Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32878.roa
File: AS32878.roa (raw, json)
Hash identifier: 7IEbgANAq2rSxdYBL1A69JlPMjan5KodX34aFuyEK5o=
Subject key identifier: 4F:B9:18:21:FC:A6:B1:25:72:0D:DA:C3:F9:78:C9:C8:A7:86:54:E7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 57FFBEDA29DE59A830B686E8CFCA6F78DFC6284F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32878.roa
Signing time: Mon 30 Mar 2026 09:00:39 +0000
ROA not before: Mon 30 Mar 2026 08:55:39 +0000
ROA not after: Mon 29 Mar 2027 09:00:39 +0000
asID: 32878
IP address blocks: 181.215.31.0/24 maxlen: 24
185.137.95.0/24 maxlen: 24
191.96.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ff:be:da:29:de:59:a8:30:b6:86:e8:cf:ca:6f:78:df:c6:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 30 08:55:39 2026 GMT
Not After : Mar 29 09:00:39 2027 GMT
Subject: CN=4FB91821FCA6B125720DDAC3F978C9C8A78654E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:a6:9d:f4:a1:15:7e:9a:ca:33:29:57:7e:
5b:01:0f:e6:33:46:89:23:54:36:df:7c:bc:88:6c:
7c:43:56:f4:77:91:51:84:a1:de:03:24:eb:0e:69:
9a:2f:18:d0:20:ec:44:7f:71:56:54:15:4a:ee:b4:
fc:84:ce:f7:73:56:2d:2e:91:78:28:f7:17:5d:bd:
71:4e:b8:72:15:df:5d:51:50:00:df:bc:94:0b:ef:
04:9f:ba:c6:6c:5e:65:85:a7:26:c2:da:55:9c:64:
01:7e:5f:11:63:03:81:37:f3:d7:fe:ee:b7:df:9b:
f3:4e:ff:19:b8:31:32:27:d1:80:41:c2:b7:7a:16:
37:99:2b:0a:8f:de:6a:1f:bf:ad:fa:1f:4c:93:65:
02:3c:b5:89:45:4b:08:bf:41:d8:c1:1f:1b:3c:52:
8d:68:71:f1:7e:2b:f2:63:ef:4e:5b:c0:04:cb:1c:
7a:cd:48:e5:65:4c:da:c6:26:ed:f8:5b:a0:31:07:
66:49:25:0e:7a:a7:2e:30:e9:c2:e4:23:29:8d:12:
67:ab:72:e5:b7:b3:ae:5b:d4:1e:37:30:ba:66:5d:
b3:9e:e7:41:d8:a9:15:4c:fb:03:63:88:e4:c7:1a:
2c:f0:ab:9b:17:2c:35:4c:cc:f0:3f:e4:d2:d1:9e:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:18:21:FC:A6:B1:25:72:0D:DA:C3:F9:78:C9:C8:A7:86:54:E7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.31.0/24
185.137.95.0/24
191.96.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5c:85:8d:75:55:0e:61:4e:ed:1d:13:1e:39:9e:a7:87:3d:
ee:d9:a6:ec:24:ac:9d:ca:59:e7:5e:47:be:c5:60:8b:f1:0a:
5f:93:01:35:7f:a0:b5:f0:a1:5f:82:5d:ca:d7:7e:33:f1:64:
3c:25:9e:08:fd:bd:cf:2d:07:b6:41:d8:d7:7c:09:e3:ec:e8:
e7:f0:bf:cb:bb:10:2c:b7:3f:b6:2a:ad:cb:96:00:61:af:65:
cc:52:72:f1:f0:12:6d:cd:e0:f4:8f:e2:2d:e0:e6:8d:1c:4a:
41:b4:35:5b:d8:db:ca:76:93:72:02:12:87:59:5a:42:ab:73:
41:d9:53:08:26:02:0c:2c:22:f1:a0:d3:3d:3c:5b:01:93:df:
e4:f8:b4:64:e5:95:a9:cf:a3:97:b5:3d:1a:2e:ca:73:7b:5d:
7d:3c:12:a2:6c:95:9e:c3:72:78:6f:12:0b:07:7e:3c:dc:70:
bc:1c:a5:bf:23:42:77:0a:34:26:de:47:d4:46:2d:c1:6a:a4:
45:59:27:bf:2f:96:a0:21:d2:73:41:6b:dc:34:4d:9d:05:b2:
6e:92:5c:84:71:81:9c:39:f7:42:04:33:31:17:46:58:a7:16:
80:90:01:d0:58:bf:c7:ce:94:81:2d:54:8e:8e:11:17:71:f5:
0a:e0:9f:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:29 2026 by rpki-client