:9e:
26:e6:9b:8d:fd:8a:e2:2f:9c:77:21:df:7f:77:c2:40:e1:72:
41:19:4b:01:54:a4:1d:30:23:c8:92:02:1f:4e:9b:54:ea:60:
7e:70:1d:41:91:4f:a5:44:c0:75:d9:3a:6e:81:f1:5d:07:c1:
d0:89:f6:49:9d:e6:13:4e:6c:15:c8:af:0b:41:aa:75:34:5d:
65:5c:13:00:66:f0:19:e6:21:21:93:d6:74:60:da:c9:fa:41:
68:00:f1:d8:a7:3b:2a:ad:a5:f3:1f:70:ea:3c:45:85:cf:00:
c2:2b:aa:5b:4c:82:47:50:ac:00:d8:8c:10:99:7b:1b:21:f9:
97:65:31:ac:f5:e6:89:b3:9a:14:a5:39:0e:84:95:4e:2e:3a:
13:06:38:21:e3:29:95:a9:51:21:23:11:e0:99:de:5f:87:fe:
52:4e:45:76:ab:80:b9:01:79:1b:54:41:80:4f:88:83:ad:29:
f4:2e:6e:fd:ae:af:e9:4b:de:91:15:b5:44:f7:91:6b:12:1a:
fd:1e:1f:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ7Uu3xzdcOAK1JtEa+hoatBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjE3MDgzODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWIxMjI5YzNjZWIyMzZhNDlhMjE4Y2YzYjljYjAzYzYyZjg3NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwAcv7Fk1MuMyBILdN5ROhzu4e0V
A3SubtKUjojy+LyRHugexRiHYWIVz459Vrt0Pqdat8PXCSeohUd9XrVpad1ELnk/
UD5ZRoioCkYKV2Yooi/6b7KfqJuhipODof18LkqcuIadGpDXbGIFDlxgjOy282Vq
pAIipWXXc4zOVaa9Y4Ujrk0vNdMo1o873TwSyqWJ9wRMMDPxClq1VyQ2KLO+5pWZ
F9q1s2nqQkY3OCfz/+ZtjJwRKM8uhRjVk9JsxNqtjmfuzP+7VM1eIre0KuYUBIhs
2KuF3aUKxSJJuf8mQWrKgQGGqu+OHj0aQ9Mv9bYYtx6hxWX39mV6/lB1NwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC6xIpw86yNqSaIYzzucsDxi+HREMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTHJFaW5EenJJMnBKb2hqUE81eXdQR0w0ZEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpjFAwQA
UpjTAwQAWdWhMA0GCSqGSIb3DQEBCwUAA4IBAQBzB/xA0i/6V4E15FK4ixBCUCDv
dzPY1zk9+KkAR0CXEmgMCNNRZXzq04IVxpiSfEAaX+/1nZ4m5puN/YriL5x3Id9/
d8JA4XJBGUsBVKQdMCPIkgIfTptU6mB+cB1BkU+lRMB12TpugfFdB8HQifZJneYT
TmwVyK8LQap1NF1lXBMAZvAZ5iEhk9Z0YNrJ+kFoAPHYpzsqraXzH3DqPEWFzwDC
K6pbTIJHUKwA2IwQmXsbIfmXZTGs9eaJs5oUpTkOhJVOLjoTBjgh4ymVqVEhIxHg
md5fh/5STkV2q4C5AXkbVEGAT4iDrSn0Lm79rq/pS96RFbVE95FrEhr9Hh/b
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:38 2026 by rpki-client