Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/t8cDBvSSlhqOc0bhGZF5cAeQ6xY.roa
File: t8cDBvSSlhqOc0bhGZF5cAeQ6xY.roa (raw, json)
Hash identifier: 8ZnTwTn9VpwZV+0x3MX+NZpzb/rqu3OUB+CyqNMTeSA=
Subject key identifier: B7:C7:03:06:F4:92:96:1A:8E:73:46:E1:19:91:79:70:07:90:EB:16
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019B76EB1834FE5FFBB63107EA764CADCB2F
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/t8cDBvSSlhqOc0bhGZF5cAeQ6xY.roa
Signing time: Thu 01 Jan 2026 00:17:57 +0000
ROA not before: Thu 01 Jan 2026 00:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28787
IP address blocks: 37.61.0.0/17 maxlen: 17
37.61.56.0/21 maxlen: 21
37.61.77.0/24 maxlen: 24
37.61.78.0/24 maxlen: 24
37.61.79.0/24 maxlen: 24
37.61.112.0/22 maxlen: 22
37.61.116.0/22 maxlen: 22
37.61.120.0/22 maxlen: 22
37.61.124.0/22 maxlen: 22
81.17.80.0/20 maxlen: 20
81.17.82.0/24 maxlen: 24
185.30.88.0/22 maxlen: 22
188.253.128.0/19 maxlen: 19
188.253.208.0/22 maxlen: 22
188.253.212.0/22 maxlen: 22
188.253.216.0/22 maxlen: 22
188.253.220.0/22 maxlen: 22
188.253.224.0/21 maxlen: 21
188.253.232.0/21 maxlen: 21
188.253.254.0/24 maxlen: 24
188.253.255.0/24 maxlen: 24
194.135.166.0/23 maxlen: 23
194.135.168.0/23 maxlen: 23
194.135.170.0/24 maxlen: 24
194.135.171.0/24 maxlen: 24
194.135.172.0/24 maxlen: 24
194.135.173.0/24 maxlen: 24
194.135.174.0/24 maxlen: 24
194.135.175.0/24 maxlen: 24
194.135.176.0/24 maxlen: 24
194.135.177.0/24 maxlen: 24
194.135.178.0/24 maxlen: 24
194.135.179.0/24 maxlen: 24
213.154.0.0/19 maxlen: 19
213.154.2.0/23 maxlen: 23
217.64.16.0/20 maxlen: 20
217.64.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:18:34:fe:5f:fb:b6:31:07:ea:76:4c:ad:cb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 00:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c70306f492961a8e7346e1199179700790eb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:8c:aa:ba:62:27:5b:8c:7e:47:5b:d7:71:
48:a2:31:69:a8:fd:c3:8f:40:0b:c8:27:1d:98:e0:
4a:a1:a8:d1:ef:e7:ea:4d:5d:bf:ec:e1:70:a1:31:
0d:da:b3:a2:1b:fe:c3:0b:ff:8b:57:78:b5:ab:5c:
29:1f:75:7f:f5:52:91:d4:4f:20:26:f3:a2:a7:c8:
f1:8f:84:bc:42:94:f1:43:4d:c4:31:6c:54:bd:b0:
b2:93:d5:0a:c9:b5:b1:a3:9d:45:14:ca:f1:45:2d:
88:ff:90:78:2f:e7:0d:fb:2c:33:dd:cc:d0:a1:78:
22:9d:8e:b3:ae:e9:9f:93:6a:7a:ab:16:15:a5:75:
6e:a4:ed:b5:b4:03:82:37:42:78:67:04:fa:79:e9:
91:ad:1b:d6:a3:cc:44:d2:d2:54:b8:bc:ad:61:1d:
97:f2:de:d2:59:65:89:a1:6e:46:b1:3b:53:df:1c:
4f:15:7b:48:75:7a:a7:d5:c2:1b:a3:59:3e:7a:4a:
b4:68:6d:84:82:6c:61:c2:06:fc:0a:29:12:0a:ef:
42:e5:38:a5:83:8c:2a:fc:04:41:a4:48:29:d0:6f:
1f:7b:0c:c3:05:34:43:74:22:f7:40:8b:a4:d3:17:
de:5a:76:46:11:3a:0e:35:9f:9e:ac:f1:24:af:3a:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:03:06:F4:92:96:1A:8E:73:46:E1:19:91:79:70:07:90:EB:16
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/t8cDBvSSlhqOc0bhGZF5cAeQ6xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.0.0/17
81.17.80.0/20
185.30.88.0/22
188.253.128.0/19
188.253.208.0-188.253.239.255
188.253.254.0/23
194.135.166.0-194.135.179.255
213.154.0.0/19
217.64.16.0/20
Signature Algorithm: sha256WithRSAEncryption
88:f2:64:f5:20:0c:97:09:dc:15:a9:50:29:af:31:e6:d0:7b:
26:e7:76:bd:35:56:b2:db:4a:5e:40:20:fa:ca:f5:d1:ef:72:
20:ca:44:cf:ff:16:b3:93:d4:a7:8b:55:c7:ab:42:8e:c3:e5:
9f:87:4c:f3:46:e8:9e:0f:59:35:87:27:97:42:90:1e:b5:25:
0f:17:67:1f:27:c3:b9:78:c5:05:ec:98:00:e4:82:ea:b0:90:
4f:17:6b:7d:fb:58:a4:2c:64:a4:98:16:76:e5:89:50:db:7d:
e9:dd:b2:0b:5c:d8:c3:d3:3d:c8:14:6a:d6:4c:01:7a:82:ff:
c8:b1:54:4a:b8:e0:5b:bb:67:ec:b4:ea:95:ce:23:bf:ec:8c:
53:ac:9b:5b:7b:a4:75:63:33:fe:f2:57:7d:73:41:05:b2:99:
64:37:1b:29:6a:96:78:2c:be:a6:99:01:7c:8f:a6:95:af:3b:
ff:54:99:2b:b6:1e:71:5c:83:c1:42:03:54:c4:3e:4d:ba:01:
f8:37:7a:2d:3d:c9:ce:e9:2e:29:ae:fc:2c:81:b1:9a:23:99:
b7:8e:84:ad:38:bf:41:a0:9f:d7:d6:47:82:72:14:00:33:d1:
55:de:bc:7b:8d:68:7a:db:30:dc:47:51:f4:54:79:91:c7:1c:
35:f3:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:47 2026 by rpki-client