Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: 3nFpfNkk0lx36PODkY812R7afsY2CfVpTh0S3Imi5ew=
Subject key identifier: 59:B6:1D:15:AF:48:FF:42:0A:18:FE:98:F3:CA:BF:5B:42:D1:DF:F0
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 4FFDEDB9CFAFCB1BDB5BA296FE07B94903CF9642
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:00:02 +0000
ROA not before: Sun 07 Dec 2025 06:55:02 +0000
ROA not after: Sun 06 Dec 2026 07:00:02 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fd:ed:b9:cf:af:cb:1b:db:5b:a2:96:fe:07:b9:49:03:cf:96:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:55:02 2025 GMT
Not After : Dec 6 07:00:02 2026 GMT
Subject: CN=59B61D15AF48FF420A18FE98F3CABF5B42D1DFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:f2:fc:a0:5f:d6:04:76:95:36:2e:d4:3c:
95:c7:ff:e4:66:c2:9b:70:59:6e:ce:9e:15:b0:1c:
29:3c:16:66:6a:f9:4b:8a:cf:91:bb:72:47:b0:28:
ca:ba:79:c1:77:b9:b2:72:ac:18:dd:46:5b:39:14:
2e:ed:2d:05:dd:75:eb:89:2b:ba:95:08:14:22:4b:
b0:51:f8:d6:44:1d:f2:e8:93:f1:65:51:26:99:12:
19:af:da:a7:36:5c:55:6e:98:0e:45:37:ac:ee:4e:
74:30:74:12:ff:3f:be:a1:7b:30:b8:0f:86:ca:f6:
47:65:c5:71:5c:94:50:81:01:12:83:d3:c9:01:63:
7a:6b:c2:9a:c5:ba:b2:ca:88:02:f8:b4:e2:68:d1:
8b:f6:67:ad:07:7f:be:41:75:f3:67:8d:66:b2:4c:
c8:65:3b:20:1f:cf:b5:54:4d:4a:1a:0b:8c:cb:89:
b9:16:ec:c0:d2:69:ab:9a:93:07:57:18:0b:5f:4a:
7b:5b:5c:dc:e7:c4:ef:21:15:77:62:b0:46:41:ef:
9d:c6:40:58:04:ce:79:15:af:76:7b:de:60:21:94:
89:25:9f:07:6d:46:8d:f2:ac:60:0a:e0:c9:35:e8:
3b:32:0c:26:39:68:a4:3b:fc:d7:eb:d3:53:a9:a1:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:1D:15:AF:48:FF:42:0A:18:FE:98:F3:CA:BF:5B:42:D1:DF:F0
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b100::/48
Signature Algorithm: sha256WithRSAEncryption
13:8f:6e:6f:e1:a3:c8:73:6c:ed:2a:de:84:d7:1b:4d:cc:61:
7a:8e:2c:dc:c6:0b:48:64:43:a0:20:bd:d5:8f:c9:1e:18:42:
0b:88:61:e8:de:b3:5b:4e:84:1b:e4:38:01:ae:81:44:ec:19:
1c:24:46:72:b1:b2:99:49:48:6d:49:3b:7e:ef:4c:8b:6b:4a:
50:57:27:6f:f1:eb:a8:3b:6c:f7:60:e4:a6:0e:7a:7f:a2:c0:
84:41:d1:3c:98:2a:cb:39:39:ef:e3:e4:2e:d0:ba:d5:80:d6:
29:a6:71:38:95:6d:be:ea:8c:ae:73:ce:d9:ff:35:d8:87:3f:
c0:05:4f:67:fa:52:39:a3:44:ab:c4:e5:dd:81:6c:b6:00:db:
78:bc:4c:f2:9e:25:7f:61:18:59:34:07:45:62:90:1d:f1:ce:
a9:d1:06:c5:b6:c0:97:86:ef:4e:cd:ed:02:9e:70:19:ad:12:
c4:b0:46:97:00:c5:03:32:bc:b5:5d:cd:62:72:c7:b0:07:8b:
74:ce:7d:75:3d:ac:41:e3:03:0e:dc:57:e7:07:25:23:e5:cb:
b9:09:20:03:1e:82:58:c7:52:1e:9a:00:ef:a9:6d:ef:8e:17:
7a:be:95:b6:1c:ba:6d:4c:ee:03:8d:a6:81:ed:d9:18:75:4e:
d1:92:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:18:19 2026 by rpki-client