Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
File: AS32132.roa (raw, json)
Hash identifier: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=
Subject key identifier: 51:C3:4D:A6:B3:75:F0:2C:E5:26:2B:28:77:B1:4F:A4:8C:6D:C9:59
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5A453120F4F82EBC7BF3A37739F78B924E82F599
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
Signing time: Thu 13 Nov 2025 15:16:44 +0000
ROA not before: Thu 13 Nov 2025 15:11:44 +0000
ROA not after: Thu 12 Nov 2026 15:16:44 +0000
asID: 32132
IP address blocks: 78.41.48.0/24 maxlen: 24
78.41.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 16:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:45:31:20:f4:f8:2e:bc:7b:f3:a3:77:39:f7:8b:92:4e:82:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Nov 13 15:11:44 2025 GMT
Not After : Nov 12 15:16:44 2026 GMT
Subject: CN=51C34DA6B375F02CE5262B2877B14FA48C6DC959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:5f:8c:90:29:e7:98:45:2f:9f:2a:6a:ef:
9f:7a:4d:76:b4:b8:34:73:52:0e:df:54:67:14:c9:
62:5c:58:f5:02:f9:b4:61:0b:46:bb:a1:47:44:e4:
a8:d4:c5:49:36:4f:c4:02:38:ac:6d:be:54:45:06:
11:c8:b0:17:b7:4b:5b:6f:f6:2c:ae:06:7c:19:42:
9d:7b:a7:bb:86:c1:45:41:d6:7a:c1:1f:68:c9:11:
2a:9f:54:2e:e4:8c:fb:ba:c5:b6:25:f8:68:64:13:
a8:f8:2a:46:2d:b6:91:3c:c2:aa:c0:19:36:46:d7:
fb:d9:7e:f5:c6:fb:30:d5:ed:cc:41:6c:5c:82:72:
eb:77:85:6d:b2:f3:d1:6b:17:a3:bf:f5:f9:d4:15:
4e:e3:b8:e3:c3:bf:92:7a:cb:06:f5:74:f9:23:ae:
c4:83:78:02:cc:ed:11:dd:66:65:ed:4a:fe:ba:62:
37:f1:cd:86:b5:8c:30:2b:d2:86:06:69:3f:e3:67:
77:4e:7a:da:26:92:b6:c1:92:c2:58:dd:ec:e2:b2:
5a:c5:2d:dc:ed:52:a6:30:65:00:b5:fa:de:15:b5:
9a:6e:6f:49:06:07:04:0d:fd:62:49:0e:1f:10:05:
d7:2c:58:49:8e:77:f9:36:41:47:ed:e3:e3:bc:86:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:4D:A6:B3:75:F0:2C:E5:26:2B:28:77:B1:4F:A4:8C:6D:C9:59
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/23
Signature Algorithm: sha256WithRSAEncryption
02:1b:ff:69:99:df:07:79:41:b6:fe:7f:9b:49:5b:64:e5:aa:
9c:71:c4:1c:3e:6f:d8:39:8b:5d:97:21:03:4c:4d:9a:56:52:
28:b0:cb:ff:b5:22:fe:3a:3e:8e:38:84:db:ca:cd:fd:9a:0e:
57:42:10:af:ae:33:f0:4f:55:2f:75:72:70:6f:4b:37:57:83:
3c:dd:98:51:77:a9:c2:c2:95:f9:e3:fb:7b:4d:78:04:e6:d1:
a4:2d:7a:5f:f0:d9:64:2a:29:11:7d:67:e3:77:b8:e3:31:7d:
87:03:26:3f:23:e9:be:f6:6d:cc:3f:0b:3b:c4:47:60:3b:97:
dc:fc:a6:b6:92:3f:8d:ea:1e:02:2d:a9:2e:66:5b:10:32:67:
c4:ef:4e:cd:71:9a:90:a1:51:04:4f:ba:21:c8:54:89:b3:0c:
e2:84:cf:6c:b0:b1:01:7e:16:16:e9:c4:78:ee:61:49:2f:35:
43:3d:4f:93:3b:07:ea:42:91:59:df:b0:0f:e6:73:15:a9:6c:
de:49:a3:50:e8:9c:1f:82:49:f4:f2:9f:07:ba:3d:92:31:57:
dd:ab:2f:82:45:12:07:a2:3d:1a:c0:c4:da:7d:5a:a7:e1:40:
3e:42:96:f0:09:68:9f:a5:ad:a0:f4:38:27:0d:46:97:4c:cf:
4c:4e:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 06:37:32 2025 by rpki-client