Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
File: AS32002.roa (raw, json)
Hash identifier: XN6O+0ercC5n9Dd9hyJvaohoBT119tY+VR7eK7Juejs=
Subject key identifier: 4F:99:39:1F:A6:26:A0:68:C6:0C:84:4D:17:F0:0F:9B:4D:BA:32:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0B67411B6963D4BD5F2FB4B0FB0CBEDA3646F171
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
Signing time: Wed 14 Oct 2026 12:20:26 +0000
ROA not before: Wed 14 Oct 2026 12:15:26 +0000
ROA not after: Wed 13 Oct 2027 12:20:26 +0000
asID: 32002
IP address blocks: 155.117.154.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:67:41:1b:69:63:d4:bd:5f:2f:b4:b0:fb:0c:be:da:36:46:f1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 14 12:15:26 2026 GMT
Not After : Oct 13 12:20:26 2027 GMT
Subject: CN=4F99391FA626A068C60C844D17F00F9B4DBA3210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:b5:5b:21:8d:7d:db:57:04:7a:f5:4f:7a:
95:d6:4a:54:27:d9:17:54:2c:fb:1f:f4:ba:22:3c:
33:a3:93:22:b6:d1:36:a1:d2:60:f5:03:c7:68:fb:
de:ac:e2:64:01:f8:0c:b0:e7:d2:d0:14:c4:cb:02:
f0:1c:0e:00:cb:93:24:bc:23:83:cc:a3:bb:94:0b:
e5:fb:95:51:58:0e:a6:00:8a:da:86:d8:e2:ea:f3:
40:81:25:99:64:a7:70:d7:ee:bb:22:35:e9:17:dd:
ff:5d:51:36:b7:62:df:6b:bb:91:ce:4c:f1:8f:a6:
c1:3f:72:f1:06:61:ee:91:f8:0c:ce:d3:5f:2a:f5:
16:28:32:61:93:c4:93:7d:64:ec:33:12:a3:45:35:
c3:2d:54:6d:30:2e:77:5c:9f:19:4c:67:35:78:bb:
75:b4:27:de:3f:00:5e:4d:a4:4a:60:9a:84:af:f5:
aa:77:b7:e4:52:e6:73:23:86:25:e7:bb:60:8a:a5:
18:05:b3:2f:93:1a:83:b7:e2:17:25:21:9f:82:13:
51:3d:f1:e7:06:77:30:e5:c6:a3:e4:a5:34:26:da:
1d:bd:68:f0:eb:93:2b:b4:2b:a2:f0:b2:cd:f5:17:
b2:68:f4:d9:85:f8:73:86:a8:5b:4d:3e:b0:f4:c3:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:39:1F:A6:26:A0:68:C6:0C:84:4D:17:F0:0F:9B:4D:BA:32:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.154.0/24
162.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:1b:49:77:5d:96:f4:d0:9f:0c:e7:56:ef:b7:ab:20:fd:
e9:ec:c9:b9:5e:5f:ed:d4:3c:af:c4:22:06:4d:2a:c4:8f:fb:
15:21:9a:9b:d8:39:7f:eb:5f:d3:ac:2c:5b:65:27:5c:61:05:
97:bb:f5:70:13:3f:23:4b:b4:9a:9e:e5:8e:44:2c:d5:00:d3:
df:94:4b:e0:5c:f9:6f:fd:0b:7b:1e:7d:aa:cc:f1:ec:ea:7f:
c2:02:c0:6e:06:30:d1:a6:fd:1c:98:52:e7:17:0d:0e:65:ce:
fb:ed:ae:e0:3a:bc:04:b5:c8:41:d5:a2:bb:d3:f2:4d:2d:60:
1a:c3:43:8b:cb:ac:f6:bc:4d:e7:ab:8d:76:2d:f8:5c:a3:63:
68:5f:ea:ee:62:d5:fd:b2:d5:16:93:e0:08:bf:32:89:36:e4:
85:47:42:7c:99:18:b8:04:b1:5b:24:1d:57:f6:97:11:e6:7e:
68:d7:af:96:91:34:97:73:2b:6a:98:a6:c7:6f:e5:65:63:0e:
31:69:ba:d0:df:62:de:d7:8f:e6:2d:5d:90:96:99:2b:17:14:
ab:eb:c6:d4:87:9c:68:34:16:e0:7a:e6:7d:c8:7e:df:52:92:
29:57:8a:0f:43:1d:c9:a2:a8:5f:54:a1:f8:bf:44:92:44:12:
ea:22:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:02:55 2026 by rpki-client