Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32878.roa
File: AS32878.roa (raw, json)
Hash identifier: V8Vltjqqx/nJaPMjPaVb/+eD6rsOd6cJODYv0YAJ/pM=
Subject key identifier: FF:1F:50:5E:2F:B0:C2:9B:C9:10:5D:C4:30:AD:F8:4C:7F:3D:7E:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7EE526B859963C5561C14003A6F710B70D6F3307
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32878.roa
Signing time: Wed 06 May 2026 09:45:43 +0000
ROA not before: Wed 06 May 2026 09:40:43 +0000
ROA not after: Wed 05 May 2027 09:45:43 +0000
asID: 32878
IP address blocks: 178.83.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e5:26:b8:59:96:3c:55:61:c1:40:03:a6:f7:10:b7:0d:6f:33:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 6 09:40:43 2026 GMT
Not After : May 5 09:45:43 2027 GMT
Subject: CN=FF1F505E2FB0C29BC9105DC430ADF84C7F3D7E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:e7:f3:5e:f3:c3:da:9d:c3:e3:c4:dd:99:
c8:b9:c6:1b:e0:1a:7a:fe:18:c1:27:9b:5f:b2:30:
04:02:3b:a3:77:c2:ed:02:51:66:be:ea:3d:90:93:
72:a3:47:ef:47:e2:55:83:21:bf:5d:2a:f6:5b:e4:
5d:64:82:f7:29:45:cf:fe:53:78:23:22:89:0b:2e:
78:39:ca:95:32:72:fc:db:64:e1:16:84:9f:05:d3:
5d:3d:3a:ce:67:cc:3d:d9:20:32:c6:90:4d:42:1f:
a5:b7:db:3f:76:f4:ac:6c:6a:46:0b:dd:8b:94:a6:
c8:80:84:86:0d:58:b4:59:bb:5d:cb:ce:2f:5a:b9:
d4:57:a8:7b:7f:16:8c:b6:c5:b7:73:7d:3e:d1:80:
57:f4:c3:bd:a3:32:11:62:12:8e:15:7a:45:6f:36:
e1:66:bd:de:b5:c5:62:60:9f:66:f6:b8:48:ed:1d:
15:51:da:5f:27:15:4d:70:9b:9c:df:c5:da:76:f1:
4e:c9:39:1b:b0:8f:dd:06:bd:56:cd:8c:f8:f1:c8:
9f:6b:d5:72:06:a2:d5:a2:33:0c:0b:67:53:85:31:
7a:da:83:6f:b4:86:b0:44:c4:54:aa:48:9e:c8:f3:
0f:d0:f9:f6:0e:75:86:78:ac:25:67:6f:44:93:62:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:50:5E:2F:B0:C2:9B:C9:10:5D:C4:30:AD:F8:4C:7F:3D:7E:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:a0:22:94:c5:d3:d2:7d:f4:67:66:c2:7e:34:59:f8:1c:
95:25:42:06:1d:a7:c2:96:8b:98:41:c4:14:e0:7e:c0:31:a4:
c5:cc:ff:c0:17:90:e7:f6:0b:27:da:97:d5:4f:e8:6c:ae:01:
ec:e9:71:d0:19:92:23:aa:2d:c9:d6:7e:5e:00:a0:86:bd:73:
9d:14:bb:3b:90:19:77:02:11:1f:42:18:f1:d0:dc:26:a5:19:
60:3f:d6:be:c7:b0:e5:21:73:1f:24:ac:83:23:d8:06:29:7b:
14:07:13:09:65:9d:d7:2f:60:4d:2b:a2:8d:14:42:b3:28:18:
e7:a1:30:68:db:9b:b5:47:d2:18:60:72:5e:b1:61:67:7b:24:
95:01:08:90:cb:a0:9c:63:6b:02:e0:9c:a6:f8:76:76:d7:0e:
1d:18:75:48:40:1b:61:b2:d1:5f:bf:dd:30:d3:b5:ac:a2:40:
11:f8:60:50:e8:16:e4:1c:46:80:c7:b7:c7:ac:e9:d0:bd:9c:
fb:ba:a4:d1:56:1a:58:9e:36:b3:6d:cd:f1:c4:a9:b2:68:04:
4a:b1:da:91:d3:08:9d:30:48:95:3b:5b:00:4b:77:65:ee:69:
2d:5d:42:93:0f:f1:90:c1:00:77:19:f7:a4:e4:59:5e:94:5f:
98:f3:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:51 2026 by rpki-client