Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32167.roa
File: AS32167.roa (raw, json)
Hash identifier: ZIkYPlg+Tl5VY5oNt83dZpwFH8ejhXdAOW+W4tY2tk0=
Subject key identifier: 1D:74:62:47:C2:EC:CF:0D:31:80:F7:49:DB:41:10:A6:F2:D4:3B:32
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43DF0808B3E306B9A19B3645509C9E4AA286D755
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32167.roa
Signing time: Thu 06 Aug 2026 23:49:20 +0000
ROA not before: Thu 06 Aug 2026 23:44:20 +0000
ROA not after: Thu 05 Aug 2027 23:49:20 +0000
asID: 32167
IP address blocks: 155.117.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:df:08:08:b3:e3:06:b9:a1:9b:36:45:50:9c:9e:4a:a2:86:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 6 23:44:20 2026 GMT
Not After : Aug 5 23:49:20 2027 GMT
Subject: CN=1D746247C2ECCF0D3180F749DB4110A6F2D43B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:80:9b:e3:2c:95:07:66:6c:b4:f1:4e:43:
d7:04:54:2a:18:71:2e:17:02:e6:cc:65:2f:14:0c:
3f:07:3a:f8:dd:10:02:7b:0f:94:5f:9a:5b:33:ce:
96:73:0c:5e:c4:08:15:14:19:c3:5d:27:50:a2:6d:
53:ef:3f:e0:4a:fe:9f:92:fb:ed:04:c3:13:88:3e:
ae:51:8c:a4:6f:5e:19:50:90:d6:83:58:75:02:1a:
65:aa:86:b9:2e:e4:81:b7:eb:82:52:15:8b:6d:03:
b7:b9:c9:19:30:85:bb:40:ff:95:3b:c0:91:4b:5b:
4b:4b:5b:a4:4d:2c:ad:c2:9e:5f:d4:85:fc:91:a6:
98:ac:1f:e4:fd:31:ab:81:55:59:91:5b:89:14:1e:
4a:74:a4:5d:4f:1a:47:fc:0d:00:06:06:f2:d5:c1:
25:e9:47:cc:7c:18:e1:3b:de:51:62:03:ae:52:d6:
4b:0e:64:b4:f0:bf:6d:f8:3a:0a:96:3e:29:00:4a:
83:13:92:ac:2f:0c:7b:5f:f5:e8:f0:14:75:4c:73:
20:e4:f0:f1:40:03:4c:0c:99:ef:f0:91:58:f5:54:
fa:59:11:62:da:73:a2:cf:1b:ce:16:9d:c3:3d:e1:
56:90:2e:0a:51:b4:d5:a4:82:0b:ba:20:dd:92:88:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:62:47:C2:EC:CF:0D:31:80:F7:49:DB:41:10:A6:F2:D4:3B:32
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.84.0/23
Signature Algorithm: sha256WithRSAEncryption
51:c2:00:80:bf:96:74:03:10:57:2a:12:e3:2d:5a:31:62:4c:
ee:97:43:f2:d4:da:7e:51:55:57:3e:33:ec:a8:8c:61:3f:0e:
a4:25:13:37:dc:00:da:a0:21:68:ed:b2:69:ad:02:52:57:bd:
1e:fc:da:a6:8d:b2:20:63:43:45:29:0f:de:20:35:ee:09:46:
29:24:d3:ce:26:ec:77:e0:95:57:2b:7e:8f:d2:17:6b:cd:ae:
dd:15:fe:7d:c7:e3:7d:b9:9a:ab:ec:e8:a9:5b:a3:e1:3c:5e:
04:48:d9:34:6b:42:75:53:e6:60:05:9f:9e:ae:89:de:ac:46:
f7:de:ec:09:71:65:bc:3e:84:e1:10:8a:eb:0e:df:2b:68:27:
bd:97:b9:c6:99:b8:9d:81:a7:9a:16:80:95:d4:c3:86:7c:d2:
b8:aa:23:e8:bd:0d:03:5b:12:f8:57:ed:03:74:11:cf:77:5a:
4c:78:e8:77:9c:43:8f:c7:f0:11:6d:c1:11:a8:ed:d4:3e:9f:
ee:1b:29:96:20:ae:be:f8:15:30:a6:8e:ae:e0:fa:8b:23:00:
59:9a:e0:4f:c5:47:9c:8e:7a:46:d1:a1:9c:01:69:24:85:6a:
4c:a6:ff:43:5a:ab:6f:9b:cc:44:e5:3e:e8:db:a0:ac:cc:4e:
a7:c5:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:49 2026 by rpki-client