Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
File: AS32097.roa (raw, json)
Hash identifier: L2b6fhXQ+3Ba0nWucqixebI/rcEckl8x3gZW5sEItcM=
Subject key identifier: CE:81:47:90:C6:10:F7:8F:71:C2:99:D9:E4:FD:4E:B7:38:11:6D:A3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5C8397E607810974FC972179816E3FE2EB846211
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
Signing time: Mon 27 Jul 2026 16:49:16 +0000
ROA not before: Mon 27 Jul 2026 16:44:16 +0000
ROA not after: Mon 26 Jul 2027 16:49:16 +0000
asID: 32097
IP address blocks: 155.117.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:83:97:e6:07:81:09:74:fc:97:21:79:81:6e:3f:e2:eb:84:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 16:44:16 2026 GMT
Not After : Jul 26 16:49:16 2027 GMT
Subject: CN=CE814790C610F78F71C299D9E4FD4EB738116DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:bb:f1:3a:87:d5:6f:e3:9f:2d:2e:a5:b1:
3d:9f:06:a0:bf:62:fb:3a:fb:7d:54:bc:4d:69:b2:
e5:99:ab:e7:61:e3:d7:d3:5e:3f:d0:b9:be:bc:f0:
3e:55:13:1c:d5:53:95:a6:aa:08:8a:ea:27:0e:3b:
85:f4:7c:c2:5a:ad:cb:6f:48:47:65:2d:2a:d1:89:
40:17:6b:31:b2:63:df:88:c9:03:fd:78:d2:0d:c2:
10:3a:87:9b:6f:53:a5:6b:3e:3b:ed:9d:2b:4d:0f:
45:48:ff:4e:09:6b:1e:c3:ce:8e:1d:e9:7e:a1:9e:
ef:4e:46:6e:1e:c3:44:20:5c:c3:a5:35:52:41:fd:
97:b2:6a:d3:00:31:44:db:9c:3d:9d:10:07:24:11:
1e:0e:58:f6:80:fd:fd:40:dd:f9:6c:db:51:e6:c4:
36:39:d2:e1:bb:7d:48:c6:e7:ab:ff:66:e4:e2:d8:
f8:48:91:79:87:ec:ca:94:2e:e8:3a:2a:c9:0f:a8:
1e:e0:20:3b:8e:3d:65:e1:c2:49:a0:ea:22:98:95:
ed:5c:8d:8b:b2:a2:f8:00:6c:47:25:39:f1:69:a5:
c5:a4:0a:e1:cb:9a:de:51:59:3a:d3:8c:33:d5:ce:
05:fc:90:cc:98:36:4d:36:45:37:58:73:11:b4:2a:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:47:90:C6:10:F7:8F:71:C2:99:D9:E4:FD:4E:B7:38:11:6D:A3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS32097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.40.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:b6:21:85:2e:b1:ea:5c:e9:7d:92:6e:81:69:0e:0d:2e:4c:
f1:83:9f:c0:3e:cc:c2:91:ea:23:97:b3:30:1c:fa:50:31:ec:
a9:cd:b6:a6:d0:79:47:bb:75:99:3e:07:50:f9:e6:df:bd:19:
cc:3c:42:fb:98:88:d2:5e:0e:e9:85:a4:ae:c6:59:9f:43:f8:
a6:68:7d:09:62:a2:a7:3d:2d:6b:c0:14:2c:9b:29:2b:1f:67:
10:d0:3d:05:37:de:5a:ad:6c:47:95:68:8f:24:b0:c0:6e:46:
6d:b8:d2:1f:9b:e4:52:9a:dd:84:07:e0:b2:72:b3:38:12:10:
0b:93:8e:d1:0f:bb:52:6f:8f:f7:00:88:9e:65:c4:83:14:79:
4c:42:cd:84:2c:23:21:96:ca:15:99:41:7d:38:d1:69:9a:2c:
84:19:3f:1d:d1:47:6c:ef:69:a7:5b:07:52:55:b0:4e:57:00:
dc:b0:92:06:6d:76:14:c5:70:74:55:6a:91:c5:9a:f0:92:31:
20:ac:b7:fd:0a:6a:ef:33:77:0a:a3:6b:74:e4:95:81:19:94:
5d:1d:16:c9:a4:a8:03:a8:b1:a1:37:76:b3:5b:07:f9:45:df:
85:75:f3:8b:66:ee:ec:f3:2a:50:f2:7e:0a:a9:2d:2c:77:b5:
d1:aa:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:49:12 2026 by rpki-client