Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIdbR6PnRDwrBIRbnhxyNYFDlEI.roa
File: QIdbR6PnRDwrBIRbnhxyNYFDlEI.roa (raw, json)
Hash identifier: 2y7F0DRQbSSLnq1vLbBzPg3dYYds/gpaRpxMUb0oeus=
Subject key identifier: 40:87:5B:47:A3:E7:44:3C:2B:04:84:5B:9E:1C:72:35:81:43:94:42
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF38AC10A3D60F17435980FE425576F60
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIdbR6PnRDwrBIRbnhxyNYFDlEI.roa
Signing time: Tue 23 Jun 2026 08:13:37 +0000
ROA not before: Tue 23 Jun 2026 08:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 89.213.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:8a:c1:0a:3d:60:f1:74:35:98:0f:e4:25:57:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 23 08:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40875b47a3e7443c2b04845b9e1c723581439442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:1a:9e:61:29:72:c4:6a:10:ed:e1:89:67:
e1:66:87:88:8d:47:11:9f:61:d8:85:98:84:dc:a5:
5f:87:9a:1c:bc:ae:72:77:b8:e9:c7:66:ee:d7:39:
d1:42:a3:cb:10:58:e8:11:11:17:cc:c0:b4:2a:95:
b4:56:ce:28:d4:14:6e:81:71:72:02:05:15:b2:be:
70:81:32:06:7e:3b:8b:0c:bc:b2:3e:4a:08:d6:59:
0e:84:24:e4:97:3c:f8:3d:65:9c:d4:85:8e:a7:1d:
d3:32:e5:5b:a5:5e:18:6f:2b:12:15:19:06:35:26:
cb:b8:58:d7:e7:15:72:80:c9:39:6d:83:ce:4d:02:
c3:b2:47:80:62:5a:60:16:c1:33:f7:77:04:3d:30:
8d:28:3d:d3:fd:d3:41:e5:a1:5b:91:ce:50:fe:61:
4d:fc:08:78:b1:c6:d7:73:33:e8:95:b9:4a:6f:f3:
31:48:86:c7:41:22:e0:18:10:ef:a7:42:b4:f5:37:
0d:e5:db:be:12:f2:90:ba:ed:c4:59:33:13:12:18:
77:23:fe:27:c5:0f:f6:11:07:eb:e8:c4:69:09:cc:
ba:4f:f3:68:e5:ec:59:1d:b3:24:0b:f9:dd:de:c0:
52:17:83:33:6f:66:cb:f4:85:79:5d:2c:f3:e1:8c:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:5B:47:A3:E7:44:3C:2B:04:84:5B:9E:1C:72:35:81:43:94:42
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIdbR6PnRDwrBIRbnhxyNYFDlEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.2.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1f:6f:99:61:94:08:97:7a:cd:82:83:13:e3:2a:34:62:81:
b3:99:9d:d3:54:67:d5:32:6f:79:07:07:52:1b:31:8d:7b:ce:
45:f8:d7:28:e8:2b:70:3f:be:ce:f4:54:46:17:86:ff:22:52:
88:01:65:4b:0c:36:ae:73:07:67:f1:1d:68:a9:fe:a8:7a:b9:
5f:47:eb:f8:6c:16:52:cc:88:b1:e6:7d:08:7d:94:6f:1c:6b:
18:5b:09:4c:8f:3c:8d:41:07:df:ab:4f:34:2e:4c:ee:c5:6c:
87:25:6c:af:37:1d:13:be:11:21:be:6d:20:60:01:ab:cf:db:
51:1f:41:7f:61:d6:cc:44:8f:c0:ef:66:6d:69:88:02:2c:73:
9c:20:c9:1b:57:97:c4:77:9d:49:84:6f:cf:bd:5d:55:31:37:
77:68:25:d9:60:f3:8f:7f:fd:13:fe:29:15:fe:76:51:f2:02:
21:14:c1:65:2f:29:2c:01:37:13:5f:6a:52:6f:64:b8:e1:1f:
fd:ad:51:46:1f:96:c6:8e:28:fe:73:e8:84:03:1d:42:25:90:
b9:f0:e7:fa:aa:46:fd:18:55:cc:1f:15:0f:b9:31:50:ff:e0:
20:a6:fd:90:7d:d7:ef:4b:b9:57:47:df:8c:cd:cc:31:17:dd:
22:95:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:47 2026 by rpki-client