Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130353a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130353a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: CDfmZqEf7pskaCJCvkSWN8Fy16HKCDqYKDHsDVrfGL4=
Subject key identifier: 64:92:68:BF:AA:3C:85:A9:CB:4E:45:80:CC:D3:54:9D:A7:D5:33:33
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 6B2CFAD9F7AD5F6A9690E40C564BF3A55F0A9160
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130353a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:01:11 +0000
ROA not before: Sun 07 Dec 2025 06:56:11 +0000
ROA not after: Sun 06 Dec 2026 07:01:11 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b105::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2c:fa:d9:f7:ad:5f:6a:96:90:e4:0c:56:4b:f3:a5:5f:0a:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:56:11 2025 GMT
Not After : Dec 6 07:01:11 2026 GMT
Subject: CN=649268BFAA3C85A9CB4E4580CCD3549DA7D53333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:39:55:55:d2:b0:b9:32:e2:a6:39:68:89:
11:02:2f:7b:6f:d6:a9:69:c6:c7:40:5e:22:7b:ad:
bb:4c:31:c7:40:c6:77:b6:33:b3:cd:66:33:cc:8a:
f0:b1:41:0f:4b:fb:b6:5a:27:f1:df:a2:ff:e0:93:
a4:e3:6f:1d:10:6e:59:84:bd:be:c2:63:5c:a8:1f:
33:4b:33:fd:b2:a2:50:3e:d2:9b:3f:5c:f0:ae:fc:
94:ee:7f:a3:ba:52:96:33:97:87:d3:14:ec:01:6f:
f0:dd:eb:0a:f7:59:17:b8:a1:69:e0:50:b8:eb:02:
4b:ae:89:ef:83:33:26:31:c8:2a:6e:22:35:d1:0d:
96:d1:29:cb:82:3e:7b:60:d5:88:80:ac:c3:b4:28:
20:f8:e4:38:8e:d9:bc:5e:a0:48:3d:2e:21:be:45:
c1:ab:86:21:b5:a2:91:28:da:1b:0f:86:fd:50:6c:
b5:48:98:ce:f0:e2:60:76:48:3b:27:1c:4a:43:75:
8c:ff:b2:05:89:09:0a:85:e9:c9:77:a1:65:53:d7:
c9:df:b8:4a:8e:ca:8b:96:24:e4:dc:95:99:14:0b:
4f:6e:4c:fc:75:b5:f6:e7:81:77:49:e0:7f:8e:9a:
fb:94:5e:04:14:ee:05:1a:b1:5f:2a:14:72:27:ec:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:68:BF:AA:3C:85:A9:CB:4E:45:80:CC:D3:54:9D:A7:D5:33:33
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130353a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b105::/48
Signature Algorithm: sha256WithRSAEncryption
af:9c:28:22:e4:d1:0f:38:38:73:a3:7d:92:af:0d:21:3a:bf:
eb:4e:2a:3a:41:15:16:f7:26:37:5a:eb:3d:9a:0c:04:b9:92:
6e:0c:47:5b:7a:51:e8:f9:1d:16:1d:1e:1d:1e:bd:da:81:ae:
a7:fc:27:c1:87:d6:c0:6d:db:e4:fe:42:1b:7f:dd:b5:4b:80:
b5:bd:32:4c:8f:46:79:a4:57:55:f2:80:c0:98:2c:86:52:4d:
44:f6:9c:f2:54:9f:af:a0:f7:37:1b:b0:74:96:7a:33:8a:51:
35:94:65:c6:f6:d2:fe:04:c2:29:aa:92:16:0f:d8:cc:6f:ff:
96:eb:8f:f5:05:c2:b5:2a:a8:d3:70:c1:b9:80:ca:fa:4c:51:
71:2f:41:2b:94:3a:fd:b2:b1:ef:0b:ba:58:f0:71:10:6b:76:
91:bc:72:54:bb:01:2a:a8:56:f1:20:34:90:ab:df:4a:15:73:
2d:d2:ee:03:62:9f:89:6d:83:03:03:b3:d3:27:9c:74:ce:ce:
3c:5a:f7:a4:02:4e:bc:a2:bd:5d:7d:f6:ec:12:9c:0c:50:68:
9f:98:e1:ba:bf:82:28:28:6d:05:42:a5:8e:5c:f1:0b:1f:9a:
3a:21:cf:e5:79:26:94:62:19:75:26:78:25:10:7e:13:99:9a:
48:ff:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:18:22 2026 by rpki-client