Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/oRuPsOz5dAigxb9RwtLPtyq7MnI.roa
File: oRuPsOz5dAigxb9RwtLPtyq7MnI.roa (raw, json)
Hash identifier: 6ANrlOxb5/GsmMTY5OReA1OUnuxRheN+lgLi3l7/pZw=
Subject key identifier: A1:1B:8F:B0:EC:F9:74:08:A0:C5:BF:51:C2:D2:CF:B7:2A:BB:32:72
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E38685011FD566E9E2331AB1D1B5F62
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/oRuPsOz5dAigxb9RwtLPtyq7MnI.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53667
IP address blocks: 2a12:de41::/32 maxlen: 32
2a12:de42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:68:50:11:fd:56:6e:9e:23:31:ab:1d:1b:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a11b8fb0ecf97408a0c5bf51c2d2cfb72abb3272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:1a:34:3d:1f:43:0f:b9:ab:ba:56:e0:84:
7d:39:69:ec:f5:2d:0b:9c:38:19:3f:64:fb:b8:34:
5b:5d:97:93:52:a4:b5:23:db:60:bf:b4:bd:15:e6:
36:a9:3e:30:e5:47:0c:cc:69:96:ea:a7:9d:3a:57:
5e:a7:77:06:0c:93:5b:b9:06:d5:a6:a8:d4:aa:96:
35:6a:b5:35:e6:07:9e:80:9e:83:04:cc:8c:a3:f4:
91:6e:35:8f:0a:5f:9f:56:40:e7:12:91:42:1b:60:
1c:69:7e:1f:35:12:77:05:c0:f8:14:7f:a5:05:4a:
52:6f:30:8b:db:84:28:5e:64:ed:6f:93:d4:7d:b8:
ea:3f:e5:5b:ac:ba:f6:a4:c0:70:95:23:8a:7e:24:
17:e5:b6:7e:e8:26:3a:5c:3d:34:87:92:ab:be:c6:
82:1f:0f:77:5f:fd:04:c4:19:c6:6d:ba:ef:3e:c7:
00:c8:cb:bb:3d:e3:7b:d3:30:4e:a7:69:61:41:02:
fb:02:25:81:df:a0:86:46:e9:11:b3:9f:2b:d6:20:
39:54:18:77:3d:3c:44:24:5d:42:44:ae:27:c1:fa:
0e:d2:46:9c:30:70:ef:5a:47:0d:12:3e:b9:7b:30:
56:8e:1b:1d:66:6c:39:01:b7:39:e4:7e:a9:5d:35:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:8F:B0:EC:F9:74:08:A0:C5:BF:51:C2:D2:CF:B7:2A:BB:32:72
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/oRuPsOz5dAigxb9RwtLPtyq7MnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de41::-2a12:de42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:dd:0d:52:72:03:43:df:cc:94:ef:17:58:ef:ed:1f:0c:f9:
e2:a9:cb:73:cc:86:ab:b0:4a:15:05:89:e1:5f:5a:17:52:b0:
f0:b7:95:c0:ee:bf:87:da:55:f3:02:18:66:32:c9:85:9e:bc:
c6:bb:67:86:53:ca:a1:30:5c:24:b4:55:81:43:ee:ce:0c:a0:
01:ce:80:05:0e:42:9e:f2:be:c2:13:1b:0f:cf:a8:12:9c:e1:
92:cc:7b:5f:23:a9:cc:44:fb:b7:12:48:01:e7:e6:a9:e4:9b:
c7:01:67:89:a3:30:00:8a:fc:fa:32:61:23:5d:24:8e:7a:47:
c1:54:c5:d0:02:fd:11:9e:34:8a:40:83:93:ad:1f:8d:65:f2:
1a:e8:e1:d0:1b:f6:4c:c9:a5:b1:b0:d7:4b:a2:8b:86:6c:1a:
3d:4b:48:07:e5:0e:26:90:0a:8f:14:52:7f:37:3a:c6:2d:8b:
b1:98:bb:20:e4:2e:ed:17:df:51:42:4c:e5:14:48:2b:f2:ed:
f4:2e:c0:a2:aa:89:5c:f0:f5:c2:96:f1:ea:56:ec:6c:9a:18:
0a:29:c2:fd:c9:b8:ac:5f:0d:22:fc:d3:fe:88:25:d3:1d:db:
43:25:b6:da:53:6e:6f:d7:f0:b0:f5:9c:a6:22:4a:60:fd:49:
2e:96:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:57 2026 by rpki-client