Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hEVvdYMzmeNUQFwrAX7rI1UM4aI.roa
File: hEVvdYMzmeNUQFwrAX7rI1UM4aI.roa (raw, json)
Hash identifier: q2WV7VVUyK5rnXL3Ri86yuEmwkCpK4/3+6BKes4rIjg=
Subject key identifier: 84:45:6F:75:83:33:99:E3:54:40:5C:2B:01:7E:EB:23:55:0C:E1:A2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF8DD5C0F409723D1F6EE36C5F8977461
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hEVvdYMzmeNUQFwrAX7rI1UM4aI.roa
Signing time: Wed 24 Jun 2026 09:01:57 +0000
ROA not before: Wed 24 Jun 2026 09:01:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 89.213.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:5c:0f:40:97:23:d1:f6:ee:36:c5:f8:97:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 09:01:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84456f75833399e354405c2b017eeb23550ce1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:dd:3f:ff:52:46:5e:5d:57:09:41:04:41:
bf:e4:6c:3d:71:c0:ca:5e:ac:1c:fb:6e:86:66:ad:
c5:f2:45:1d:c7:c9:78:28:26:1e:a6:8f:dd:ff:dc:
94:2e:46:9f:c4:a4:60:60:8d:fe:9b:d7:fa:9d:f9:
d5:52:09:98:a7:c5:40:78:7c:5b:56:b0:a5:29:72:
de:a4:30:9f:eb:3a:d7:31:3a:72:24:62:f9:e2:fa:
90:bc:bd:7b:0f:51:40:0a:44:33:34:23:ef:2e:98:
49:9d:5a:62:9b:55:8f:9b:b8:ec:20:62:80:ca:b4:
d1:aa:2b:a0:bd:42:77:b9:a3:28:49:e0:06:38:1b:
70:db:dc:2b:36:67:15:79:8f:b1:bc:cf:4a:84:ca:
56:83:1f:e2:87:76:c4:ee:f0:4d:97:fd:ce:82:2d:
fc:b6:03:65:d6:7c:a8:85:08:de:43:56:9f:ed:68:
a2:04:7a:84:f8:a2:37:30:af:4b:e5:6b:0e:9b:b0:
ab:38:9f:0c:c4:d7:69:df:c1:17:fd:40:58:bf:92:
3a:5d:87:fd:ef:db:dd:f4:13:65:70:2d:52:37:b6:
51:b0:88:5c:d4:91:a6:66:ef:2c:38:33:3e:0f:33:
6c:1b:20:5a:ea:e8:c2:78:c1:48:b3:2e:ec:17:d7:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:6F:75:83:33:99:E3:54:40:5C:2B:01:7E:EB:23:55:0C:E1:A2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hEVvdYMzmeNUQFwrAX7rI1UM4aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e8:87:f1:96:3d:f2:ac:41:c9:3a:3b:87:17:eb:3d:fe:24:
c9:78:12:77:52:7a:29:9f:92:2c:d6:96:ab:fa:4b:84:09:f7:
9e:7f:53:1b:5e:9e:be:ca:c3:0e:3f:51:fd:58:d5:3b:9d:cd:
d2:40:e3:9c:ad:7a:86:9b:29:65:67:7a:38:e9:01:f1:19:a2:
52:85:04:c5:bc:53:da:1f:50:57:75:09:fc:e0:16:2c:17:82:
e4:a3:ab:41:83:05:0f:ae:f0:57:a7:3f:d2:09:3e:1e:bb:5d:
63:6e:df:0b:77:3e:79:a3:9e:fe:aa:41:a4:3a:33:7a:ab:a6:
ef:47:76:8c:66:2c:a9:5e:8a:73:a6:6b:c3:85:6e:98:7a:d1:
68:0a:b3:7f:02:78:ad:61:b0:fc:40:30:19:ae:ca:9b:76:39:
d1:19:a5:0e:ea:67:5a:6b:ad:9f:10:5f:30:bb:6a:2f:42:09:
ec:22:8e:72:d6:37:fe:f4:08:ad:08:b2:55:80:bd:06:40:15:
32:4f:7b:c4:37:0a:d3:49:0a:b3:ce:d5:fe:22:33:0e:e1:32:
0a:53:bd:ee:f1:27:d7:04:89:6f:46:13:f2:40:e6:68:b8:84:
0f:bc:f0:58:4e:57:95:22:ad:5b:0a:9e:41:49:7f:5d:69:1e:
73:03:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:41 2026 by rpki-client