Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS32181.roa
File: AS32181.roa (raw, json)
Hash identifier: o3IQQcSQtwRnk9rKfls0lsW8l/lxQwhyHvtybk9ONFM=
Subject key identifier: FC:03:4C:FB:36:DD:E8:60:63:65:4A:E1:BC:0D:D1:74:90:28:6D:99
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0CE7DE7A876D81D7256C3CC533E9456354C3C2C3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS32181.roa
Signing time: Mon 15 Jun 2026 11:47:34 +0000
ROA not before: Mon 15 Jun 2026 11:42:34 +0000
ROA not after: Mon 14 Jun 2027 11:47:34 +0000
asID: 32181
IP address blocks: 195.20.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e7:de:7a:87:6d:81:d7:25:6c:3c:c5:33:e9:45:63:54:c3:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 15 11:42:34 2026 GMT
Not After : Jun 14 11:47:34 2027 GMT
Subject: CN=FC034CFB36DDE86063654AE1BC0DD17490286D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:b2:18:11:c5:08:81:6c:83:92:2a:05:c2:
90:2b:98:82:e4:f8:c1:a7:b0:6f:60:dd:d6:d6:52:
d1:e5:5a:56:11:c5:53:d1:4b:83:01:16:40:2c:cc:
2f:d4:23:ae:b6:18:44:a9:56:8e:5c:9b:04:52:58:
bf:79:45:40:bb:c8:c0:cb:25:f7:e7:c0:ce:47:95:
d1:96:a6:48:3f:8f:d8:52:a9:0f:83:65:fd:08:31:
29:fb:36:b4:06:3d:60:5d:2b:90:c6:db:51:27:1d:
5f:df:74:5c:5f:02:66:7a:da:c4:74:ec:64:25:10:
6d:2f:28:27:18:14:43:59:84:d2:31:ba:18:24:cf:
70:cb:f8:46:48:e5:05:6c:71:15:6e:2f:b8:9b:45:
77:3b:38:f5:3d:35:65:67:26:fd:41:5b:7f:12:13:
9b:f0:3f:ee:97:33:df:43:e2:45:24:d0:73:65:34:
6a:94:6b:78:57:e8:e8:b9:d5:fb:ab:b0:a4:85:e8:
24:f7:02:bc:c8:5b:4f:a7:0b:0e:3a:00:4f:3d:52:
07:b9:f0:70:0e:ef:d2:22:86:6b:7c:1e:4b:c0:d8:
fd:fd:51:d1:a7:91:a9:6b:8e:7d:28:07:20:78:1a:
29:d6:d4:2d:b0:73:a6:ce:9c:dc:da:03:96:04:06:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:4C:FB:36:DD:E8:60:63:65:4A:E1:BC:0D:D1:74:90:28:6D:99
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS32181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e0:29:b8:2d:2e:64:18:be:3a:93:b1:7c:e7:96:73:0d:54:
c7:86:ea:e2:f9:1a:76:f8:e2:38:4a:ce:24:ab:c2:e5:ca:63:
69:62:76:c9:37:72:c2:20:1a:21:e5:93:30:e0:3c:79:c0:0d:
47:76:36:d0:8f:57:50:a6:aa:f1:60:9a:c1:8b:9d:53:18:4d:
c9:91:ca:58:b9:01:4d:a8:54:23:ac:8c:e6:f0:9c:73:7f:de:
e5:e3:fd:d0:1f:81:ed:37:9f:a9:02:fb:bf:f5:f0:d4:94:f4:
3c:2d:cd:3f:42:c8:28:33:55:26:ae:4b:ca:ad:bc:06:0f:5f:
ea:44:2f:a5:ab:1d:89:74:60:23:6d:6b:c5:3c:59:7d:83:34:
84:98:e0:e9:3f:4c:2e:0f:c5:cf:34:8c:43:aa:31:6e:06:ea:
7b:e6:b3:96:c4:fa:e5:49:e9:13:de:6e:4d:01:80:92:be:6c:
4c:55:31:c7:1f:75:48:45:5f:85:27:36:35:4d:80:38:1c:83:
8f:6d:48:5a:a1:34:59:89:4d:28:35:18:d6:d6:44:bc:66:bb:
0a:f9:3d:13:60:4d:bc:67:d4:f3:fb:f9:d5:fb:46:c7:ca:24:
b2:8f:45:de:ae:37:9c:9b:17:42:a7:15:f7:88:41:2c:e9:58:
18:6d:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:33 2026 by rpki-client