Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dIGtxW3iwPPSPqqTXX1oDkoX9P0.roa
File: dIGtxW3iwPPSPqqTXX1oDkoX9P0.roa (raw, json)
Hash identifier: 4xc8nREABKhAYlwUeQNWe2yvi2agLdNYPAbK4fkY6WE=
Subject key identifier: 74:81:AD:C5:6D:E2:C0:F3:D2:3E:AA:93:5D:7D:68:0E:4A:17:F4:FD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F1DEA07927ADDA9DB914F62076F6E824A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dIGtxW3iwPPSPqqTXX1oDkoX9P0.roa
Signing time: Wed 01 Jul 2026 13:41:44 +0000
ROA not before: Wed 01 Jul 2026 13:41:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 82.152.7.0/24 maxlen: 24
82.152.107.0/24 maxlen: 24
82.153.52.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
82.153.231.0/24 maxlen: 24
89.213.69.0/24 maxlen: 24
89.213.72.0/24 maxlen: 24
89.213.75.0/24 maxlen: 24
89.213.76.0/24 maxlen: 24
89.213.78.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ea:07:92:7a:dd:a9:db:91:4f:62:07:6f:6e:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 13:41:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7481adc56de2c0f3d23eaa935d7d680e4a17f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:4c:78:05:71:2b:a8:2c:2f:b2:14:60:15:
7a:60:63:11:23:a5:fd:8c:94:49:f0:ef:d2:df:67:
4a:de:78:f0:33:a5:64:e8:7f:14:6a:03:95:a5:21:
81:e1:36:b7:82:c0:d8:61:08:3f:1d:dd:a5:0a:2a:
96:f3:e8:6e:2e:57:cb:b5:0d:7f:b3:05:56:36:e2:
6b:2e:ec:63:69:86:0a:77:d9:92:d2:0f:56:00:b6:
b6:2e:16:47:a3:ce:fc:8a:ee:b6:34:2c:a2:eb:f0:
1f:5b:bb:be:f0:ea:a7:ca:1f:5c:94:04:58:cb:9b:
0c:65:bc:ef:67:f9:9b:10:79:c5:ab:36:d0:9d:0f:
98:75:b9:73:9f:6d:ad:1c:1c:46:79:d5:77:3f:01:
73:b8:91:64:c6:0d:d1:b0:5e:d2:eb:60:66:be:48:
d7:aa:07:87:a5:3b:6a:b1:88:30:c8:c6:7f:07:98:
bc:cf:9d:16:02:41:44:7a:b6:16:ad:ae:23:8d:4b:
5f:dc:3c:b5:21:48:bf:e0:13:08:9a:d9:39:52:3a:
5c:c0:42:5f:f1:74:13:fe:38:f6:f3:09:75:a5:ff:
37:38:7c:6a:81:71:01:d0:a9:7d:27:76:28:0f:35:
b5:c0:79:b4:47:91:fb:96:1a:79:30:0b:22:0b:78:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:AD:C5:6D:E2:C0:F3:D2:3E:AA:93:5D:7D:68:0E:4A:17:F4:FD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dIGtxW3iwPPSPqqTXX1oDkoX9P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0/24
82.152.107.0/24
82.153.52.0/24
82.153.228.0/23
82.153.231.0/24
89.213.69.0/24
89.213.72.0/24
89.213.75.0-89.213.76.255
89.213.78.0/24
109.176.212.0/24
Signature Algorithm: sha256WithRSAEncryption
66:51:c4:47:04:16:df:6a:bb:38:bf:8a:18:3b:d6:12:18:d1:
63:00:72:a1:e4:8e:7d:41:ee:d9:86:f9:da:90:ff:f7:4b:2e:
50:fe:bf:27:07:df:5b:3c:0f:33:b6:a3:ae:a7:8f:d6:00:ad:
69:7f:70:49:56:aa:23:bb:f3:44:f8:5f:c5:ea:9b:b0:37:b2:
1a:9f:ff:3e:c2:55:3a:17:69:f2:aa:22:58:e1:dd:a6:66:31:
d8:06:3f:28:64:33:d7:f5:f3:fd:07:18:f8:0d:a3:a4:bc:36:
d2:71:63:b9:41:f4:59:ab:fc:9c:8f:de:fa:10:10:42:ad:b9:
9a:39:fb:9f:6d:3c:27:fd:b6:f9:ed:91:1c:ae:d7:c6:2f:b6:
89:ba:04:6d:80:3b:5b:39:0b:a7:6a:00:46:0d:84:8c:80:9c:
17:9f:66:38:e9:06:93:7f:25:75:ce:e4:22:10:1e:8d:72:07:
83:23:ec:bf:2d:93:e4:7e:7a:f7:18:07:0e:63:0e:0b:7b:ed:
fd:48:08:4f:1e:da:26:6f:a8:b2:5c:56:d3:ff:95:bb:79:06:
e1:39:ce:39:a5:20:ad:48:b7:e4:e3:55:ab:14:7b:57:24:78:
ab:1e:08:fe:8f:d7:b8:f4:e6:58:cc:b7:ba:ee:72:49:7f:dd:
24:78:23:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:08 2026 by rpki-client