Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: tY2Ha2f51HKMm0pQZ/Z2fmRMghkMOj1P9wwMAbjRCvc=
Subject key identifier: A4:DD:3D:59:01:B5:3E:0A:5B:9B:E4:CD:CA:F4:41:20:B7:9D:AA:9F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 29EB156A284E314ED65FE91A59BE6A660C193FBB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
Signing time: Thu 17 Sep 2026 13:51:39 +0000
ROA not before: Thu 17 Sep 2026 13:46:39 +0000
ROA not after: Thu 16 Sep 2027 13:51:39 +0000
asID: 3223
IP address blocks: 147.79.8.0/24 maxlen: 24
155.117.169.0/24 maxlen: 24
167.148.105.0/24 maxlen: 24
168.222.31.0/24 maxlen: 24
168.222.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:eb:15:6a:28:4e:31:4e:d6:5f:e9:1a:59:be:6a:66:0c:19:3f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 13:46:39 2026 GMT
Not After : Sep 16 13:51:39 2027 GMT
Subject: CN=A4DD3D5901B53E0A5B9BE4CDCAF44120B79DAA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:57:c2:9e:51:ef:02:88:62:e7:20:65:5c:
45:f0:7e:df:45:18:e6:fb:e3:fb:bd:76:42:85:1b:
8d:f2:73:2f:8b:73:71:ea:aa:f0:72:09:09:e9:b2:
28:ff:ce:ea:d2:13:33:b2:94:d4:ed:f4:9f:eb:c3:
71:c4:2d:3a:c1:c8:83:52:49:0f:0b:5b:50:2e:57:
92:14:88:12:09:dd:b1:70:72:07:c5:9e:ae:34:06:
8f:00:9b:3d:55:f1:e1:f1:61:ba:fe:1b:e2:4e:9a:
f5:04:d0:93:5e:cf:8c:fd:e3:94:ec:84:30:24:04:
0a:d6:a2:d0:fb:05:9f:71:5f:80:0f:2c:f8:d5:76:
af:66:60:db:a7:d3:ed:08:e0:36:8b:5f:40:60:95:
82:96:9e:f8:39:f5:ec:7a:ef:08:a4:71:dd:e8:d5:
fe:fc:3f:05:fe:ea:f6:64:40:61:5c:a2:27:36:b4:
c6:9d:46:42:9c:78:64:0a:25:86:5c:41:01:a6:47:
3f:23:c3:82:53:55:61:63:6e:36:24:51:6e:f8:d7:
3b:80:9d:62:7e:54:7e:4d:04:74:06:d4:e3:25:04:
c7:18:5f:2a:7e:62:06:19:bc:d0:23:de:24:91:e8:
24:70:32:fd:cc:6c:f6:a4:21:54:77:6c:b2:7c:71:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:3D:59:01:B5:3E:0A:5B:9B:E4:CD:CA:F4:41:20:B7:9D:AA:9F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.8.0/24
155.117.169.0/24
167.148.105.0/24
168.222.31.0/24
168.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9b:bf:85:d6:3c:c6:47:c7:fd:d9:45:5d:dc:90:42:56:db:
60:ac:6f:df:4d:9e:98:ab:ea:ae:60:91:60:43:c1:a7:05:75:
db:4e:40:7d:45:70:0a:0d:5c:a9:29:c3:30:3d:22:95:39:58:
21:17:38:15:37:a7:76:67:c7:e6:06:cc:4b:1f:92:8c:a8:7d:
e7:e2:60:ce:a4:89:19:6f:10:c5:ab:6b:32:06:2b:f2:94:15:
c3:9c:90:cc:e3:32:85:fe:17:38:59:f1:76:4a:99:9f:3c:1b:
03:ad:73:1c:dd:c7:f4:8c:df:17:3a:05:bc:67:0a:14:ab:24:
64:0f:c6:62:14:71:27:1e:ec:c7:31:64:ef:be:12:59:6d:c1:
e9:24:ef:4a:13:23:03:62:ef:dc:ee:67:52:a0:9b:96:4f:b1:
9c:03:1a:7f:54:8c:37:4c:6c:77:6f:c9:f9:e5:eb:1b:0f:a7:
ab:c2:1f:8f:ab:6a:4f:ee:40:9a:5d:a3:ad:6b:92:10:f1:4b:
46:12:96:fe:f0:2e:80:da:c5:5d:6b:f8:77:72:86:73:f5:6d:
58:30:8c:86:11:23:4c:50:6b:54:35:09:be:9c:f7:0d:74:b3:
31:5c:9f:ac:1c:47:b5:68:58:d8:3a:66:6f:16:6f:6e:76:83:
eb:78:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:16 2026 by rpki-client