Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
File: AS32132.roa (raw, json)
Hash identifier: BoBvNY/WJCk2Mc0mHAc39NhaN2in8vZf3gTCPvr2V88=
Subject key identifier: 44:6A:21:A4:AE:3F:2A:06:A0:5B:CD:AE:24:64:62:99:16:5F:84:CE
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 61E8C24507A5E563649F845B3B387C9883D0DA69
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
Signing time: Wed 15 Jul 2026 00:04:13 +0000
ROA not before: Tue 14 Jul 2026 23:59:13 +0000
ROA not after: Wed 14 Jul 2027 00:04:13 +0000
asID: 32132
IP address blocks: 82.139.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e8:c2:45:07:a5:e5:63:64:9f:84:5b:3b:38:7c:98:83:d0:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 14 23:59:13 2026 GMT
Not After : Jul 14 00:04:13 2027 GMT
Subject: CN=446A21A4AE3F2A06A05BCDAE24646299165F84CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:62:f4:8c:53:29:28:57:18:8f:38:ab:be:
4b:c3:ae:4c:28:36:74:81:6a:fc:b6:d4:60:00:51:
4a:00:4f:1c:36:37:5e:15:cd:3a:8f:00:74:66:cd:
3c:63:11:e2:83:a4:bf:e5:f0:3d:ad:fa:e0:0a:7e:
ee:c9:fa:aa:9d:56:c5:96:91:ae:a8:93:f1:d2:60:
49:d4:2b:82:a1:60:a4:60:f6:93:c9:29:9e:8e:d1:
ac:cf:5f:10:7f:34:a5:04:35:49:4c:51:b9:42:d9:
4b:bc:9f:7b:cc:6f:f9:bd:24:fe:7e:2c:ba:09:ed:
6e:6f:5a:17:16:7e:ab:8a:89:46:72:2e:13:ed:ea:
5d:52:89:99:3a:a6:8e:36:95:3e:66:93:1a:e6:f0:
1f:0e:d7:b3:46:49:af:08:5a:49:91:be:3c:a7:eb:
f8:ff:ee:bb:6a:bf:86:33:91:8d:d5:04:3e:de:25:
1b:a0:4f:51:59:f1:b9:d2:b3:3c:13:d0:56:ed:d7:
53:aa:a6:ed:eb:68:44:11:b2:25:72:83:ce:b4:75:
f0:e7:4c:95:08:de:8d:dc:06:ff:54:54:a6:7e:9a:
91:d8:ef:d1:b8:1f:0a:cf:cc:0b:b9:b0:d5:c4:a9:
c3:b5:60:9e:1d:db:08:88:db:22:38:33:78:47:91:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:21:A4:AE:3F:2A:06:A0:5B:CD:AE:24:64:62:99:16:5F:84:CE
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS32132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:91:b1:d5:f4:46:a3:49:88:ae:12:1c:2e:97:a3:58:9c:2a:
f7:05:b6:7b:ae:82:b6:4a:8c:0d:a2:36:23:46:dd:96:85:f3:
f0:15:c1:24:07:b4:6a:92:e4:13:be:78:9c:27:b9:b4:d1:d5:
8d:5c:e0:48:74:f5:02:14:25:83:0a:bd:3f:2b:4b:7d:13:a0:
45:f8:2a:8c:14:f9:af:cc:4f:cd:38:74:6b:8d:90:2e:89:ff:
0e:a6:89:e0:2b:f6:53:bb:51:ac:7c:86:67:3b:c8:5a:3d:0f:
f5:ab:63:d0:cb:b4:c6:af:76:5e:ff:d6:7b:50:38:93:15:5c:
4c:9c:3f:cd:8a:08:6d:4c:97:2c:44:f0:56:cc:77:1f:ce:17:
e2:06:b1:7f:95:20:8d:95:74:e8:2b:cf:79:8d:f7:18:82:04:
58:38:a4:8b:66:d6:d4:06:07:71:8b:c5:d3:02:5f:24:71:e4:
31:1f:e6:20:a3:e5:8a:c4:45:aa:2d:d1:49:15:28:89:c4:40:
2a:42:32:42:71:35:79:a3:0b:cf:fe:bf:5e:08:54:ba:29:50:
10:dc:d8:1d:53:ea:5c:7d:99:0f:4c:f9:13:77:98:cb:d4:99:
64:27:d6:ae:70:e7:7f:0d:cb:cf:d2:2a:22:c3:50:89:38:a5:
e3:a3:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:07 2026 by rpki-client