Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32620.roa
File: AS32620.roa (raw, json)
Hash identifier: i65mZ3jjFL3/TV08v0e6wUeuPdj1HjfqTjj6nQW3+dk=
Subject key identifier: 66:EC:EC:7D:F1:3F:2A:43:92:73:07:D3:4C:48:8D:FB:23:F8:35:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20337193D05E4C58E727AC371C259DECDB362042
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32620.roa
Signing time: Wed 08 Jul 2026 00:04:43 +0000
ROA not before: Tue 07 Jul 2026 23:59:43 +0000
ROA not after: Wed 07 Jul 2027 00:04:43 +0000
asID: 32620
IP address blocks: 168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:33:71:93:d0:5e:4c:58:e7:27:ac:37:1c:25:9d:ec:db:36:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 23:59:43 2026 GMT
Not After : Jul 7 00:04:43 2027 GMT
Subject: CN=66ECEC7DF13F2A43927307D34C488DFB23F8358F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:85:c1:22:f5:3c:1f:60:4f:cb:12:b6:2b:
1d:40:34:4d:fc:c0:20:e9:a0:95:6e:81:e9:13:13:
5e:ad:bb:51:89:af:c5:72:51:7f:d8:8c:81:67:c9:
79:a9:c6:f2:f3:35:19:8b:d5:ba:88:e1:d8:69:f0:
d6:e1:57:76:a3:12:02:33:b4:8a:c4:1c:fa:b9:cb:
43:cf:f4:9d:ee:f4:60:80:8e:3e:dc:9d:13:6e:4d:
65:20:cb:72:1d:cd:85:15:ad:5b:38:ae:8e:4e:ba:
e7:89:51:0b:5f:69:9f:7b:89:c8:b2:d2:0b:04:91:
b3:8d:54:22:ff:9e:56:da:ac:15:bf:ef:8a:78:b9:
fb:52:fe:9f:ad:a1:3c:c0:ca:54:b8:1e:29:d1:5f:
d1:24:97:04:6e:52:82:65:5a:bd:fd:2f:8b:64:a4:
d8:68:65:8a:5f:23:d5:78:72:c1:b4:d4:db:1c:45:
d9:a6:e8:34:1d:50:b1:e2:64:5a:02:1c:2b:eb:19:
53:fc:50:73:72:15:7e:5d:21:20:a7:96:40:94:34:
91:fa:42:89:ef:bc:a0:61:8a:f8:5a:e4:22:c2:32:
8c:0b:ec:5a:ee:88:f7:bc:60:aa:9c:12:70:be:c6:
a1:b4:86:60:fc:d1:10:d9:d4:5c:06:f1:85:a0:02:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:EC:7D:F1:3F:2A:43:92:73:07:D3:4C:48:8D:FB:23:F8:35:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
34:67:14:bc:8e:92:e7:1c:94:7d:38:30:2a:ce:4b:8c:0d:3b:
85:ce:06:3b:d1:c7:26:08:ab:4c:cb:b3:9e:75:ef:b4:d3:e6:
4c:65:8d:48:cf:1a:b9:dd:7e:a9:28:f5:81:81:c2:8b:9e:bb:
33:9a:3f:cc:ed:e3:d5:9d:b8:3f:7f:41:1b:58:24:0c:62:51:
9f:e3:87:b0:9c:70:37:0b:de:cb:21:5f:bd:d6:3c:96:c9:e2:
14:e9:e4:09:51:38:cc:08:cc:e2:2e:8e:a6:93:a8:ba:ad:b3:
29:0f:15:29:81:4b:3e:0a:99:20:92:f5:4e:43:1a:05:e5:1f:
eb:54:78:72:87:e0:b0:82:e1:be:c3:f9:6f:6c:e2:55:e5:72:
85:9b:9f:ec:5d:ad:3c:1a:a8:b0:c2:a6:ea:d0:06:a1:56:c6:
7f:65:dc:0c:26:75:d1:11:21:67:c8:60:8a:d3:4a:7e:24:1f:
be:3b:bc:1b:87:21:d9:8b:cd:52:24:dd:48:65:29:f6:5f:af:
f3:8c:8d:21:a4:a4:e5:26:b6:04:9d:ce:5c:9a:ca:89:ca:2f:
45:59:08:c0:c1:ed:bc:ae:2e:79:6a:64:35:2e:15:10:c3:ef:
3a:da:b4:d1:0c:72:a8:07:60:58:30:fb:fd:08:5e:03:09:77:
4f:5a:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:54 2026 by rpki-client