Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: UX2qG5xKoX+a3PVFtUEHdY8ovNeR88zkoyQXuzuNDOA=
Subject key identifier: FB:57:D9:15:23:BB:E5:5E:6B:49:29:77:40:6F:39:61:3A:C1:66:F4
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 15DCF7315081F31C6EBA864300B9800C80234D27
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:00:58 +0000
ROA not before: Sun 07 Dec 2025 06:55:58 +0000
ROA not after: Sun 06 Dec 2026 07:00:58 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b104::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:dc:f7:31:50:81:f3:1c:6e:ba:86:43:00:b9:80:0c:80:23:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:55:58 2025 GMT
Not After : Dec 6 07:00:58 2026 GMT
Subject: CN=FB57D91523BBE55E6B492977406F39613AC166F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:fe:14:99:d0:ad:74:ab:9e:0f:47:23:ac:
ce:26:a5:e0:fd:87:5b:dc:6c:04:c3:dd:c8:00:fc:
6d:c6:e5:0a:e4:0d:5f:1a:40:a3:fb:1b:23:f2:a1:
4b:a1:38:ee:a8:9b:49:4f:89:d2:02:1f:3a:a2:0e:
96:c6:ca:5a:1e:b0:9f:39:0b:0a:a3:07:08:63:ad:
b1:bd:36:c8:7b:b0:f6:11:11:e4:09:f0:80:91:cd:
e7:50:fa:22:7a:23:c1:33:c0:53:5c:8f:20:5c:71:
d1:7d:3b:bc:ff:81:c3:2b:c8:94:46:47:43:4f:59:
06:f4:c5:51:da:59:fc:28:67:d7:1c:ba:13:43:1c:
02:ea:b9:07:91:d5:2e:51:36:6b:c8:f1:82:a6:f5:
e2:f9:18:20:52:74:2c:c5:2f:7d:27:10:af:fb:85:
97:58:48:19:bd:a1:2c:5d:c6:bc:6a:e7:3f:ef:ad:
0c:2a:1b:49:d8:ce:4d:ca:ff:64:cf:16:88:8b:22:
45:63:c5:16:c6:83:c7:4e:3c:b7:9c:f0:36:f7:71:
cc:94:c6:60:1b:c9:ef:ec:9c:a7:42:d9:00:7f:da:
bb:c8:43:c8:50:69:11:65:64:7f:35:9f:e3:37:9a:
dc:53:f9:d1:43:33:2f:af:ba:93:96:bd:06:cd:97:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:D9:15:23:BB:E5:5E:6B:49:29:77:40:6F:39:61:3A:C1:66:F4
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b104::/48
Signature Algorithm: sha256WithRSAEncryption
89:d1:4f:b1:bb:43:3b:1c:69:9c:fb:8c:1d:71:5f:23:01:24:
22:e4:95:cc:d3:8c:12:94:aa:a1:e3:73:6b:65:5c:f0:88:31:
e4:9a:3e:c4:26:9c:11:08:93:73:32:c3:9d:c6:97:95:6c:2d:
ad:05:5b:f9:4c:3e:2b:68:93:3e:6a:9d:11:c3:ea:7b:cf:36:
66:3f:9f:83:67:bf:e2:73:05:76:93:b5:bc:7f:3a:7c:dd:6e:
e8:61:0d:0f:c0:b7:3c:45:d2:5a:7e:b3:d8:47:a2:24:d9:b3:
5c:2d:dc:36:04:e9:df:1e:c4:58:fc:a3:bb:a6:53:9c:67:65:
7d:9e:4d:21:0f:2e:c8:15:2a:4b:82:2a:af:5d:2b:0f:e9:29:
81:50:18:2e:58:69:72:74:2a:d1:91:30:a2:7c:67:16:98:75:
b5:08:b2:01:14:d3:c4:67:66:02:ad:6b:89:8d:3b:3b:27:5e:
64:13:3d:48:8d:34:c5:9d:a7:65:e1:8a:21:56:c2:29:8c:d0:
eb:25:91:65:e9:5e:67:a9:08:cc:56:40:78:6e:df:e5:33:3e:
ec:7f:53:b9:e3:e8:eb:bc:ac:95:f6:c1:d6:91:3a:0c:04:32:
3b:84:ce:06:a0:4f:12:f0:b2:bd:dc:14:31:16:0b:9e:1d:49:
70:19:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:24:36 2026 by rpki-client