Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yj1UsIExvm7993E9vsGP7rNjdqs.roa
File: yj1UsIExvm7993E9vsGP7rNjdqs.roa (raw, json)
Hash identifier: f4JsMm0E61PhDcQIHjU7uHCirAvzb+FN5Eopb49px04=
Subject key identifier: CA:3D:54:B0:81:31:BE:6E:FD:F7:71:3D:BE:C1:8F:EE:B3:63:76:AB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF38ABF76F8F794A2D19066E4FA37087E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yj1UsIExvm7993E9vsGP7rNjdqs.roa
Signing time: Tue 23 Jun 2026 08:13:36 +0000
ROA not before: Tue 23 Jun 2026 08:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
82.152.177.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.96.0/24 maxlen: 24
82.153.100.0/24 maxlen: 24
82.153.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:8a:bf:76:f8:f7:94:a2:d1:90:66:e4:fa:37:08:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 23 08:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca3d54b08131be6efdf7713dbec18feeb36376ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:83:a5:8c:91:93:ef:10:b0:0f:c8:c0:00:
fc:a1:4b:6e:62:9f:f2:63:4c:03:27:df:f1:e9:7f:
fc:a3:29:93:30:bc:ad:57:fd:7c:5b:6f:64:32:36:
65:04:20:4f:e2:9e:96:99:9d:70:02:94:da:2f:32:
cc:8a:9b:10:35:79:37:b2:35:39:3c:73:41:c5:7d:
a2:3a:97:af:22:64:03:a3:bb:aa:38:f9:54:94:c4:
e9:34:e3:ae:39:77:a0:f0:3d:61:3d:33:1e:4b:0a:
7e:9e:a7:73:74:58:5a:a3:46:3f:22:de:c1:f2:4a:
13:83:72:37:5c:98:69:c2:a5:dc:9e:64:e7:81:9d:
5a:eb:7a:92:bd:13:42:fd:59:10:00:ba:01:9f:52:
0a:6a:d3:a9:49:13:02:2f:92:78:56:c3:c2:f1:c4:
85:c6:33:fb:62:98:d6:58:c9:89:42:c1:18:fd:aa:
f7:68:21:de:19:57:1a:95:e7:6d:0e:44:87:fe:c0:
91:4b:55:17:2e:cb:b6:f1:09:62:7a:bf:5b:0f:a2:
ce:b8:43:f9:7a:68:cc:45:e1:2f:e5:41:42:e3:3f:
47:36:56:33:f6:bf:0f:8d:e4:ee:e2:10:2d:cb:89:
e9:ef:c4:79:54:df:e6:95:27:c5:b3:45:ce:2d:84:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:54:B0:81:31:BE:6E:FD:F7:71:3D:BE:C1:8F:EE:B3:63:76:AB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yj1UsIExvm7993E9vsGP7rNjdqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
82.152.177.0/24
82.153.69.0/24
82.153.96.0/24
82.153.100.0/24
82.153.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:3c:04:72:db:2c:1e:55:9d:f2:38:09:b5:1c:02:5b:4a:
b1:64:31:0b:03:6a:28:d1:cb:83:36:c6:25:cf:5b:c1:c3:9c:
39:f3:d9:c5:93:89:64:18:5e:e6:7f:44:84:d9:26:42:8a:22:
03:e3:ff:2f:e7:5b:2a:e9:6f:7b:8a:4d:fa:2f:17:b1:fc:a6:
6d:f1:fe:6d:37:7c:48:06:6e:57:a8:2e:bd:fb:5d:4b:44:50:
14:1b:31:60:c2:99:e6:6d:8d:c8:8d:2e:27:04:56:4d:12:88:
88:65:a8:86:7f:e5:23:4c:a3:60:15:25:94:30:d9:fe:46:b0:
46:e3:53:78:f3:26:d2:de:8c:bf:02:c3:e8:8a:f4:91:ee:48:
94:33:89:bb:cb:9d:ff:c1:4e:d7:a8:cf:f3:34:53:36:c0:74:
da:79:6c:35:7d:ae:09:24:30:9e:da:e2:d2:e2:a2:0b:11:ae:
7b:ca:ae:cc:f6:62:4c:f3:ba:e5:2d:96:dc:92:27:ab:88:cc:
57:e3:6e:85:90:23:6f:47:70:39:9e:e7:5a:f8:75:32:98:74:
6f:01:6e:aa:ab:7a:cf:30:13:6f:38:85:b2:73:c0:31:24:1e:
67:e1:17:d2:05:52:f3:f1:72:d7:8f:dd:a9:93:18:63:ba:bb:
91:d6:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:25 2026 by rpki-client