Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZTTbo_O7epnveNr1ugq0-FGiCcU.roa
File: ZTTbo_O7epnveNr1ugq0-FGiCcU.roa (raw, json)
Hash identifier: OUj4QGr4go6G5BhtFHRTCIfual6DArJzM3pxQHldLrU=
Subject key identifier: 65:34:DB:A3:F3:BB:7A:99:EF:78:DA:F5:BA:0A:B4:F8:51:A2:09:C5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019ECA59552C3503130A90E21C289F9BC748
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZTTbo_O7epnveNr1ugq0-FGiCcU.roa
Signing time: Mon 15 Jun 2026 08:15:12 +0000
ROA not before: Mon 15 Jun 2026 08:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 82.152.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:59:55:2c:35:03:13:0a:90:e2:1c:28:9f:9b:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 15 08:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6534dba3f3bb7a99ef78daf5ba0ab4f851a209c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:e2:75:a0:89:16:5a:c8:5b:62:5f:7f:2a:
27:45:57:bd:ea:a7:c5:76:4a:68:92:7e:83:33:b1:
24:64:a7:a4:59:6a:dd:ee:d0:a6:d7:85:b8:02:a7:
88:fc:58:10:33:fa:01:46:ef:cd:5f:bb:ef:d3:05:
11:9e:ae:50:df:86:7c:be:e6:73:46:71:87:76:a2:
dd:f5:c4:5a:d2:9c:e8:48:16:58:13:ec:8c:3e:46:
52:d7:e8:57:65:b9:92:c9:71:07:55:68:d0:34:96:
1e:23:ae:ca:70:1a:98:d0:c7:c7:59:1c:1f:e1:d3:
f1:3d:61:ee:a4:31:b3:77:3c:85:a2:c2:f0:2e:6e:
27:1b:b9:f6:54:c1:19:9e:31:14:66:09:5d:cd:cb:
5e:a1:7d:df:25:3e:d6:40:4d:3e:69:ff:8b:22:58:
7a:96:5d:91:e7:a3:c5:2d:10:0c:88:87:84:da:80:
11:13:d5:39:f3:5b:a0:89:89:f8:66:bc:25:e9:e9:
cc:fb:87:48:42:0c:1e:66:d3:40:3e:7f:80:fe:40:
83:38:3d:be:4c:f6:28:13:87:0b:d8:ea:b3:2b:61:
6d:be:6a:8e:5a:ff:31:f7:31:e0:03:0f:a5:6e:06:
eb:3b:aa:58:4b:fd:cd:b7:d5:2c:af:83:6b:6c:91:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:DB:A3:F3:BB:7A:99:EF:78:DA:F5:BA:0A:B4:F8:51:A2:09:C5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZTTbo_O7epnveNr1ugq0-FGiCcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.194.0/24
Signature Algorithm: sha256WithRSAEncryption
51:41:a7:df:38:32:ba:10:27:33:8f:6e:10:24:02:22:83:e1:
aa:97:e1:f4:ad:71:4c:b1:d8:69:3d:55:46:37:3d:a2:86:76:
1f:91:1c:09:5a:e0:34:55:a2:30:95:4a:55:e2:1e:21:59:57:
e3:5f:2c:a1:d7:69:02:69:2a:36:06:e0:91:3f:44:21:1f:9d:
25:ed:4b:e8:5f:34:11:87:3c:f3:35:fd:28:29:a5:14:20:79:
c7:d4:3b:33:b5:77:5e:75:ad:83:e9:c9:9e:bd:0c:29:9c:9e:
78:56:49:d4:93:eb:fa:b3:12:54:b8:64:57:ce:18:16:7c:1c:
71:4b:6e:ea:88:ff:33:df:89:bf:69:6c:46:e0:26:00:24:a7:
a9:01:d8:52:df:86:99:0d:53:09:d2:64:f6:ce:8f:fe:69:ea:
eb:f1:ab:e1:18:14:ea:38:28:9b:bc:b2:ec:fa:05:2d:c7:d7:
65:97:4e:5f:20:4a:7f:04:b6:51:f3:5f:8c:9d:ed:93:22:da:
71:65:25:97:33:6d:75:93:3f:f0:2d:ef:a9:4b:48:9f:da:1f:
eb:a3:e8:46:89:67:7a:2d:52:9f:42:c8:5b:20:ef:17:38:b3:
90:73:85:14:cd:16:dd:68:6f:7a:6b:4a:7f:8e:88:70:22:20:
26:dd:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:42 2026 by rpki-client