Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS329532.roa
File: AS329532.roa (raw, json)
Hash identifier: k+HzRrAqQu7qr94tPIif8VjjP+urgo8Xrk9JpNNwKuQ=
Subject key identifier: 83:E6:7B:2D:99:14:3A:6E:4C:FD:1E:21:33:BF:23:B9:96:34:09:5D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5DD3A2AAD22566E415F1B2A465D3A6859619533F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS329532.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 329532
IP address blocks: 2a0f:85c1:c00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d3:a2:aa:d2:25:66:e4:15:f1:b2:a4:65:d3:a6:85:96:19:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=83E67B2D99143A6E4CFD1E2133BF23B99634095D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:a7:a1:9b:b9:9e:19:86:48:67:3f:32:c7:
f8:37:c6:f9:e8:cc:44:6d:cd:08:af:0e:25:5e:dd:
c2:43:e6:e3:b7:50:35:af:64:16:f2:19:7a:11:9a:
1a:70:4d:43:9c:b7:69:02:60:4c:9c:42:d8:d4:77:
3b:8c:d5:14:98:90:d8:0b:8d:48:7e:c9:df:a5:4f:
6b:80:4b:70:f9:c4:0f:3e:3f:82:f2:b6:0e:37:a6:
62:62:66:3a:39:54:f5:3d:b1:ea:ec:50:c1:ab:9a:
bf:89:79:ef:82:5b:6f:0e:b3:b0:f0:37:dc:59:9d:
59:53:8d:76:78:81:05:fa:29:18:40:e0:03:60:57:
7a:23:39:21:18:88:c6:e2:83:fc:d6:35:53:20:9b:
66:32:e7:8f:51:1f:29:c4:90:fd:78:46:89:8e:44:
bc:2e:40:db:9c:c4:ac:2a:d3:30:8e:6c:59:d1:e3:
fd:ef:90:36:ea:58:a0:2c:2d:4f:f1:56:86:2d:ab:
10:ab:b3:43:c4:d2:c9:87:16:47:f8:99:d2:80:bf:
5c:f9:7a:c9:be:d6:bf:6b:04:34:41:63:23:ef:45:
be:da:77:2f:fe:01:4d:aa:fd:12:cd:c1:a2:91:84:
77:6c:32:87:8c:e9:59:f5:f4:59:90:18:8e:3c:24:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:7B:2D:99:14:3A:6E:4C:FD:1E:21:33:BF:23:B9:96:34:09:5D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS329532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c00::/44
Signature Algorithm: sha256WithRSAEncryption
81:ac:39:ca:7f:bc:49:27:10:f0:f2:ad:37:2c:cd:7b:8d:cd:
47:ec:2e:d4:5d:72:7a:14:04:35:2c:5d:4d:76:72:11:b1:fc:
ab:fa:c7:d2:68:1e:6f:3d:d3:cd:a2:1f:2f:26:fe:04:d8:4a:
a1:9a:b5:64:f7:59:e9:af:71:9b:b0:cd:77:51:69:b4:e6:2c:
e2:2a:0d:e1:67:6b:07:13:03:21:6b:d3:92:62:5c:25:40:56:
11:f8:45:0f:a9:71:4c:a8:56:3d:60:41:16:38:2b:ec:e4:b8:
6c:38:17:48:4b:c9:ca:14:ac:f9:f7:9b:9a:dc:a4:b2:16:19:
09:b6:b8:a7:70:63:32:52:b3:7a:a1:de:be:f5:d0:74:75:0d:
4c:77:d7:b0:99:77:34:11:9d:c7:69:4a:a1:8e:e4:73:dd:f8:
1f:ab:85:7f:67:e9:64:a7:b6:37:1e:09:52:a4:e7:2e:02:ba:
a8:48:47:e9:c3:8d:2f:a2:e0:69:ce:f1:cf:06:b0:f8:e3:c1:
1c:68:0d:dd:68:d5:95:c2:a1:5a:5a:25:aa:31:74:6f:2b:c2:
5c:97:e4:7a:a7:91:d0:51:23:42:ab:69:be:e6:87:c3:37:bf:
1c:9d:68:66:fb:0f:a4:48:a0:3d:e1:2e:ca:9c:4f:f0:4b:0e:
91:03:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:51:12 2026 by rpki-client