Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
File: AS32167.roa (raw, json)
Hash identifier: /PK3uZ/BbQV/2TPiEHmITwlFIQCEEKkLixgAb9E1oEI=
Subject key identifier: 3E:4E:40:11:69:83:40:AF:7A:19:E3:E9:1C:C2:17:F8:C9:40:A7:89
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2728FC49CA24A8CC406C77D45914CC118EA7566E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
Signing time: Fri 22 May 2026 16:47:15 +0000
ROA not before: Fri 22 May 2026 16:42:15 +0000
ROA not after: Fri 21 May 2027 16:47:15 +0000
asID: 32167
IP address blocks: 2a13:9500:95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:28:fc:49:ca:24:a8:cc:40:6c:77:d4:59:14:cc:11:8e:a7:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 16:42:15 2026 GMT
Not After : May 21 16:47:15 2027 GMT
Subject: CN=3E4E4011698340AF7A19E3E91CC217F8C940A789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:88:81:04:b4:a1:d5:7f:d5:59:6a:72:30:
7f:a0:b9:be:b7:04:9b:74:c2:7e:93:83:0b:8f:26:
8b:bd:88:e3:65:ae:f9:40:7f:0c:09:17:e6:a2:95:
0e:aa:5f:c5:fd:e3:61:fa:26:6b:89:25:c2:af:b4:
25:f8:86:fa:06:e4:59:c1:71:1e:ce:52:c0:fe:66:
46:a4:6d:36:fc:5f:19:9a:b9:08:6c:7d:fe:ff:d0:
f9:91:79:6c:29:7b:e1:dd:fc:7b:f5:22:f6:b3:25:
ab:96:99:90:e9:11:04:7f:dc:65:bf:7d:a9:32:56:
b5:7f:5f:ca:40:3d:36:24:1f:1d:4b:56:82:12:7c:
80:a4:10:ec:c9:85:32:3c:94:47:22:10:7c:fa:4d:
d7:f8:b4:fb:74:df:50:b0:3d:c1:df:f2:cf:c5:89:
17:ab:71:b8:77:60:20:0c:0a:86:e4:ed:c2:6a:14:
13:c7:77:3c:e1:17:75:2b:92:a2:d7:d6:25:7f:cf:
62:a9:89:f1:3f:ff:5b:00:7e:d8:a9:61:45:0e:2c:
a5:7d:91:13:7c:83:4b:9a:54:27:13:02:62:d3:0e:
35:31:1f:67:60:17:07:1e:57:40:26:ee:9b:a2:f6:
b1:ba:b6:5c:85:3c:f6:1e:48:58:9e:61:a4:52:5e:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:40:11:69:83:40:AF:7A:19:E3:E9:1C:C2:17:F8:C9:40:A7:89
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:95::/48
Signature Algorithm: sha256WithRSAEncryption
72:d7:a4:b9:95:a0:5b:65:08:d7:43:c6:41:dc:ac:82:79:55:
fa:f3:90:53:3c:2f:dc:1e:6e:ef:0d:e4:94:4d:fe:a4:ac:79:
c4:37:b6:d8:c4:d6:f0:c3:2f:6a:e0:2d:ea:f1:58:10:aa:ed:
d1:ec:cd:42:9c:90:aa:e7:85:9c:d0:de:f0:e6:61:e9:ee:3b:
63:ed:80:5f:20:16:83:8d:cf:df:7d:4f:67:79:3c:69:ab:8e:
7a:09:b0:15:f0:52:2d:eb:c6:86:fb:5e:51:ab:90:6e:1b:f7:
93:01:39:5d:b5:62:63:08:60:c9:b5:a1:3d:03:eb:7c:42:e8:
af:9b:d8:1b:0b:45:8c:bc:cf:a3:5c:82:36:b7:b6:8c:f2:77:
17:6e:ba:5d:19:28:6f:13:8b:92:10:ed:fa:ea:97:93:fb:fe:
b8:68:bc:9a:06:19:7d:25:ce:b9:8c:5e:c9:c5:d3:1e:8f:cf:
b3:d3:fc:8e:85:37:24:09:5a:7d:63:d3:a3:bf:bf:e4:6d:fc:
f0:10:3d:dd:95:05:c5:bf:cb:a3:71:a4:5d:29:dc:c1:77:d2:
9b:a0:82:e3:45:b8:ca:70:ee:39:93:79:e4:98:44:ad:1c:b0:
36:24:6d:25:66:71:5c:a6:d9:bc:69:05:df:50:01:f1:c2:4b:
e7:e7:a3:9c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUJyj8ScokqMxAbHfUWRTMEY6nVm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjIxNjQyMTVaFw0yNzA1MjExNjQ3MTVaMDMxMTAvBgNV
BAMTKDNFNEU0MDExNjk4MzQwQUY3QTE5RTNFOTFDQzIxN0Y4Qzk0MEE3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdIiBBLSh1X/VWWpyMH+gub63
BJt0wn6TgwuPJou9iONlrvlAfwwJF+ailQ6qX8X942H6JmuJJcKvtCX4hvoG5FnB
cR7OUsD+ZkakbTb8XxmauQhsff7/0PmReWwpe+Hd/Hv1IvazJauWmZDpEQR/3GW/
fakyVrV/X8pAPTYkHx1LVoISfICkEOzJhTI8lEciEHz6Tdf4tPt031CwPcHf8s/F
iRercbh3YCAMCobk7cJqFBPHdzzhF3UrkqLX1iV/z2KpifE//1sAftipYUUOLKV9
kRN8g0uaVCcTAmLTDjUxH2dgFwceV0Am7pui9rG6tlyFPPYeSFieYaRSXirdAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUPk5AEWmDQK96GePpHMIX+MlAp4kwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzIxNjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA
AJUwDQYJKoZIhvcNAQELBQADggEBAHLXpLmVoFtlCNdDxkHcrIJ5VfrzkFM8L9we
bu8N5JRN/qSsecQ3ttjE1vDDL2rgLerxWBCq7dHszUKckKrnhZzQ3vDmYenuO2Pt
gF8gFoONz999T2d5PGmrjnoJsBXwUi3rxob7XlGrkG4b95MBOV21YmMIYMm1oT0D
63xC6K+b2BsLRYy8z6Ncgja3tozydxduul0ZKG8Ti5IQ7frql5P7/rhovJoGGX0l
zrmMXsnF0x6Pz7PT/I6FNyQJWn1j06O/v+Rt/PAQPd2VBcW/y6NxpF0p3MF30pug
guNFuMpw7jmTeeSYRK0csDYkbSVmcVym2bxpBd9QAfHCS+fno5w=
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:23:09 2026 by rpki-client