Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
File: AS32097.roa (raw, json)
Hash identifier: l4eGDpHmspbxDt45ih402EeBTpdyToPAQg1JWgWKfAI=
Subject key identifier: E4:B1:4D:0B:2A:EB:9D:02:E8:6F:26:65:44:BE:00:55:16:87:58:FF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3D8103D5E352E8ABE750BEF98B6142B3106AE3F1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
Signing time: Mon 03 Aug 2026 22:43:29 +0000
ROA not before: Mon 03 Aug 2026 22:38:29 +0000
ROA not after: Mon 02 Aug 2027 22:43:29 +0000
asID: 32097
IP address blocks: 155.117.40.0/21 maxlen: 21
168.222.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:81:03:d5:e3:52:e8:ab:e7:50:be:f9:8b:61:42:b3:10:6a:e3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 22:38:29 2026 GMT
Not After : Aug 2 22:43:29 2027 GMT
Subject: CN=E4B14D0B2AEB9D02E86F266544BE0055168758FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:2d:c6:a7:5a:ad:65:08:71:c8:ed:1d:ab:
e9:f6:3c:22:e9:9d:e7:d6:6e:30:c1:86:ef:3c:c8:
ed:28:65:36:d3:78:69:b7:6b:9d:9e:b4:c4:d8:3c:
d2:8e:7b:6d:8b:f5:5b:91:f0:5e:c8:2c:a4:5c:6a:
3a:5b:46:64:31:e6:00:50:f4:d9:65:ce:33:c4:0f:
f7:46:3c:2a:b6:97:fb:d5:cd:83:7d:84:80:1e:06:
63:3e:17:f1:bb:d5:2c:ef:18:34:25:17:dd:72:25:
e3:2b:ac:80:a6:90:73:4d:8a:5a:b5:c0:6a:08:d2:
65:4b:0d:d1:41:a6:a3:a6:ed:fa:f2:8a:57:1a:da:
8f:63:47:57:31:f6:69:9f:dd:03:f1:43:ca:cc:6f:
fa:6f:03:c0:b5:d7:b7:db:0e:8e:ab:e6:d1:37:1a:
01:b1:86:a6:95:c9:fb:2c:d3:4e:70:99:c3:4a:3e:
d7:12:b7:0a:e1:32:a2:d1:19:c2:23:d5:c9:83:52:
38:35:d4:06:34:33:b7:c6:fe:22:6d:33:eb:37:75:
57:d5:4c:6b:e5:4c:4b:ed:31:b9:7d:1e:63:cf:ee:
39:9e:a2:57:15:46:26:b8:51:40:13:1e:b3:67:9f:
4a:ee:9c:a3:6b:84:17:10:71:7c:11:9a:25:7b:7e:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:4D:0B:2A:EB:9D:02:E8:6F:26:65:44:BE:00:55:16:87:58:FF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.40.0/21
168.222.98.0/24
Signature Algorithm: sha256WithRSAEncryption
71:34:fd:9d:0b:ee:e8:38:0b:80:ab:3a:8e:e7:bf:9e:63:a1:
fa:39:2b:9b:b9:34:97:ea:ff:93:59:56:73:4b:d0:b4:38:c8:
12:1d:74:e4:54:4d:8e:08:ee:56:22:19:e3:ce:bb:08:e1:76:
be:4f:1d:9f:bc:01:9c:67:a0:9e:25:69:94:bc:1f:4b:ad:cb:
16:62:a1:95:82:7d:3d:41:35:26:af:bd:97:9d:12:9f:b0:d2:
bc:64:3f:55:af:39:4b:df:85:b8:30:3d:99:84:87:be:19:5f:
83:89:b5:5c:54:38:bb:0f:ba:34:cf:c7:8a:e6:fd:1c:6c:9d:
7e:64:98:f9:2b:58:ea:0b:1d:30:f5:9c:e4:f1:d9:f5:0e:2f:
20:cc:4c:1d:82:51:2a:9b:b6:c0:68:aa:2d:8e:5d:f8:88:05:
e3:f8:67:3e:ee:6a:f8:fc:ff:a2:18:f1:87:6e:91:d4:a5:ae:
6f:19:75:c8:be:bb:f5:da:04:da:b5:23:d8:c9:23:4e:74:21:
af:34:8b:67:6f:dc:b9:55:61:59:73:39:8f:b2:d3:f8:c5:b0:
b0:74:c8:d5:9a:8a:83:57:11:36:c9:54:c1:0f:d8:a8:ea:76:
ed:bd:bc:c4:e7:c6:72:48:79:1b:b4:78:b3:77:91:65:85:da:
49:8a:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:34:52 2026 by rpki-client