Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQ0msuC_ZkYRAvi3Itq4VM3gkx0.roa
File: nQ0msuC_ZkYRAvi3Itq4VM3gkx0.roa (raw, json)
Hash identifier: RVDuQ5622A7bHz6QHUOA56pmfNk6cBSRP210ZJH960A=
Subject key identifier: 9D:0D:26:B2:E0:BF:66:46:11:02:F8:B7:22:DA:B8:54:CD:E0:93:1D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EEE56EF8857AD9B2402EBF1D11985FC00
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQ0msuC_ZkYRAvi3Itq4VM3gkx0.roa
Signing time: Mon 22 Jun 2026 07:58:55 +0000
ROA not before: Mon 22 Jun 2026 07:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 81.168.63.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
89.213.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:56:ef:88:57:ad:9b:24:02:eb:f1:d1:19:85:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 07:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d0d26b2e0bf66461102f8b722dab854cde0931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:60:dc:84:77:f3:ed:ad:21:00:fa:c0:bf:
96:05:8b:b5:4e:f9:3c:e6:44:f8:ee:6b:98:82:e0:
f0:fb:cb:77:ad:e0:43:bf:4f:f7:65:b5:c1:80:47:
74:81:3b:dc:1c:70:ca:45:9a:3f:e2:84:7a:d4:e2:
01:af:3a:8a:c9:17:6c:81:18:16:6b:55:de:6c:60:
8b:03:39:6c:92:6f:19:27:f6:d6:95:79:b1:9a:ba:
32:66:f5:7e:0f:62:b5:92:34:0c:f2:3c:c0:e5:e6:
3f:bd:11:da:ab:ae:b4:85:34:c9:f8:76:0b:bc:75:
ff:05:b3:a6:31:56:2a:8c:24:61:f4:8b:1f:00:05:
80:71:62:6c:1e:56:29:c5:4f:10:10:fd:2c:54:54:
c0:62:0a:5a:e0:25:62:e2:8c:f1:5f:25:66:fc:27:
c2:f8:72:fd:f1:df:a8:95:a6:3e:74:dd:d4:9b:cc:
41:b7:11:cb:dd:7c:82:9d:55:33:c9:a8:36:77:c7:
dc:8c:db:5b:69:15:e3:23:31:57:ec:f4:80:41:2e:
d9:08:51:6e:ca:cc:8b:35:af:13:c4:5b:4d:60:c6:
5a:c4:3d:a2:40:48:4a:2d:b5:df:3f:d7:51:46:34:
be:c6:f9:a0:73:6d:7d:fb:80:3d:db:91:ca:6d:45:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:26:B2:E0:BF:66:46:11:02:F8:B7:22:DA:B8:54:CD:E0:93:1D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQ0msuC_ZkYRAvi3Itq4VM3gkx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.63.0/24
82.152.102.0/24
89.213.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:21:6a:d7:a5:d2:6f:8f:45:ba:b0:a9:d2:c2:a6:d4:2b:
0e:04:fe:df:ae:57:3a:1a:1d:42:8a:a6:00:fb:98:cc:c3:ca:
2d:4b:02:51:da:9d:63:6d:46:2c:15:ac:21:54:25:fc:37:14:
11:6b:cd:18:88:aa:b0:a4:c2:c0:02:c5:8d:9f:ff:f7:40:2e:
84:9a:4f:27:e5:e0:be:8d:95:8c:9b:c3:b1:c4:6b:61:d6:80:
f3:a1:cc:de:a3:1e:c8:fa:d9:89:a5:1b:12:52:b0:c4:4a:d0:
a7:8b:1b:3a:f4:fc:73:8d:dc:0f:ed:22:fb:cc:50:b2:08:44:
04:99:95:25:a1:6f:e7:07:c1:d9:fd:d1:57:91:41:2f:47:f9:
77:a4:31:01:0b:00:31:d7:f3:fb:3c:35:62:f2:a8:68:f7:08:
13:24:56:78:16:8a:08:53:fe:4a:5a:fe:f5:32:f3:0a:2f:17:
1f:72:5b:6e:9d:5a:42:12:bd:bb:1a:aa:ea:dd:c4:1b:60:f9:
ea:94:dc:d9:83:5f:97:00:ee:f2:cc:d3:f0:8a:53:88:dd:33:
2e:79:9c:ff:8d:aa:b7:aa:d2:c0:5d:80:a8:a9:94:4c:2d:37:
85:ac:65:36:5d:e7:c5:01:c5:b5:4f:df:31:6c:23:d0:9a:aa:
9b:ec:2f:7d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ7uVu+IV62bJALr8dEZhfwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjIyMDc1ODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDBkMjZiMmUwYmY2NjQ2MTEwMmY4YjcyMmRhYjg1NGNkZTA5MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdg3IR38+2tIQD6wL+WBYu1Tvk8
5kT47muYguDw+8t3reBDv0/3ZbXBgEd0gTvcHHDKRZo/4oR61OIBrzqKyRdsgRgW
a1XebGCLAzlskm8ZJ/bWlXmxmroyZvV+D2K1kjQM8jzA5eY/vRHaq660hTTJ+HYL
vHX/BbOmMVYqjCRh9IsfAAWAcWJsHlYpxU8QEP0sVFTAYgpa4CVi4ozxXyVm/CfC
+HL98d+olaY+dN3Um8xBtxHL3XyCnVUzyag2d8fcjNtbaRXjIzFX7PSAQS7ZCFFu
ysyLNa8TxFtNYMZaxD2iQEhKLbXfP9dRRjS+xvmgc219+4A925HKbUVLFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ0NJrLgv2ZGEQL4tyLauFTN4JMdMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvblEwbXN1Q19aa1lSQXZpM0l0cTRWTTNna3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUag/AwQA
UphmAwQAWdVEMA0GCSqGSIb3DQEBCwUAA4IBAQCjuiFq16XSb49FurCp0sKm1CsO
BP7frlc6Gh1CiqYA+5jMw8otSwJR2p1jbUYsFawhVCX8NxQRa80YiKqwpMLAAsWN
n//3QC6Emk8n5eC+jZWMm8OxxGth1oDzoczeox7I+tmJpRsSUrDEStCnixs69Pxz
jdwP7SL7zFCyCEQEmZUloW/nB8HZ/dFXkUEvR/l3pDEBCwAx1/P7PDVi8qho9wgT
JFZ4FooIU/5KWv71MvMKLxcfcltunVpCEr27Gqrq3cQbYPnqlNzZg1+XAO7yzNPw
ilOI3TMueZz/jaq3qtLAXYCoqZRMLTeFrGU2XefFAcW1T98xbCPQmqqb7C99
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:25 2026 by rpki-client