Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130373a3a2f34382d3438203d3e20323034323131.roa
File: 326130663a316363363a623130373a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier: LvKrapjbijKOCNkIL4V5c0KqqX5LOF7Gf9xE7tgQHO0=
Subject key identifier: 60:6F:9B:D7:65:EB:FA:8C:AE:8E:98:6E:33:40:6F:AA:FC:2E:32:A1
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 3DEA8D2E25A14A53D968ACB287E06C821BCD01E6
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130373a3a2f34382d3438203d3e20323034323131.roa
Signing time: Sun 07 Dec 2025 07:01:32 +0000
ROA not before: Sun 07 Dec 2025 06:56:32 +0000
ROA not after: Sun 06 Dec 2026 07:01:32 +0000
asID: 204211
IP address blocks: 2a0f:1cc6:b107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ea:8d:2e:25:a1:4a:53:d9:68:ac:b2:87:e0:6c:82:1b:cd:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 7 06:56:32 2025 GMT
Not After : Dec 6 07:01:32 2026 GMT
Subject: CN=606F9BD765EBFA8CAE8E986E33406FAAFC2E32A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:6f:81:10:08:bc:78:00:cf:11:f4:8b:d2:
d6:64:16:2e:90:54:c4:f0:0c:9e:32:29:9e:5c:ea:
e2:3b:31:f5:8d:cc:30:b0:80:be:a9:1e:65:64:d1:
9a:b7:c9:f9:d3:63:ba:57:bf:8a:e4:bd:23:3a:db:
7b:79:ce:98:69:8a:5a:f6:72:45:e0:c6:80:1d:9e:
3c:44:2d:c4:a1:b7:84:0f:e7:bb:f4:b2:1b:2f:9b:
95:a3:9d:04:21:2e:0f:13:3f:34:56:88:0f:b3:b0:
e3:9f:dc:85:0e:20:8f:aa:5b:52:fe:13:46:b7:9d:
1d:05:03:96:d7:08:67:89:09:3c:39:4d:fe:37:9c:
9a:e3:9e:2d:6b:33:68:98:75:a2:bb:97:79:90:f8:
e4:24:75:da:42:93:37:8c:da:92:3f:19:a5:a1:60:
3d:ca:c5:14:8b:69:df:ff:c0:1a:84:32:d1:c5:d6:
a1:2d:40:df:d8:7a:01:62:bd:a6:63:04:b7:6d:91:
34:da:df:b5:4f:2b:24:3b:d9:f4:24:d8:59:33:22:
cf:06:4f:c6:ed:0f:dd:b4:43:ed:83:92:a4:00:73:
d8:da:c7:e7:dd:d9:30:fc:41:0e:35:27:31:b9:08:
d9:cb:37:ba:02:86:48:99:00:3f:29:11:67:53:e8:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6F:9B:D7:65:EB:FA:8C:AE:8E:98:6E:33:40:6F:AA:FC:2E:32:A1
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130373a3a2f34382d3438203d3e20323034323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6:b107::/48
Signature Algorithm: sha256WithRSAEncryption
31:e2:87:85:d0:da:11:95:5b:f5:af:6c:0e:c4:57:fc:3f:f5:
5c:37:fb:e5:55:f4:bd:cc:23:99:22:92:8c:78:50:02:b5:df:
13:c2:53:4a:b1:46:f0:73:81:13:51:23:85:e6:32:27:50:df:
4f:c0:f1:17:73:30:3a:1e:3d:60:12:de:d5:75:62:dc:16:2d:
86:76:a3:e1:a3:02:fa:00:52:9b:62:07:46:2c:2d:37:38:26:
0f:5c:de:79:32:4e:68:00:9c:68:59:21:20:db:c2:c4:c9:ab:
fb:15:9c:78:03:96:d9:e2:dc:74:6b:f5:2d:43:bb:77:67:64:
f5:88:b3:e9:1b:3d:ab:da:f3:16:db:a6:04:90:ac:9c:0f:a1:
ed:e6:bc:59:2f:08:0a:5f:8a:21:60:ec:97:aa:63:d5:5d:39:
83:bd:df:8e:fd:79:76:ef:f4:10:b6:12:af:e0:c1:86:9b:0d:
0c:55:ac:fe:00:fd:1c:74:d3:79:31:ee:30:7f:88:ea:1c:c8:
72:1d:70:80:57:13:60:42:70:05:6b:2f:a8:66:ba:54:3b:ca:
9d:1f:24:96:2d:b7:d3:d0:56:06:dc:21:a7:70:00:c1:7e:a1:
7c:4b:b3:4b:a8:11:6b:98:11:23:b0:73:0f:33:2e:b5:99:2e:
c0:b6:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:18:22 2026 by rpki-client