Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: GdlhpsGLGUxMyJu5ikDhHSagfLaj3x0bfvgeu5bspVM=
Subject key identifier: 73:D6:09:AE:3A:68:DB:42:78:00:F5:67:E1:D1:A1:FE:03:F4:0B:0E
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 63D0572D073995D879C0DD9D7313B5B7DE5CBE87
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:00:45 +0000
ROA not before: Sun 07 Dec 2025 06:55:45 +0000
ROA not after: Sun 06 Dec 2026 07:00:45 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d0:57:2d:07:39:95:d8:79:c0:dd:9d:73:13:b5:b7:de:5c:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:55:45 2025 GMT
Not After : Dec 6 07:00:45 2026 GMT
Subject: CN=73D609AE3A68DB427800F567E1D1A1FE03F40B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:57:27:41:4a:64:c4:8a:04:b9:e2:c8:b9:
81:0a:53:c4:96:a0:4c:00:34:a9:6b:b0:8b:d0:3e:
1d:8b:83:d7:6e:46:ad:6a:ff:99:78:c9:2e:26:a2:
d8:8d:a9:62:80:ab:d3:3c:f5:47:9a:ce:84:2f:99:
2e:dc:fd:4d:65:01:4a:8a:a6:eb:fb:69:0a:d6:0e:
7c:3c:4e:06:d6:0c:2d:86:4f:9e:50:dd:be:0e:d3:
5a:5a:eb:74:4f:e1:b5:4c:19:ee:75:37:66:b7:e0:
1b:1b:25:e3:9e:4e:05:ad:18:a3:34:54:fe:b3:98:
ee:c5:9a:73:8b:ab:0e:b1:13:e1:7c:75:91:9b:f1:
76:60:38:5d:87:d7:dd:b7:b3:16:cd:7f:69:96:53:
6a:db:f3:3c:76:33:55:8c:d4:e8:d9:5d:ae:dd:78:
fb:f2:c9:a9:42:53:9c:6f:cc:b1:b1:fb:27:65:de:
10:37:f0:22:92:2c:2e:f7:1d:91:57:f3:fe:98:16:
78:e8:1f:44:4b:4f:6e:aa:5a:f4:09:bc:a4:a0:25:
b3:22:0e:9c:e7:76:80:73:1e:b7:34:e6:a0:17:36:
7e:70:40:1a:08:7a:1a:c3:5c:f4:36:ab:a3:98:da:
c2:97:5a:74:89:16:1a:4b:20:f2:6e:49:39:58:28:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:09:AE:3A:68:DB:42:78:00:F5:67:E1:D1:A1:FE:03:F4:0B:0E
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b103::/48
Signature Algorithm: sha256WithRSAEncryption
13:93:4d:af:b5:d7:af:c2:79:c2:9a:88:e3:85:81:e1:90:22:
eb:fd:a2:85:11:32:06:24:ae:01:42:97:16:b5:64:ec:8a:45:
9c:30:10:f7:7e:98:7e:79:c6:3f:04:7d:3d:6c:c0:01:77:65:
b5:34:f4:56:f7:b7:c7:5d:25:ee:6b:07:d5:d5:ae:ce:0e:66:
1e:2e:6f:39:9e:69:f5:b2:dd:a1:87:14:63:9b:10:5b:7c:83:
73:cb:80:d3:d2:2a:d5:9b:bb:2c:df:9e:3c:ea:01:70:47:81:
0e:bb:23:8f:2c:36:63:58:14:ba:65:46:88:0c:81:26:5b:16:
ef:d9:cb:a4:db:1f:a6:72:1b:79:50:bd:5c:c3:08:8f:c5:12:
b6:89:9f:66:34:ed:65:ac:f0:9a:38:75:ac:5b:51:b0:1b:c7:
9d:c4:25:a7:01:81:3e:1a:c4:9a:d3:77:ce:f8:53:36:ae:e8:
2b:d9:1c:50:1a:e4:81:c2:91:a8:de:68:43:39:09:b5:f5:f9:
9d:3a:d3:e1:57:01:e7:9d:94:4c:cd:8e:4e:8e:65:5b:61:73:
e0:15:de:f2:2f:28:d2:4f:cf:52:14:f2:43:0c:db:c4:2a:26:
85:6f:a2:54:ff:2c:c0:b9:6d:02:9f:7a:ca:46:9a:bc:53:d7:
6c:dc:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:18:20 2026 by rpki-client