Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32043.roa
File: AS32043.roa (raw, json)
Hash identifier: Zev+WgVzO87IU0bhGyjmUriR4G0IF9/ZO/enzqb2MRY=
Subject key identifier: C5:1C:85:02:E9:7C:2E:8B:B2:77:C4:62:05:3C:58:C7:90:E3:11:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23565CE7AB8835A6EB6768707B479BD9AC5B65DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32043.roa
Signing time: Sun 25 Oct 2026 12:19:48 +0000
ROA not before: Sun 25 Oct 2026 12:14:48 +0000
ROA not after: Sun 24 Oct 2027 12:19:48 +0000
asID: 32043
IP address blocks: 96.62.126.0/24 maxlen: 24
143.14.63.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.73.0/24 maxlen: 24
143.14.74.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
155.117.48.0/24 maxlen: 24
155.117.49.0/24 maxlen: 24
155.117.50.0/24 maxlen: 24
155.117.53.0/24 maxlen: 24
155.117.62.0/24 maxlen: 24
155.117.191.0/24 maxlen: 24
155.117.192.0/24 maxlen: 24
155.117.236.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:56:5c:e7:ab:88:35:a6:eb:67:68:70:7b:47:9b:d9:ac:5b:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 12:14:48 2026 GMT
Not After : Oct 24 12:19:48 2027 GMT
Subject: CN=C51C8502E97C2E8BB277C462053C58C790E31158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:96:39:7c:38:87:24:c6:2d:88:84:a1:a7:
34:07:e5:eb:0c:fe:69:65:1c:1f:75:7f:99:c7:17:
45:97:f9:c4:c8:d2:59:41:25:11:2c:72:37:93:3c:
39:9e:c1:f4:b7:f4:ca:7f:99:03:5a:0b:d3:56:16:
f1:1b:ae:29:6e:b8:3f:8c:ae:9b:80:aa:de:d9:19:
53:95:74:9f:e0:0b:66:f0:30:a3:ce:b9:75:83:b0:
68:e8:6e:ef:1e:5a:25:27:54:60:ef:0b:4e:0b:cb:
ed:0e:12:17:31:19:77:ad:29:5a:41:2a:55:02:39:
84:ec:48:e3:4c:df:6a:c6:2f:3c:7d:6e:59:f9:61:
79:37:52:0e:a1:a1:fb:c7:0c:32:fa:1f:26:f5:3a:
19:6e:ce:ae:f4:79:49:64:ec:29:c9:d8:a3:2a:de:
f9:41:e8:e2:3a:8c:5e:27:58:c2:c6:17:7c:c9:1e:
b0:6b:f8:5e:bc:3d:29:fa:e8:12:52:20:47:eb:1a:
47:54:fc:4f:07:e4:da:32:21:b7:00:d7:ee:bb:f8:
e9:6c:42:a2:8f:b0:09:d1:03:52:09:52:75:31:64:
2c:92:e0:dc:71:e2:c0:49:5b:80:12:f5:b3:e4:17:
44:38:f0:b3:f5:52:d3:02:d0:26:bf:73:e0:5f:cd:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:85:02:E9:7C:2E:8B:B2:77:C4:62:05:3C:58:C7:90:E3:11:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.126.0/24
143.14.63.0/24
143.14.72.0-143.14.74.255
143.14.214.0/24
155.117.48.0-155.117.50.255
155.117.53.0/24
155.117.62.0/24
155.117.191.0-155.117.192.255
155.117.236.0/24
162.141.18.0/24
162.141.53.0/24
162.141.164.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b5:ff:da:fd:fe:bc:d6:2c:08:b4:f6:a6:a6:f1:c1:f0:5a:
39:b8:6f:d6:c0:d3:42:e2:f9:ea:c5:63:f2:54:aa:1e:cd:f8:
3c:9d:e9:a3:b9:de:28:ba:be:3c:e3:9b:62:e5:48:00:c1:e3:
e6:4e:8c:09:36:f5:8b:85:0b:6e:63:5f:45:36:c6:5f:51:7c:
96:96:b5:88:86:2b:57:60:61:73:66:2e:50:6a:c5:8e:43:30:
74:80:08:f7:08:0c:fe:c1:17:df:47:b6:bb:8e:e3:52:81:01:
02:14:9a:03:c6:59:9d:81:46:ca:02:71:d3:25:4f:dd:6e:ef:
47:5a:11:d0:00:ce:08:f1:8b:12:91:2f:49:9f:2a:1c:71:99:
8f:6f:45:48:ca:5e:1a:55:68:77:0b:9f:f5:41:9e:2d:2e:06:
1d:62:b9:70:b8:09:bf:b7:81:bb:16:49:20:91:cb:f9:7d:d7:
39:d0:cc:fd:3a:00:2f:73:63:eb:fb:bf:fc:f8:4e:2d:bb:67:
70:6e:a8:2f:fd:0a:a5:6c:75:51:23:3b:24:20:1c:3b:b3:28:
83:f3:5a:5c:7c:16:86:f9:7f:69:47:57:ef:c2:b8:bc:0c:b1:
36:1a:ba:44:2b:10:a1:2e:ea:6b:ba:ed:bc:8d:59:5e:4d:bc:
18:c9:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:48:35 2026 by rpki-client