Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3130322e302f32342d3234203d3e203136323736.roa
File: 39312e3139392e3130322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: m6KajF/a3c06IUDESvMgZC8VR9u/VeW9n6F7/ccqbmk=
Subject key identifier: DE:77:79:34:5B:E1:36:A5:DA:29:79:30:83:7A:F5:1C:DC:CC:AA:B5
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 377A62A532095459344C60680F3D9841685E05B0
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3130322e302f32342d3234203d3e203136323736.roa
Signing time: Tue 23 Dec 2025 12:32:07 +0000
ROA not before: Tue 23 Dec 2025 12:27:07 +0000
ROA not after: Tue 22 Dec 2026 12:32:07 +0000
asID: 16276
IP address blocks: 91.199.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7a:62:a5:32:09:54:59:34:4c:60:68:0f:3d:98:41:68:5e:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Dec 23 12:27:07 2025 GMT
Not After : Dec 22 12:32:07 2026 GMT
Subject: CN=DE7779345BE136A5DA297930837AF51CDCCCAAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:65:e8:8e:3a:19:5f:80:5d:86:83:cc:a0:
db:bc:c7:4a:59:39:5c:6d:ca:56:a6:a0:21:98:b0:
55:ae:93:83:5c:94:84:ec:9e:05:69:ef:1a:f3:b7:
ef:e2:18:b9:5a:21:4d:2f:22:11:b0:5b:3a:56:f8:
1b:1d:8e:31:80:04:f3:de:8f:fe:bc:97:f8:4f:5e:
c6:7b:fc:fd:7a:91:56:bb:73:d1:9f:78:ad:81:3e:
84:36:72:70:a7:c5:6a:16:e0:50:26:53:30:5b:9f:
c9:0c:f0:2f:e3:f9:eb:77:23:8d:df:1e:80:94:5a:
22:de:19:f8:0d:01:25:8a:b0:9b:11:d0:73:f5:de:
2f:4f:13:d0:30:90:eb:93:8a:f9:20:8e:a6:cc:70:
51:cb:31:17:63:fe:2e:80:2f:6a:de:f5:d7:10:78:
4b:2a:46:5a:5b:3f:48:e1:de:6c:c7:5e:ed:3f:07:
7d:40:cc:f6:eb:a5:45:69:6e:bf:07:8c:51:1e:9a:
87:6e:b0:86:30:40:67:b9:f0:41:e9:c8:65:f8:2c:
0b:c1:e8:b4:9e:b4:7c:7a:53:49:e0:91:17:4e:b8:
29:b0:3b:10:8f:c5:9a:0b:6d:22:99:35:ab:9d:ed:
8a:9e:86:43:06:5d:ae:8e:e8:d4:5a:ce:4d:d9:20:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:79:34:5B:E1:36:A5:DA:29:79:30:83:7A:F5:1C:DC:CC:AA:B5
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3130322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:52:ff:17:b4:2a:f7:34:35:af:0d:4a:1d:d3:ee:df:1b:eb:
df:c2:ca:a6:f8:d7:8a:8d:bc:85:51:3f:1f:75:49:81:5a:67:
8b:a6:c5:ef:5f:8d:29:9d:8e:e0:1e:43:91:ea:76:ca:d1:ad:
a4:13:95:ed:95:fe:8f:88:44:c1:02:cd:aa:b5:6b:7c:09:d8:
52:f3:64:af:f1:8d:10:a6:21:63:39:ef:e2:c0:a1:12:5c:01:
31:e7:22:cc:52:ca:25:f4:15:46:92:e0:30:25:dd:4c:eb:b9:
5c:d4:a0:2a:09:c5:f6:de:ae:de:d2:8c:3b:e4:cf:a4:a1:5f:
fa:86:82:09:d8:99:01:4f:7f:3f:41:de:6c:1f:18:44:0f:e8:
85:65:02:4c:6b:39:ed:6b:ff:d8:45:c1:1d:7c:88:96:85:02:
0a:c3:b9:58:74:0d:30:bf:2e:d1:56:f4:71:ff:57:57:c1:a9:
ac:a6:56:88:61:bf:1a:50:2d:26:6c:ea:33:25:c9:ac:c3:3e:
e1:bb:49:ac:33:fa:99:a1:88:b2:d8:92:ca:a0:45:75:42:da:
7f:f6:68:15:94:0d:1c:36:fd:5a:68:6e:ef:5d:45:46:3b:09:
8d:b0:c9:d6:fe:b6:f1:a0:47:57:c8:aa:9b:69:a9:ae:19:f4:
79:bb:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:27 2026 by rpki-client