Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
File: AS32167.roa (raw, json)
Hash identifier: bO5+CQaYlX2E691tdD9trHbtkv9djZiZWKXStObRmIg=
Subject key identifier: B9:F3:E5:68:4B:EF:F2:8E:D4:6E:A1:6D:39:A1:CE:CF:C1:4D:24:5D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46E846D399BB2BDDA7D9DE2D4E5C1C145BF9036F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
Signing time: Sun 28 Jun 2026 13:29:02 +0000
ROA not before: Sun 28 Jun 2026 13:24:02 +0000
ROA not after: Sun 27 Jun 2027 13:29:02 +0000
asID: 32167
IP address blocks: 82.29.36.0/24 maxlen: 24
2a13:9500:95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e8:46:d3:99:bb:2b:dd:a7:d9:de:2d:4e:5c:1c:14:5b:f9:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 28 13:24:02 2026 GMT
Not After : Jun 27 13:29:02 2027 GMT
Subject: CN=B9F3E5684BEFF28ED46EA16D39A1CECFC14D245D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:7f:d2:c5:1d:05:63:02:66:e8:f8:f1:3c:
4e:08:99:b7:7e:41:27:05:2a:85:0f:32:7d:d9:34:
78:82:b7:42:1f:b3:2e:d1:0f:a9:91:f0:ac:e2:3c:
24:84:e5:9c:a5:b4:6c:8d:83:ae:d3:ac:65:d8:16:
5b:8d:28:61:d8:33:e9:48:43:09:f3:41:ba:ea:e2:
21:22:2d:6a:80:20:31:b9:d5:e2:7f:14:84:c0:e4:
15:b8:8c:35:28:17:68:21:0e:c7:ea:ba:9f:d7:79:
0a:cd:ff:67:51:b9:27:2c:29:3f:9f:9e:7e:8a:85:
6c:ad:08:79:6b:87:ac:33:7f:24:39:16:d7:69:60:
d4:fe:8d:66:37:26:cf:4e:2c:82:2a:86:8d:06:bb:
fd:a6:42:23:16:ab:ef:1e:fd:48:80:3b:e6:91:d7:
67:c9:01:80:a1:0d:32:4d:38:44:35:a5:ff:e8:b4:
b2:5c:2b:f1:b4:9a:f4:06:2f:c3:2d:f5:cf:c5:0d:
2e:24:e4:2e:b4:f8:78:17:06:d0:77:53:5c:8d:3d:
7e:5c:00:ad:e0:96:92:78:cd:60:d7:d0:16:e5:40:
80:f6:95:2d:bb:00:00:52:f7:d7:12:dd:e3:83:79:
7d:f0:46:c0:21:df:91:7b:fd:8f:46:62:ed:b0:9d:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:E5:68:4B:EF:F2:8E:D4:6E:A1:6D:39:A1:CE:CF:C1:4D:24:5D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.36.0/24
IPv6:
2a13:9500:95::/48
Signature Algorithm: sha256WithRSAEncryption
26:2c:d8:43:9c:79:fd:f3:14:10:a3:e7:02:f7:ef:8d:20:ce:
72:7d:12:ae:06:c3:3b:e1:d6:03:83:0a:37:bb:da:72:e7:47:
e1:f9:b8:59:b2:d1:c4:ba:58:dc:6b:56:93:cc:37:d8:c1:6e:
89:f7:6a:86:f2:70:2e:b1:8d:ee:64:23:95:61:a2:16:27:44:
68:eb:53:3a:33:13:c2:ec:85:23:fe:ea:43:cf:b0:fa:76:6a:
39:cb:87:9d:ac:b3:ea:f9:9b:e2:0e:e7:c2:13:b9:ed:87:6e:
b9:4a:fd:ff:08:bb:22:1c:ce:01:25:33:4f:4b:71:cb:9b:97:
24:e4:a1:93:61:bb:7d:63:a2:61:81:34:90:8a:b6:b1:cc:e2:
75:90:65:c2:fa:85:55:d6:c6:c6:73:04:a8:e8:ae:5b:11:22:
c6:bd:79:90:9b:0e:91:fa:80:60:0c:5f:a9:22:a1:6a:1b:32:
52:9a:cd:32:43:75:ca:6e:3e:72:5e:c4:58:ba:76:5c:8e:b3:
7e:e7:d7:da:d5:14:43:5a:74:36:45:29:c4:3b:32:8d:28:7d:
e5:97:d3:35:6b:7c:3e:be:71:80:72:9f:fe:da:95:71:09:48:
2f:4b:9b:f9:a3:ff:95:26:7a:20:b9:c2:15:f3:19:3b:6a:e8:
be:08:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:21 2026 by rpki-client