Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PF3ThjU_QZCvLG_7UxGpOzv98Cg.roa
File: PF3ThjU_QZCvLG_7UxGpOzv98Cg.roa (raw, json)
Hash identifier: 7uwkpGDAeISSFx65oNhQldXKXBoyfkr92WemIPXwsnA=
Subject key identifier: 3C:5D:D3:86:35:3F:41:90:AF:2C:6F:FB:53:11:A9:3B:3B:FD:F0:28
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E386B7520D2395FA6FC1693B1247AB8
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PF3ThjU_QZCvLG_7UxGpOzv98Cg.roa
Signing time: Fri 02 Jan 2026 10:19:45 +0000
ROA not before: Fri 02 Jan 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216226
IP address blocks: 2a12:de40:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6b:75:20:d2:39:5f:a6:fc:16:93:b1:24:7a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c5dd386353f4190af2c6ffb5311a93b3bfdf028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:48:8d:0a:c9:ff:a0:f3:21:56:36:85:f1:
d4:98:d5:93:50:f2:9e:81:bb:78:82:12:f1:55:fb:
1d:d9:81:6e:c7:4b:93:c5:d7:b0:a7:a5:29:5b:f1:
8f:4f:f3:1c:52:32:fd:cf:dd:4e:ab:d9:43:ea:b8:
f6:25:79:c0:0a:51:c7:98:3d:47:d1:c2:4b:95:43:
db:99:2b:e3:86:18:9f:c3:15:17:39:a3:7e:9d:17:
78:ae:de:af:47:fc:c2:3c:b6:28:f0:51:4f:a9:38:
9f:a9:7e:00:37:93:47:e0:40:dd:46:1b:9f:dd:76:
25:b8:28:09:d2:49:c1:7d:95:ee:50:5d:26:0c:9b:
b8:55:e3:62:3e:b8:96:0d:85:39:e2:9c:46:48:61:
7a:1e:d3:a7:43:cc:53:73:47:2e:2d:50:df:49:67:
03:6c:bc:4c:fa:5d:14:34:2f:8a:df:e3:fa:e2:97:
5c:d5:af:26:8d:10:8c:0c:06:4a:89:a7:2f:50:d8:
7a:51:8e:09:af:b3:e0:6f:a2:f9:cf:72:ee:1b:71:
a9:06:98:9f:99:bc:2a:5b:21:11:f6:12:d7:af:c4:
f2:a2:6a:17:c9:43:b3:78:86:82:46:c7:65:20:3e:
a0:69:42:fe:d6:5b:05:13:cf:1b:07:63:e4:66:11:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:D3:86:35:3F:41:90:AF:2C:6F:FB:53:11:A9:3B:3B:FD:F0:28
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PF3ThjU_QZCvLG_7UxGpOzv98Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:30::/48
Signature Algorithm: sha256WithRSAEncryption
64:bc:eb:43:ba:d2:5d:13:21:98:f9:43:50:fd:6e:9d:bb:27:
de:8e:a4:1c:d3:79:b5:20:cb:bd:a5:b2:1a:b7:07:38:1a:96:
be:f6:81:f8:05:13:85:23:1e:99:42:0b:ff:fc:d5:32:7e:30:
78:77:e8:9c:48:28:54:4d:8b:cc:c9:a5:53:4e:24:22:3c:48:
06:53:38:7b:1e:e2:7a:d1:af:07:4c:28:cd:e8:73:57:d3:5b:
ac:21:f4:45:bf:66:be:77:d4:b3:13:c5:4d:de:6c:51:29:ac:
5a:bc:51:8c:75:0d:d1:d9:0f:71:7f:96:ac:d1:31:30:cc:34:
04:4b:15:fb:4e:93:99:c9:41:45:61:af:68:19:65:49:61:76:
c1:28:31:07:aa:9c:af:38:8b:ac:4c:f1:cf:08:72:bb:65:fd:
49:2d:41:d1:c0:34:59:ef:6d:57:ad:fd:a9:70:c3:d6:bc:74:
07:6e:8a:45:0b:78:2d:27:18:05:02:a2:ff:de:95:dc:f3:90:
31:8c:fc:6e:da:29:47:cb:20:a1:73:51:9a:27:79:db:f3:91:
83:91:e9:dd:dc:18:d9:99:e5:07:56:f3:d0:ad:38:e0:28:ab:
12:e6:dc:e5:6f:c7:c1:3c:76:ff:97:02:4d:e3:d8:f6:b7:ef:
4b:27:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:55 2026 by rpki-client