Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
File: AS32002.roa (raw, json)
Hash identifier: FkutU5ww/WOAIGhDhrQHIk499/NlPt/y717Cx5VP5Pg=
Subject key identifier: 58:B6:EC:90:E8:DB:09:0D:1E:73:DE:83:D7:35:34:93:BB:10:56:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69E243E4966330182697B002C9384BA0A25B7A69
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
Signing time: Sun 19 Jul 2026 15:03:35 +0000
ROA not before: Sun 19 Jul 2026 14:58:35 +0000
ROA not after: Sun 18 Jul 2027 15:03:35 +0000
asID: 32002
IP address blocks: 155.117.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e2:43:e4:96:63:30:18:26:97:b0:02:c9:38:4b:a0:a2:5b:7a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 14:58:35 2026 GMT
Not After : Jul 18 15:03:35 2027 GMT
Subject: CN=58B6EC90E8DB090D1E73DE83D7353493BB10566F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:2c:6d:b2:16:e3:1b:57:f2:26:ee:ef:ce:
51:58:73:1c:d4:c3:4c:41:e6:4d:4a:08:6d:84:1b:
16:60:7c:4c:20:ab:75:94:e2:99:0b:35:a1:f3:7c:
2c:37:4a:1d:71:c5:65:11:73:c7:b7:00:7f:09:96:
d4:22:c0:fa:e6:de:02:57:5b:c5:6f:c6:72:e5:f8:
e6:2c:b3:82:97:d2:58:94:ac:d5:14:8b:2c:88:33:
5c:83:7f:7e:ed:9a:14:1f:6d:c3:60:ba:6c:78:c4:
e1:c5:2b:72:f1:5f:55:dd:53:78:f7:6b:e3:68:61:
43:e0:28:5b:e0:fc:90:bf:da:01:00:32:c2:54:7f:
fb:c7:b2:f3:e3:a5:d1:71:90:12:cb:82:04:2a:b2:
d9:13:11:d9:0f:5b:3b:ce:f2:da:13:5e:4b:63:2f:
2d:53:db:5a:99:79:df:48:ef:09:83:60:75:f7:c8:
66:52:ab:a6:88:77:9e:68:dc:df:fb:33:78:a2:ec:
4a:99:fe:e1:a7:d8:48:01:60:56:58:7e:cb:66:c1:
c2:32:26:88:5f:19:8f:9e:dc:7a:d5:99:fe:a4:50:
ca:36:d3:a7:43:0f:5f:a6:72:a4:44:80:06:7b:17:
90:0d:54:9b:c2:f4:e8:12:82:9f:83:e1:e6:9c:93:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:EC:90:E8:DB:09:0D:1E:73:DE:83:D7:35:34:93:BB:10:56:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bb:b6:6c:d8:ba:9e:ed:8f:d5:94:77:83:3a:86:64:88:d9:
1e:a0:29:fc:be:fe:04:31:cb:ae:f0:d6:99:d2:c3:c0:7f:73:
49:5b:f2:4e:c2:e4:08:58:ca:53:e2:4d:93:45:ca:9e:66:d6:
27:26:29:f2:b3:a4:d0:e2:39:fb:04:1f:ad:e7:79:71:50:8a:
3e:58:8c:bd:66:41:4a:88:11:78:26:53:d8:21:49:21:b0:eb:
17:8d:9d:e0:d5:fd:d1:af:b1:78:e6:be:ee:cc:da:37:51:2e:
4e:39:03:6f:95:52:cf:73:a2:8b:ea:57:5c:29:6a:66:4a:f2:
d6:9d:8b:19:0f:cc:b5:78:9e:96:fe:50:ae:bf:f0:03:36:67:
51:a2:27:11:be:c3:c5:39:9c:0b:1c:86:e2:11:86:bb:2f:ac:
a6:bc:9a:03:82:36:b3:56:61:d0:3e:b7:5f:91:39:2b:d4:15:
af:52:9a:19:0d:6a:8c:0a:8c:13:63:f7:c1:4e:4a:1e:b4:53:
ef:72:bd:ec:6f:86:41:87:5d:89:e4:ea:b2:4a:a2:d4:0f:b4:
2c:d3:fe:15:29:27:6d:e4:82:d0:01:22:4c:76:e2:02:dd:06:
cd:41:99:c5:93:05:bc:d8:a7:80:07:77:48:b8:28:d8:b8:3a:
5f:c6:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:31 2026 by rpki-client