Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOyUgDDKF_Ff9mpFPFPwSSH9tsI.roa
File: MOyUgDDKF_Ff9mpFPFPwSSH9tsI.roa (raw, json)
Hash identifier: g6LH/Jb4h6VYIClPigZqCZdi/Eio8XT3Yo6VsSLOyec=
Subject key identifier: 30:EC:94:80:30:CA:17:F1:5F:F6:6A:45:3C:53:F0:49:21:FD:B6:C2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019ED1311D2FB649DE39CD76B589015F2672
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOyUgDDKF_Ff9mpFPFPwSSH9tsI.roa
Signing time: Tue 16 Jun 2026 16:08:37 +0000
ROA not before: Tue 16 Jun 2026 16:08:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12200
IP address blocks: 81.168.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:31:1d:2f:b6:49:de:39:cd:76:b5:89:01:5f:26:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 16 16:08:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ec948030ca17f15ff66a453c53f04921fdb6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:9c:b4:2a:b7:de:d2:c4:e4:30:b8:24:64:
42:23:19:e1:57:91:d4:bb:89:af:8a:f3:8c:f4:64:
1e:48:d6:ac:a2:d4:38:0b:ad:87:e5:59:1b:ff:76:
42:e0:b5:70:f5:74:dc:d3:54:06:c8:f1:57:7f:99:
b0:f3:25:3c:9d:f4:6a:ce:ff:ef:61:59:51:13:75:
d0:1a:04:2e:00:77:b3:e9:8f:52:0a:8e:c4:6f:dd:
e1:17:3f:27:1f:50:84:97:2f:78:ec:a8:78:bd:3d:
2c:39:2d:21:4f:70:45:14:81:9c:d8:3d:9d:57:55:
66:03:34:6b:ed:d3:9a:fe:8c:c6:4a:92:4a:20:b8:
ea:8c:09:0a:e0:44:da:c2:7d:1b:e5:ce:52:6e:42:
f5:d8:07:85:50:c8:df:c0:aa:fb:13:28:2e:15:dd:
8b:22:d9:0e:0c:68:76:11:27:d8:7b:ba:4f:dc:af:
11:50:b9:ce:09:cc:c2:5b:f3:5b:06:77:7e:b0:2f:
3d:9b:0b:76:b4:f1:5e:90:8a:8f:bc:7f:31:7f:2c:
ad:88:a4:a6:89:dd:f6:0f:8a:6f:cd:48:83:b0:29:
c4:34:90:bb:2f:22:0e:2f:10:89:ff:e3:34:d7:42:
09:85:6b:18:4a:c1:eb:98:a5:36:27:fb:c1:70:51:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:94:80:30:CA:17:F1:5F:F6:6A:45:3C:53:F0:49:21:FD:B6:C2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MOyUgDDKF_Ff9mpFPFPwSSH9tsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.7.0/24
Signature Algorithm: sha256WithRSAEncryption
09:43:72:ea:02:d0:e6:e4:6e:c3:34:83:b4:3a:ca:9c:9c:6e:
30:68:3d:9e:d7:f1:74:0d:b2:f0:3f:1e:84:57:91:7a:da:57:
c2:0b:2d:11:74:e0:3f:f1:47:89:79:bd:be:24:e9:68:c1:c9:
7b:95:e5:2d:e3:70:de:51:0b:86:8a:94:7d:66:42:d1:2c:4f:
83:e9:2b:4b:37:76:e8:51:4d:36:aa:66:77:15:e4:2c:58:12:
98:0e:7d:0e:04:10:42:85:0e:ea:3d:6c:cf:6d:bf:f2:ba:be:
91:6d:25:e5:9a:9d:05:1b:51:70:3c:5b:28:70:c5:b7:23:bd:
b7:b3:18:2c:a2:74:d3:ac:1f:05:74:64:6d:d3:9a:90:4b:fa:
eb:60:ba:e7:b5:06:57:e2:4f:63:c7:f4:3b:1e:7d:b3:b4:01:
29:de:34:5f:2c:82:c4:39:d2:b7:13:2e:be:d2:61:48:69:13:
97:82:9e:0e:86:b4:d9:c2:54:d8:e8:9d:42:cc:e5:c4:39:a0:
16:f8:2a:3f:05:86:55:31:fe:c3:ee:c6:1b:79:aa:67:6b:70:
b7:87:2c:32:69:39:7d:a8:04:6c:d2:39:73:57:5c:6d:08:5e:
21:b5:41:af:95:96:df:64:b1:cf:83:a1:40:3a:59:7a:3c:36:
86:ca:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:11 2026 by rpki-client