Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/326131343a373538343a653730303a3a2f34302d3438203d3e20323134343831.roa
File: 326131343a373538343a653730303a3a2f34302d3438203d3e20323134343831.roa (raw, json)
Hash identifier: ClU41MtF1pS8UFmvY7Ahu5Hb84VZO4xu+fgKZ3ERrXo=
Subject key identifier: 80:6A:03:E7:38:8B:A8:E8:DD:B1:B6:AA:66:5D:63:9C:6E:3B:E9:03
Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA
Certificate serial: 728F391031CDC6CAD9CE2D2540D47563F698A20B
Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/326131343a373538343a653730303a3a2f34302d3438203d3e20323134343831.roa
Signing time: Tue 30 Dec 2025 23:12:37 +0000
ROA not before: Tue 30 Dec 2025 23:07:37 +0000
ROA not after: Tue 29 Dec 2026 23:12:37 +0000
asID: 214481
IP address blocks: 2a14:7584:e700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8f:39:10:31:cd:c6:ca:d9:ce:2d:25:40:d4:75:63:f6:98:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA
Validity
Not Before: Dec 30 23:07:37 2025 GMT
Not After : Dec 29 23:12:37 2026 GMT
Subject: CN=806A03E7388BA8E8DDB1B6AA665D639C6E3BE903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:c7:72:f0:cf:76:05:52:cd:3e:8d:78:9d:
12:29:26:77:75:f1:10:02:94:1a:b4:35:a9:11:fc:
ef:9a:94:96:a0:fd:f6:f6:f0:9f:06:1e:d0:b9:ca:
45:45:22:83:78:86:05:96:af:e6:df:33:ec:dc:fe:
7c:f8:dd:44:85:35:b3:2b:d4:bf:b3:2f:ea:94:f8:
af:02:7b:15:85:32:85:f7:0d:d8:1b:55:fb:be:8d:
e4:e4:1f:2a:33:f7:31:7e:4a:e5:10:f8:fb:81:52:
b3:0a:f9:a4:43:ae:8a:e0:26:fa:95:7e:6c:bf:66:
18:7b:a4:4a:85:0d:4e:d2:c2:b4:98:fb:b9:ce:17:
77:dc:b7:23:06:e9:a3:f2:5b:50:b0:0e:bc:5c:b4:
a4:e9:33:a5:db:3a:ac:35:e8:8d:a9:dd:8f:17:2e:
ed:bd:27:0a:cc:c4:aa:59:94:71:c9:a5:26:7c:a0:
40:6d:c8:2b:05:0a:a4:cb:55:60:4c:4f:16:bc:b2:
53:d2:d0:7f:06:0a:79:1b:ed:c0:bb:d9:4c:97:78:
21:11:df:79:f9:09:b8:75:61:b2:cd:65:3e:fb:94:
cf:5d:40:91:4d:22:3f:a0:27:2a:32:00:60:e8:d4:
e9:42:0b:e8:b0:6d:b8:b6:a3:ef:d0:0d:c8:65:1f:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:03:E7:38:8B:A8:E8:DD:B1:B6:AA:66:5D:63:9C:6E:3B:E9:03
X509v3 Authority Key Identifier:
keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/326131343a373538343a653730303a3a2f34302d3438203d3e20323134343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:e700::/40
Signature Algorithm: sha256WithRSAEncryption
68:56:59:3f:fa:15:30:fb:15:b8:64:c7:d7:db:17:d4:c5:8e:
67:bc:53:2b:d7:ba:3f:52:b4:14:8e:b4:71:24:73:93:b8:d0:
27:24:a3:37:6a:63:db:f2:25:52:98:7a:54:44:19:24:53:62:
db:04:15:f2:4a:7c:29:4e:d4:51:4d:be:8a:90:9e:18:af:2d:
06:b6:d2:ee:b8:51:c4:11:0e:61:c7:fa:ac:43:c4:72:9b:03:
ea:09:ea:51:dc:0e:53:95:3f:7c:30:06:b1:3f:9c:31:01:39:
7c:a9:ff:33:9c:a1:c2:ef:d1:51:c4:fb:aa:a9:b5:c6:8e:25:
15:6b:36:4c:76:ec:ac:22:2e:8c:3b:f2:97:aa:1a:a6:77:a9:
e1:a4:6f:ee:63:4c:f8:5d:41:79:d1:da:25:f5:88:e5:ea:7c:
d7:f9:d2:d7:b0:78:bb:95:d1:09:92:c9:6a:45:e2:4e:49:3a:
15:0a:7c:0a:4b:5f:b1:50:ef:f2:75:7a:dd:91:21:68:a7:b8:
7b:d5:24:52:90:db:cc:ac:33:de:04:1c:2c:da:fb:0c:94:1e:
56:e7:e4:01:ad:3c:a4:0e:d3:4b:35:f2:be:40:00:26:ed:e0:
0f:81:8f:64:fc:63:df:ca:bb:05:de:b4:a1:1c:e9:4b:57:7e:
23:15:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:14 2026 by rpki-client