Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/32SKa40WKweNz--8fYvohpIQNdM.roa
File: 32SKa40WKweNz--8fYvohpIQNdM.roa (raw, json)
Hash identifier: CvIxVpDQSBHDmG9fei/qmX2fiAr7YysgDexobJcNjQc=
Subject key identifier: DF:64:8A:6B:8D:16:2B:07:8D:CF:EF:BC:7D:8B:E8:86:92:10:35:D3
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A19CBC897162856A4B275277B8CDF80F70
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/32SKa40WKweNz--8fYvohpIQNdM.roa
Signing time: Mon 02 Nov 2026 14:49:24 +0000
ROA not before: Mon 02 Nov 2026 14:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48753
IP address blocks: 5.181.1.0/24 maxlen: 24
193.84.71.0/24 maxlen: 24
195.20.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:bc:89:71:62:85:6a:4b:27:52:77:b8:cd:f8:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Nov 2 14:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df648a6b8d162b078dcfefbc7d8be886921035d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:1d:ba:c8:53:3b:51:59:db:88:d7:71:37:
e9:58:71:6d:ff:94:4a:d6:c1:4c:91:64:37:fb:e5:
af:32:6f:71:32:2b:63:b0:59:47:6e:2c:49:c2:d0:
f7:dd:55:42:4f:27:7c:70:d5:34:00:14:4c:e9:67:
3b:88:40:b7:17:25:ba:81:f0:f4:28:ea:f3:44:bc:
69:39:21:8f:57:62:f3:86:29:32:65:93:33:c7:d3:
a3:04:57:09:fa:59:a0:85:93:1b:f1:30:bc:31:73:
0e:69:c0:25:e3:ef:f4:2d:89:36:a9:62:bf:56:d8:
2b:74:2d:e5:09:33:be:ef:85:ea:5a:af:af:ad:5d:
29:f4:e4:dd:73:78:ec:71:f0:6d:0f:11:66:3e:25:
f9:bc:ce:92:52:ce:e7:e7:a7:07:b6:c9:a3:15:97:
a3:f2:44:bc:dc:ce:c8:94:a4:f4:e0:ba:d3:bc:26:
55:cd:66:c7:2c:09:2a:0e:23:97:40:53:7d:74:4a:
57:85:5d:7d:f3:a9:11:39:74:37:07:de:13:83:d9:
08:d5:d4:f3:bc:20:f2:57:de:15:23:4f:59:79:77:
2b:77:b3:09:e0:30:2c:cb:5f:8e:84:0c:a4:1c:f0:
8a:82:d1:ef:0c:c9:18:64:66:d1:85:13:01:39:08:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:8A:6B:8D:16:2B:07:8D:CF:EF:BC:7D:8B:E8:86:92:10:35:D3
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/32SKa40WKweNz--8fYvohpIQNdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.1.0/24
193.84.71.0/24
195.20.18.0/24
Signature Algorithm: sha256WithRSAEncryption
87:01:7f:a7:d7:26:72:3f:40:fa:54:b1:9b:41:5d:24:8b:66:
0f:f7:28:b4:6a:42:f4:8b:60:60:e9:81:ad:18:95:29:bd:4d:
c0:2d:6b:34:1f:f2:26:9d:6b:dd:ad:9f:26:99:73:b2:60:64:
95:6c:7d:bf:ac:b0:0f:d2:17:4f:03:28:84:6f:19:9d:b5:e0:
8e:35:39:47:94:03:53:26:19:0e:67:21:a9:21:b3:97:4e:ca:
81:3d:07:7b:d6:97:8b:97:e3:12:ac:7f:ce:60:3e:b0:20:38:
54:d5:fd:e9:df:7b:ab:45:90:cc:c1:7e:05:0a:ed:64:7b:61:
1e:85:a2:4f:26:08:58:b2:d1:7e:ff:78:bd:7d:23:cd:4d:11:
5b:9e:37:5f:c9:4e:04:5f:3d:72:95:0f:7a:c8:f0:ce:2b:09:
55:aa:ce:19:be:ec:6c:ce:b2:bd:4b:a1:cb:b6:cc:7e:9b:b4:
e8:28:08:86:c7:05:6c:6a:fe:61:1f:d6:0e:b2:81:5e:e2:2f:
74:8b:56:b5:f9:75:6d:b6:cf:b7:d5:13:b5:da:f1:2c:45:b3:
83:f4:c4:03:aa:3e:d4:ea:00:bf:bd:0d:25:eb:75:51:33:ab:
c3:48:56:57:46:2e:30:e5:35:26:1a:84:40:0a:4a:98:02:d5:
9e:1c:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:51 2026 by rpki-client