Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: QenikUBE0heQbUFk+xGSmTzhg+u3X0fTj6Dsr3pNHn4=
Subject key identifier: D4:F8:25:CC:65:77:99:FC:E5:A4:C7:72:2A:1E:21:A2:20:8A:3B:BB
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 127FABA29D594A006A473D9C80369A8D437EE38A
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:00:13 +0000
ROA not before: Sun 07 Dec 2025 06:55:13 +0000
ROA not after: Sun 06 Dec 2026 07:00:13 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:ab:a2:9d:59:4a:00:6a:47:3d:9c:80:36:9a:8d:43:7e:e3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:55:13 2025 GMT
Not After : Dec 6 07:00:13 2026 GMT
Subject: CN=D4F825CC657799FCE5A4C7722A1E21A2208A3BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b5:b8:33:db:a3:70:f9:78:77:3f:45:1c:0c:
84:58:c8:6d:05:d2:08:e8:2e:00:2c:4b:69:c1:29:
7c:c5:2d:49:9d:8f:41:46:ef:be:38:c0:4c:c6:8e:
65:a0:dd:c8:05:6d:ed:64:14:6f:9e:ab:bb:6c:61:
1d:95:31:d6:87:57:54:ed:85:36:a7:1d:2e:cf:56:
1b:5e:ec:72:ce:4d:41:d3:7f:55:f0:1e:89:04:65:
81:86:e1:d1:75:ce:6e:22:f6:c8:bb:cf:58:ed:be:
28:96:8e:bf:cd:c0:a2:f6:38:18:d3:0f:b3:d8:d9:
ca:0d:ee:22:83:b1:22:72:5c:3f:e1:d3:a8:25:28:
c6:5e:ba:dd:9d:ba:8d:c9:7b:92:be:1e:6d:6c:9f:
d1:38:1d:6a:57:a9:a9:75:57:83:1a:3b:96:68:28:
50:2e:fe:81:60:cd:82:59:f3:1b:7d:f8:89:07:52:
66:81:b7:00:99:78:60:cc:2b:c0:0d:83:0d:b3:f0:
4c:be:7f:66:5c:61:eb:df:fd:90:0b:c6:0f:08:4e:
d9:b1:42:7b:18:cd:64:2c:2b:b3:cd:dd:30:32:b3:
e4:e1:39:d4:47:81:33:ac:d1:ef:18:01:ea:6c:73:
15:88:36:5a:b5:9c:f9:3c:7d:73:8d:2c:66:19:7f:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:25:CC:65:77:99:FC:E5:A4:C7:72:2A:1E:21:A2:20:8A:3B:BB
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b101::/48
Signature Algorithm: sha256WithRSAEncryption
1a:cd:07:4c:86:47:45:d0:de:ca:57:4d:56:b7:1e:d1:27:b1:
d6:33:11:8b:d7:7d:b7:fc:7e:d0:51:8f:fa:7d:18:b9:5f:b1:
22:c3:c9:ad:57:db:b7:ea:a8:96:c1:dc:5f:91:60:4a:42:97:
b3:ea:b2:a1:db:a5:b5:17:d9:2f:30:09:58:99:11:05:fb:39:
76:ad:bd:d5:7c:87:76:6a:be:a1:10:78:46:93:db:e8:d9:f5:
2c:55:f0:86:ce:cf:ec:04:33:7e:7b:20:8a:06:6e:13:7e:93:
47:2a:7e:33:d0:e9:d8:63:1c:c8:1d:93:4e:89:21:88:5b:62:
59:b9:74:6e:43:9a:ae:7e:ef:d0:29:52:fc:45:ab:9b:b8:04:
56:f0:37:3c:66:ee:96:f3:4e:ff:af:18:61:79:b1:01:10:08:
3d:32:83:99:37:6f:74:31:98:fa:00:44:93:29:af:f9:63:ee:
7f:74:c2:6e:90:15:05:15:fd:60:58:ae:c2:b8:51:f2:ec:2e:
02:7e:40:68:ea:1b:4d:61:8b:63:11:41:d7:1b:a6:04:31:fe:
9e:f2:9a:48:26:fa:a0:db:e2:2e:fa:63:5f:95:92:d2:16:52:
3b:b4:7e:b2:1e:a0:df:48:61:58:90:97:f8:ca:9a:31:9b:17:
14:c7:3f:85
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUEn+rop1ZSgBqRz2cgDaajUN+44owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky
N0RENkRFMDAeFw0yNTEyMDcwNjU1MTNaFw0yNjEyMDYwNzAwMTNaMDMxMTAvBgNV
BAMTKEQ0RjgyNUNDNjU3Nzk5RkNFNUE0Qzc3MjJBMUUyMUEyMjA4QTNCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJtbgz26Nw+Xh3P0UcDIRYyG0F
0gjoLgAsS2nBKXzFLUmdj0FG7744wEzGjmWg3cgFbe1kFG+eq7tsYR2VMdaHV1Tt
hTanHS7PVhte7HLOTUHTf1XwHokEZYGG4dF1zm4i9si7z1jtviiWjr/NwKL2OBjT
D7PY2coN7iKDsSJyXD/h06glKMZeut2duo3Je5K+Hm1sn9E4HWpXqal1V4MaO5Zo
KFAu/oFgzYJZ8xt9+IkHUmaBtwCZeGDMK8ANgw2z8Ey+f2ZcYevf/ZALxg8ITtmx
QnsYzWQsK7PN3TAys+ThOdRHgTOs0e8YAepscxWINlq1nPk8fXONLGYZf305AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU1PglzGV3mfzlpMdyKh4hoiCKO7swHwYDVR0j
BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj
ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2
NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx
MjJBRDJCOTI3REQ2REUwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMC8zMjYxMzA2
NjNhMzE2MzYzMzYzYTYyMzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxrEBMA0GCSqGSIb3DQEBCwUAA4IBAQAa
zQdMhkdF0N7KV01Wtx7RJ7HWMxGL1323/H7QUY/6fRi5X7Eiw8mtV9u36qiWwdxf
kWBKQpez6rKh26W1F9kvMAlYmREF+zl2rb3VfId2ar6hEHhGk9vo2fUsVfCGzs/s
BDN+eyCKBm4TfpNHKn4z0OnYYxzIHZNOiSGIW2JZuXRuQ5qufu/QKVL8RaubuARW
8Dc8Zu6W807/rxhhebEBEAg9MoOZN290MZj6AESTKa/5Y+5/dMJukBUFFf1gWK7C
uFHy7C4CfkBo6htNYYtjEUHXG6YEMf6e8ppIJvqg2+Iu+mNflZLSFlI7tH6yHqDf
SGFYkJf4ypoxmxcUxz+F
-----END CERTIFICATE-----
Generated at Tue Mar 3 18:24:35 2026 by rpki-client