Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/25rTS0jJ-Dxysv-1a_M5L_WunA8.roa
File: 25rTS0jJ-Dxysv-1a_M5L_WunA8.roa (raw, json)
Hash identifier: n+v6/6qAF58PmAr1JrZLgwfO+ofdIVTWnLlueOnEJZI=
Subject key identifier: DB:9A:D3:4B:48:C9:F8:3C:72:B2:FF:B5:6B:F3:39:2F:F5:AE:9C:0F
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E38691CD89291201D74D89C0DD333B4
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/25rTS0jJ-Dxysv-1a_M5L_WunA8.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207695
IP address blocks: 2a12:de40:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:69:1c:d8:92:91:20:1d:74:d8:9c:0d:d3:33:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db9ad34b48c9f83c72b2ffb56bf3392ff5ae9c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:4a:36:00:90:d5:01:78:5b:1f:a8:cc:ab:
47:2b:5c:90:1a:00:ec:e9:33:25:6f:bb:0e:f0:99:
c0:ef:ff:b1:cd:ff:ca:83:b0:66:45:c0:77:c6:12:
1c:17:52:2a:00:75:24:3a:d5:d9:bf:db:13:5a:26:
9d:68:ed:d0:11:98:4f:9c:e8:de:b0:d7:df:dc:43:
e1:93:57:fc:84:e3:d0:67:f8:5c:6e:d6:a8:e4:0d:
a2:1a:61:32:01:00:d9:db:ed:6a:26:5a:0d:59:ec:
38:10:52:cc:3e:83:b6:8f:d3:27:cb:4b:af:da:aa:
20:fe:2c:5c:b4:d4:74:29:57:8a:b7:6f:f5:bc:aa:
31:c0:1e:92:f4:8a:50:24:35:e7:43:ab:ed:f6:2f:
6b:ac:37:a6:4b:4b:dd:79:a3:59:ea:94:44:20:e9:
62:32:b0:6e:47:23:b9:cf:0c:9b:4e:97:7f:20:52:
94:13:eb:4a:bb:45:f0:d0:1a:ab:40:11:05:a6:95:
f4:f8:e7:53:ec:7e:26:7c:6c:29:bc:0d:28:63:81:
f4:01:6e:74:7d:97:7a:50:b1:62:e7:ed:d6:fa:3e:
75:2c:e3:b5:04:04:b6:11:20:71:2f:ce:d8:1c:8b:
39:98:f7:14:46:7a:7a:b2:2d:26:0b:85:57:14:b5:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:D3:4B:48:C9:F8:3C:72:B2:FF:B5:6B:F3:39:2F:F5:AE:9C:0F
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/25rTS0jJ-Dxysv-1a_M5L_WunA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:9::/48
Signature Algorithm: sha256WithRSAEncryption
66:16:e2:bc:76:d0:4f:60:1c:d0:c3:2d:24:20:6b:20:39:92:
19:7d:4b:48:f7:ae:c4:0a:eb:38:28:01:ee:3a:5d:ed:a8:97:
98:17:59:af:08:aa:f4:59:28:14:5c:0c:fe:0d:f3:b0:e9:c2:
d1:c6:8e:fc:66:c2:a4:26:18:77:fe:00:a3:96:82:40:d8:0d:
3f:07:61:e3:34:c5:50:df:cd:7a:2e:2e:c3:d2:e4:38:3c:35:
b8:eb:e7:28:c7:d4:06:56:b8:b4:ef:09:8f:29:fc:da:2d:aa:
10:e8:18:85:da:86:e9:38:47:93:de:4c:4f:2d:f8:e7:64:2d:
0d:11:1e:54:21:c1:8f:b4:75:d3:a5:e9:ba:41:d1:4a:03:1d:
73:da:71:d0:18:1c:c5:05:2f:0d:a6:47:5a:ba:d1:61:a9:dd:
0d:bf:9f:60:42:1b:1b:66:87:ea:cc:90:cc:b3:28:47:cc:bb:
05:ba:42:e6:0a:72:15:78:7b:67:4e:2d:ae:69:3c:82:34:e2:
80:34:43:e5:4f:db:56:49:6d:41:a4:2f:01:91:56:73:8c:5e:
88:ce:d5:58:d8:ea:47:df:01:4b:0f:f8:2b:b0:eb:1c:85:08:
6f:d3:81:03:ec:8f:02:4e:77:f9:2f:66:b4:1b:5e:4f:20:0c:
04:43:e3:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt+OGkc2JKRIB102JwN0zO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjlhZDM0YjQ4YzlmODNjNzJiMmZmYjU2YmYzMzkyZmY1YWU5YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/dKNgCQ1QF4Wx+ozKtHK1yQGgDs
6TMlb7sO8JnA7/+xzf/Kg7BmRcB3xhIcF1IqAHUkOtXZv9sTWiadaO3QEZhPnOje
sNff3EPhk1f8hOPQZ/hcbtao5A2iGmEyAQDZ2+1qJloNWew4EFLMPoO2j9Mny0uv
2qog/ixctNR0KVeKt2/1vKoxwB6S9IpQJDXnQ6vt9i9rrDemS0vdeaNZ6pREIOli
MrBuRyO5zwybTpd/IFKUE+tKu0Xw0BqrQBEFppX0+OdT7H4mfGwpvA0oY4H0AW50
fZd6ULFi5+3W+j51LOO1BAS2ESBxL87YHIs5mPcURnp6si0mC4VXFLXeNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNua00tIyfg8crL/tWvzOS/1rpwPMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvMjVyVFMwakotRHh5c3YtMWFfTTVMX1d1bkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLeQAAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBmFuK8dtBPYBzQwy0kIGsgOZIZfUtI967ECus4
KAHuOl3tqJeYF1mvCKr0WSgUXAz+DfOw6cLRxo78ZsKkJhh3/gCjloJA2A0/B2Hj
NMVQ3816Li7D0uQ4PDW46+cox9QGVri07wmPKfzaLaoQ6BiF2obpOEeT3kxPLfjn
ZC0NER5UIcGPtHXTpem6QdFKAx1z2nHQGBzFBS8NpkdautFhqd0Nv59gQhsbZofq
zJDMsyhHzLsFukLmCnIVeHtnTi2uaTyCNOKANEPlT9tWSW1BpC8BkVZzjF6IztVY
2OpH3wFLD/grsOschQhv04ED7I8CTnf5L2a0G15PIAwEQ+MV
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:56 2026 by rpki-client