Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/olo8XR3MC9LMLJ08pPmteTp_Zg4.roa
File: olo8XR3MC9LMLJ08pPmteTp_Zg4.roa (raw, json)
Hash identifier: NzdttfEf4xG9l1DoPbrMUb61KRn0aqKiEBcuA2h5stU=
Subject key identifier: A2:5A:3C:5D:1D:CC:0B:D2:CC:2C:9D:3C:A4:F9:AD:79:3A:7F:66:0E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF88AA78F84A31A4BA17D23ADD40ABCEC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/olo8XR3MC9LMLJ08pPmteTp_Zg4.roa
Signing time: Wed 24 Jun 2026 07:31:36 +0000
ROA not before: Wed 24 Jun 2026 07:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 81.168.62.0/24 maxlen: 24
81.168.64.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
82.152.212.0/24 maxlen: 24
82.152.221.0/24 maxlen: 24
82.153.102.0/24 maxlen: 24
82.153.116.0/24 maxlen: 24
89.213.220.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:8a:a7:8f:84:a3:1a:4b:a1:7d:23:ad:d4:0a:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 07:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25a3c5d1dcc0bd2cc2c9d3ca4f9ad793a7f660e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:ff:8a:0d:7a:a5:7c:35:90:cb:a6:7f:d1:
ac:4a:08:0a:f8:61:74:33:d3:9e:c1:68:1d:9f:00:
27:d7:97:94:7a:0e:30:09:96:9e:85:e0:08:0d:a5:
31:24:3e:5d:4c:25:bf:69:8a:a3:81:61:99:ab:b9:
fd:ea:e5:b2:7e:50:b4:70:3d:c8:27:6b:5f:7f:59:
82:92:17:1d:48:1d:4e:f6:25:ef:d0:59:82:bb:1e:
70:87:d0:ed:f0:d0:b8:67:3d:01:6c:0f:91:5f:74:
09:55:5a:83:d7:b9:4f:0c:91:d9:47:4c:3e:24:75:
43:44:9a:da:46:c9:d5:6f:8c:a7:e5:01:4b:35:57:
2f:98:a4:68:a7:b6:dc:51:27:0f:bb:07:a0:18:5c:
66:fc:93:37:db:61:98:2a:16:07:0e:b0:8f:9d:8e:
d2:25:5f:d5:9a:ed:aa:ca:77:e8:7d:72:33:a1:da:
7b:61:1f:6a:61:c1:ca:da:86:88:c4:71:2e:53:90:
dc:79:e6:b1:f0:82:e4:09:13:3c:56:c7:73:27:00:
66:0b:10:fd:a0:50:2b:4e:17:b4:4d:0f:9c:43:e9:
60:b6:3b:94:8d:32:88:86:51:c0:1d:94:f0:43:d5:
a7:3a:f6:67:b1:62:19:3d:52:0b:b3:38:24:12:24:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:3C:5D:1D:CC:0B:D2:CC:2C:9D:3C:A4:F9:AD:79:3A:7F:66:0E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/olo8XR3MC9LMLJ08pPmteTp_Zg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
81.168.64.0/24
81.168.112.0/24
82.152.212.0/24
82.152.221.0/24
82.153.102.0/24
82.153.116.0/24
89.213.220.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:78:67:ef:67:f9:29:00:fc:c6:64:d6:ef:3e:c4:2c:b8:0c:
17:22:fd:42:48:40:18:89:36:f2:9f:2f:36:f2:84:df:d2:1e:
1b:4d:07:1a:33:68:09:ba:00:af:a7:58:f7:54:af:94:f8:48:
70:9e:3f:0e:1d:a8:4c:86:2d:76:87:d9:79:d8:5f:81:f2:fc:
c3:8f:14:f2:d5:63:0c:b4:c9:65:58:b1:a9:6b:5b:05:8b:98:
96:fc:55:81:72:08:00:1e:a4:2e:2f:3f:d9:ba:d5:dd:94:50:
c2:38:5b:41:55:9c:f2:23:84:f2:5b:ed:fa:4b:0e:da:f3:46:
c2:3b:4f:e3:fc:e3:44:f3:75:18:41:3e:a2:c8:a9:90:0b:45:
eb:11:fe:e3:29:d8:3d:c7:01:13:17:9b:6d:62:b0:5a:6e:23:
c1:95:05:ab:c3:ea:f6:df:f7:57:c5:46:91:4f:cc:2f:c0:1a:
af:1d:b5:71:0f:1b:e3:2f:66:b0:50:4e:6d:84:e7:18:d8:d8:
8d:20:90:32:47:b6:3b:6c:d7:ae:cd:23:df:a0:ef:17:94:5f:
de:21:1b:8c:e5:0d:cb:dc:a0:06:51:a6:a9:0a:cd:2a:39:51:
6e:b0:7a:b8:bc:51:cc:0b:20:16:d1:ad:78:fe:db:30:38:f1:
b5:ab:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:23 2026 by rpki-client