Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/D-z7JgZfXVz5M7KGZigcnnB7Qa8.roa
File: D-z7JgZfXVz5M7KGZigcnnB7Qa8.roa (raw, json)
Hash identifier: R0f5zXUfLuI1QNtFDnJTWAW8urYG/SU87Sq0DHQLqMk=
Subject key identifier: 0F:EC:FB:26:06:5F:5D:5C:F9:33:B2:86:66:28:1C:9E:70:7B:41:AF
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019ECA301E3F53E81E07E4769B9F5411C3D2
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/D-z7JgZfXVz5M7KGZigcnnB7Qa8.roa
Signing time: Mon 15 Jun 2026 07:30:11 +0000
ROA not before: Mon 15 Jun 2026 07:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34482
IP address blocks: 77.234.160.0/19 maxlen: 19
80.72.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:30:1e:3f:53:e8:1e:07:e4:76:9b:9f:54:11:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jun 15 07:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fecfb26065f5d5cf933b28666281c9e707b41af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:9c:bf:98:a2:bd:5d:e1:f5:5d:45:75:6e:
be:bd:c9:47:7d:a4:6e:ea:79:40:30:56:21:16:e1:
52:17:81:e6:95:79:8c:03:81:1f:34:2e:38:5a:e6:
4d:d3:ff:61:90:3a:59:67:f0:ad:40:7d:12:ca:9f:
ef:b8:6c:47:66:45:16:4f:66:aa:93:b0:7f:6f:cf:
58:bc:4b:b6:dd:ad:de:dd:30:a8:2a:14:aa:fc:c5:
93:fa:45:bc:3f:73:d7:d1:38:db:f5:79:93:e7:69:
ae:c6:a0:09:7b:3d:77:26:e9:f5:71:49:7d:24:2f:
00:90:2f:c5:89:55:06:24:aa:7e:0a:51:0f:ef:98:
86:a3:50:08:45:14:49:d0:10:9b:e1:37:88:97:56:
12:5c:ce:3c:7c:a7:f5:f0:28:78:2d:96:a9:df:1b:
e7:3f:0f:8b:4e:36:7e:c3:b4:f2:05:37:38:65:a1:
f8:88:a8:78:57:48:13:81:fd:2c:2c:92:a6:bb:e8:
4f:b7:68:89:65:10:dc:0e:cd:28:a6:46:be:31:b5:
59:06:53:ed:9c:e3:25:31:0f:c7:cc:42:55:71:d2:
c5:af:71:15:e9:70:bc:a6:76:cd:11:d6:e8:a5:c7:
51:dc:5c:b0:28:e5:f4:aa:b6:ac:64:3d:42:25:a2:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:FB:26:06:5F:5D:5C:F9:33:B2:86:66:28:1C:9E:70:7B:41:AF
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/D-z7JgZfXVz5M7KGZigcnnB7Qa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.160.0/19
80.72.144.0/20
Signature Algorithm: sha256WithRSAEncryption
59:18:88:bc:05:21:fe:14:32:7c:77:ef:44:ab:e4:79:54:e5:
d6:d0:4a:23:b3:63:31:0f:9a:bc:75:97:5a:d5:bb:9d:2a:6e:
4c:92:e3:fc:19:23:11:be:54:b1:cb:8d:f3:2a:8c:51:22:ef:
89:20:0f:5e:e5:07:0b:ba:7b:38:d0:0c:16:42:df:f7:6e:a8:
21:fc:2a:eb:df:4c:37:3d:5a:5b:68:59:2a:6e:99:02:7f:b3:
fa:15:a9:82:b8:82:b9:98:c3:6d:db:b9:60:46:de:a5:45:e7:
d9:26:92:3b:1b:58:57:21:b8:dd:52:f7:ed:d8:21:30:8e:11:
33:cb:49:93:2b:30:49:8b:1a:3f:4d:e8:02:43:72:23:b7:83:
96:38:d5:1d:a1:f1:89:a4:c1:e7:cb:56:63:ef:d8:49:ce:7a:
e2:b6:32:6b:98:a6:12:e2:79:72:04:eb:7e:e1:17:9c:c9:d8:
db:d8:76:91:03:cb:4e:f5:af:cb:ec:0c:fd:02:e8:44:ce:ce:
75:90:61:bd:78:83:dc:b2:cb:f6:9c:85:4a:75:4d:28:eb:92:
ff:ee:ed:54:3b:29:21:c5:83:a2:82:96:c3:a0:e6:62:ce:aa:
2b:42:d3:08:c9:67:42:9b:08:25:a5:bd:37:90:d0:9e:b0:dd:
ec:52:a9:49
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ7KMB4/U+geB+R2m59UEcPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm
ZGExMzUwHhcNMjYwNjE1MDczMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVjZmIyNjA2NWY1ZDVjZjkzM2IyODY2NjI4MWM5ZTcwN2I0MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzOcv5iivV3h9V1FdW6+vclHfaRu
6nlAMFYhFuFSF4HmlXmMA4EfNC44WuZN0/9hkDpZZ/CtQH0Syp/vuGxHZkUWT2aq
k7B/b89YvEu23a3e3TCoKhSq/MWT+kW8P3PX0Tjb9XmT52muxqAJez13Jun1cUl9
JC8AkC/FiVUGJKp+ClEP75iGo1AIRRRJ0BCb4TeIl1YSXM48fKf18Ch4LZap3xvn
Pw+LTjZ+w7TyBTc4ZaH4iKh4V0gTgf0sLJKmu+hPt2iJZRDcDs0opka+MbVZBlPt
nOMlMQ/HzEJVcdLFr3EV6XC8pnbNEdbopcdR3FywKOX0qrasZD1CJaKb4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA/s+yYGX11c+TOyhmYoHJ5we0GvMB8GA1UdIwQY
MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1
LTUyMWZhNDFkZmM5Ni8xL0QtejdKZ1pmWFZ6NU03S0daaWdjbm5CN1FhOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5
Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAVN6qAD
BARQSJAwDQYJKoZIhvcNAQELBQADggEBAFkYiLwFIf4UMnx370Sr5HlU5dbQSiOz
YzEPmrx1l1rVu50qbkyS4/wZIxG+VLHLjfMqjFEi74kgD17lBwu6ezjQDBZC3/du
qCH8KuvfTDc9WltoWSpumQJ/s/oVqYK4grmYw23buWBG3qVF59kmkjsbWFchuN1S
9+3YITCOETPLSZMrMEmLGj9N6AJDciO3g5Y41R2h8YmkwefLVmPv2EnOeuK2MmuY
phLieXIE637hF5zJ2NvYdpEDy071r8vsDP0C6ETOznWQYb14g9yyy/achUp1TSjr
kv/u7VQ7KSHFg6KClsOg5mLOqitC0wjJZ0KbCCWlvTeQ0J6w3exSqUk=
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:35 2026 by rpki-client