Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32181.roa
File: AS32181.roa (raw, json)
Hash identifier: 4L8WQ+En0XoA23Fwrq13saIJ/iFOiLGnHWZLKqPx6xo=
Subject key identifier: 1C:30:D9:A9:79:F0:D2:4A:8A:A3:4F:39:47:9F:6B:CA:C5:88:6C:95
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 62D609DB4B197FDA4CC029DE78C4FFEF3BF9B8E7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32181.roa
Signing time: Sun 03 Aug 2025 00:54:13 +0000
ROA not before: Sun 03 Aug 2025 00:49:13 +0000
ROA not after: Sun 02 Aug 2026 00:54:13 +0000
asID: 32181
IP address blocks: 5.252.163.0/24 maxlen: 24
181.214.77.0/24 maxlen: 24
181.214.146.0/24 maxlen: 24
181.214.157.0/24 maxlen: 24
191.96.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d6:09:db:4b:19:7f:da:4c:c0:29:de:78:c4:ff:ef:3b:f9:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 3 00:49:13 2025 GMT
Not After : Aug 2 00:54:13 2026 GMT
Subject: CN=1C30D9A979F0D24A8AA34F39479F6BCAC5886C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:12:47:7f:8a:af:7a:2b:5c:b0:a5:1a:05:
92:73:11:10:02:93:dc:84:fd:e5:2e:3d:77:75:fc:
61:f4:93:13:dd:4c:2e:04:a6:4f:96:00:b4:cc:fa:
fe:8e:08:23:e3:0b:4f:ae:9a:3f:3b:ff:fb:d5:7a:
75:c0:36:28:42:94:af:8e:8d:eb:c2:1a:c0:ff:c4:
32:3b:a8:83:f1:cd:06:53:86:f2:c2:df:10:bd:c7:
19:e7:99:0e:10:5e:d1:a5:cd:cb:7d:6d:65:4c:4d:
6f:a9:21:2c:1a:ac:35:30:21:4d:21:98:a8:25:0d:
c4:e1:de:91:74:ee:20:4c:aa:c5:7b:a3:c0:32:38:
69:37:a5:65:d2:8b:91:14:b4:d0:96:e0:64:a1:18:
b4:a8:7c:f8:cd:6c:b0:2a:6c:b2:f9:bb:72:c7:f0:
93:c7:fb:7b:7b:70:c9:f2:d9:16:26:99:64:18:19:
3d:01:86:e2:61:c8:62:f2:c9:24:5e:cb:9b:ea:2b:
19:a5:30:b5:f0:d4:37:5a:d1:af:15:66:8d:17:a3:
65:e2:64:d9:09:77:4b:c5:5c:74:1b:03:3f:ba:0d:
39:7b:48:b0:bb:a8:6f:84:05:6e:34:b2:bc:d1:9b:
a5:5d:82:06:57:fa:aa:20:6c:1d:1d:83:da:12:08:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:D9:A9:79:F0:D2:4A:8A:A3:4F:39:47:9F:6B:CA:C5:88:6C:95
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.163.0/24
181.214.77.0/24
181.214.146.0/24
181.214.157.0/24
191.96.62.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6a:b9:f7:11:4c:27:e1:93:30:1d:a8:c7:59:26:b5:bc:34:
f5:4d:49:1f:38:4e:3f:6b:47:eb:3d:07:27:cb:83:d5:ed:71:
91:9a:89:5e:59:95:cf:a9:9b:ca:bf:28:08:0f:4d:0b:53:fa:
23:fd:22:b1:58:b0:65:8c:dd:52:08:49:87:2c:05:20:ff:8a:
96:0e:a3:18:63:f0:85:fb:17:ce:35:47:25:be:7f:61:64:21:
b1:e8:15:5b:ec:59:e8:8c:c0:8c:e1:ed:a4:b5:12:57:02:a6:
8c:d5:41:c3:97:33:13:16:9d:38:7a:47:94:95:43:6b:c4:12:
50:55:70:c4:c0:56:05:f3:13:fc:dc:81:67:cd:ce:a6:cb:bc:
8d:46:0d:59:d8:53:d9:1c:1a:8e:5c:74:08:b7:4a:a1:5f:e1:
a1:41:f5:e3:b7:98:91:4c:01:ba:2f:40:0f:d4:ce:6a:75:26:
e0:2d:af:0a:71:63:36:41:da:e9:c3:74:b7:4e:ad:5b:96:c3:
6a:09:40:35:b4:ac:2f:5a:58:f1:f4:f9:f1:42:6b:22:40:4c:
5a:d2:ed:50:55:32:5b:8f:ba:24:b3:a9:c4:1c:07:14:cc:54:
50:ac:6b:9f:a2:5d:55:eb:ce:2e:d7:e5:bc:35:9e:bc:5d:05:
1c:8e:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:30 2025 by rpki-client