Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7y9au39gdEzV0XKhUxEKZOVv1w.roa
File: o7y9au39gdEzV0XKhUxEKZOVv1w.roa (raw, json)
Hash identifier: p/heVHyK4/vM/ZKqjx4BHsxwZ3JAJLnklcNlOqpxyAg=
Subject key identifier: A3:BC:BD:6A:ED:FD:81:D1:33:57:45:CA:85:4C:44:29:93:95:BF:5C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019ECA5A3F412D80E82923458F5D4325B1AA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7y9au39gdEzV0XKhUxEKZOVv1w.roa
Signing time: Mon 15 Jun 2026 08:16:12 +0000
ROA not before: Mon 15 Jun 2026 08:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 82.153.246.0/24 maxlen: 24
109.176.21.0/24 maxlen: 24
109.176.206.0/24 maxlen: 24
213.218.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:5a:3f:41:2d:80:e8:29:23:45:8f:5d:43:25:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 15 08:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3bcbd6aedfd81d1335745ca854c44299395bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:ca:5f:ca:7b:42:c0:d6:48:45:03:27:7e:
16:7e:4c:fd:24:d4:ad:bf:e1:4b:39:22:f7:6e:34:
d0:80:b5:80:38:9d:f3:cc:a7:73:af:f5:da:f3:6b:
88:cd:10:42:83:f5:36:a2:54:fd:71:63:17:7b:23:
42:76:db:68:7a:0a:f9:fd:5a:18:77:db:70:38:46:
59:10:ad:84:fb:59:f8:e7:1a:8d:e7:32:88:92:ee:
f6:70:51:53:01:ad:a4:60:f6:9f:dc:ba:63:a3:01:
68:fc:c3:23:8a:bb:58:a2:25:9b:64:0e:3e:aa:3b:
d6:75:2d:be:03:22:60:dd:ab:78:80:5f:51:ed:8e:
c4:73:fa:39:ec:c9:67:2b:10:0c:58:2e:17:29:a8:
2f:12:19:1e:ef:4e:99:59:b4:e0:7e:10:86:50:22:
fd:9b:9a:4f:3a:61:0c:7e:c4:d3:a5:02:88:9f:ef:
f2:9f:15:5a:29:be:9c:da:d4:a4:72:d1:be:df:4b:
fc:ec:76:bd:94:88:01:b8:2f:8c:c4:8c:97:7c:86:
27:67:3c:69:10:1f:ad:b4:a1:cf:66:12:7f:19:96:
51:a4:c5:e1:7c:15:66:b3:d6:16:67:51:8e:fd:b8:
de:03:5f:67:ba:c3:22:37:5d:3b:bf:1f:c8:fa:94:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:BD:6A:ED:FD:81:D1:33:57:45:CA:85:4C:44:29:93:95:BF:5C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7y9au39gdEzV0XKhUxEKZOVv1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
109.176.21.0/24
109.176.206.0/24
213.218.243.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c8:70:09:3a:ff:cb:3e:85:c3:98:ef:5e:ef:cd:8d:ea:22:
b6:4d:27:89:ec:99:4c:56:d0:e3:a8:17:10:d1:dc:86:6f:ee:
b9:79:97:a0:98:1d:56:be:08:7f:66:37:13:cf:37:bb:00:bb:
ef:51:99:39:34:7e:a3:65:7f:fd:aa:8c:28:c7:d0:3c:59:20:
be:be:06:af:03:0d:f5:c9:3b:a6:f0:19:d0:42:e8:ca:88:f1:
42:e0:f7:4f:75:3b:ee:a0:4d:2d:e5:47:89:71:f9:ad:d3:2b:
fd:95:9f:ab:bd:3a:59:ae:7d:3a:b5:4f:61:0b:ab:28:78:76:
dc:44:86:48:e1:a3:f7:b6:40:d6:68:db:64:de:db:f2:ed:a8:
c1:fa:84:ce:30:14:7b:f1:8b:58:84:c7:ba:1b:7d:7a:04:da:
44:8a:7f:09:dd:34:d7:9e:7d:22:cd:06:a6:62:92:96:cf:2c:
e3:06:2c:3d:a7:55:8b:d3:25:41:fc:37:be:d5:04:a4:c2:24:
74:f9:e9:57:de:3e:79:8a:ab:15:1e:df:2e:87:2b:95:0c:ea:
de:99:05:99:aa:6e:6d:80:f8:ed:f3:e3:4d:71:cd:e6:64:17:
a2:d8:a4:0a:b5:47:12:3c:74:27:64:e1:fa:2a:43:a1:30:9e:
c6:19:2e:ba
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ7KWj9BLYDoKSNFj11DJbGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjE1MDgxNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2JjYmQ2YWVkZmQ4MWQxMzM1NzQ1Y2E4NTRjNDQyOTkzOTViZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEfKX8p7QsDWSEUDJ34Wfkz9JNSt
v+FLOSL3bjTQgLWAOJ3zzKdzr/Xa82uIzRBCg/U2olT9cWMXeyNCdttoegr5/VoY
d9twOEZZEK2E+1n45xqN5zKIku72cFFTAa2kYPaf3LpjowFo/MMjirtYoiWbZA4+
qjvWdS2+AyJg3at4gF9R7Y7Ec/o57MlnKxAMWC4XKagvEhke706ZWbTgfhCGUCL9
m5pPOmEMfsTTpQKIn+/ynxVaKb6c2tSkctG+30v87Ha9lIgBuC+MxIyXfIYnZzxp
EB+ttKHPZhJ/GZZRpMXhfBVms9YWZ1GO/bjeA19nusMiN107vx/I+pT05wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKO8vWrt/YHRM1dFyoVMRCmTlb9cMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbzd5OWF1MzlnZEV6VjBYS2hVeEVLWk9WdjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUpn2AwQA
bbAVAwQAbbDOAwQA1drzMA0GCSqGSIb3DQEBCwUAA4IBAQBhyHAJOv/LPoXDmO9e
782N6iK2TSeJ7JlMVtDjqBcQ0dyGb+65eZegmB1Wvgh/ZjcTzze7ALvvUZk5NH6j
ZX/9qowox9A8WSC+vgavAw31yTum8BnQQujKiPFC4PdPdTvuoE0t5UeJcfmt0yv9
lZ+rvTpZrn06tU9hC6soeHbcRIZI4aP3tkDWaNtk3tvy7ajB+oTOMBR78YtYhMe6
G316BNpEin8J3TTXnn0izQamYpKWzyzjBiw9p1WL0yVB/De+1QSkwiR0+elX3j55
iqsVHt8uhyuVDOremQWZqm5tgPjt8+NNcc3mZBei2KQKtUcSPHQnZOH6KkOhMJ7G
GS66
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:57 2026 by rpki-client