Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS20326.roa
File: AS20326.roa (raw, json)
Hash identifier: hZnA9AJQ8LccJ1+YPDxK01q3EKKoKcwlaINXLkEch4s=
Subject key identifier: 20:60:0C:1A:1B:90:04:B7:73:F2:33:7B:E2:5E:CB:72:E5:B7:2F:C0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 27D84412CF7030E19AF2003378CBD24449E9B49F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS20326.roa
Signing time: Tue 01 Sep 2026 12:52:53 +0000
ROA not before: Tue 01 Sep 2026 12:47:53 +0000
ROA not after: Tue 31 Aug 2027 12:52:53 +0000
asID: 20326
IP address blocks: 82.139.237.0/24 maxlen: 24
212.17.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d8:44:12:cf:70:30:e1:9a:f2:00:33:78:cb:d2:44:49:e9:b4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 12:47:53 2026 GMT
Not After : Aug 31 12:52:53 2027 GMT
Subject: CN=20600C1A1B9004B773F2337BE25ECB72E5B72FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:b1:39:ce:f4:d3:7d:99:50:93:e7:bb:0b:
5a:a1:be:ea:04:8e:61:f6:d2:51:6c:3e:c7:2e:8e:
2f:16:c0:d2:5e:60:d5:f1:16:4b:d3:97:37:18:cd:
b6:3f:ac:0c:ef:b5:f4:18:e2:7e:de:29:8b:56:12:
80:11:30:0e:81:f1:69:8f:af:04:f1:2d:35:53:94:
49:b5:03:fa:2c:55:73:59:e3:43:16:1b:de:82:92:
3a:79:bf:c1:87:4b:f9:fe:dc:08:f7:ca:3d:16:59:
d4:05:a9:81:eb:85:2f:91:04:95:8d:91:06:dc:40:
b5:cf:3b:a9:3b:2f:f2:7b:f1:62:07:4f:27:d9:81:
1b:24:07:4a:1b:3c:08:f5:9e:94:c1:63:9f:9a:f2:
a4:c7:4a:33:35:5f:7e:25:dd:e5:2d:2f:03:e8:09:
7a:56:6d:5c:67:11:0f:a0:65:e6:32:df:ef:7f:b2:
cb:da:69:bc:23:6e:c9:1b:ce:14:53:21:e0:78:ca:
04:b3:c2:cb:f9:4f:e0:0f:02:59:b5:c4:b2:80:51:
b9:13:e2:17:5e:84:77:57:13:c9:ce:cb:d3:87:2c:
f9:92:d7:34:49:08:12:e6:39:0c:b9:16:14:a3:c6:
d0:b6:8c:8c:49:67:9e:6a:d4:c5:92:36:a8:51:cf:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:0C:1A:1B:90:04:B7:73:F2:33:7B:E2:5E:CB:72:E5:B7:2F:C0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS20326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.237.0/24
212.17.235.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a5:c5:c5:01:0a:96:6a:e3:c9:35:e8:ca:0b:64:fa:fd:c3:
d5:dd:82:2f:e0:86:7f:a8:46:8a:4c:5f:4f:3f:18:39:44:ed:
1a:60:a4:a4:93:d2:01:71:54:be:ed:a3:3d:bf:6f:c8:03:a4:
0b:81:b9:82:0d:62:8e:6d:ba:1e:4d:78:cc:09:7e:ea:56:5d:
62:df:d9:b5:ea:f7:4a:80:d9:53:3d:07:5b:05:22:88:ae:62:
4b:aa:c7:8f:ed:58:39:cc:da:4b:d7:84:99:0d:39:d1:f1:56:
3e:10:5e:61:ab:63:41:b5:07:9f:a8:2f:fd:19:e8:11:47:b5:
a5:b5:88:20:d1:8c:5e:26:74:60:51:e5:c5:10:56:e3:7c:52:
14:40:cd:5f:81:cd:11:db:ef:7e:5d:27:95:c0:11:da:9a:e9:
25:eb:28:41:ad:28:6c:bc:b9:10:b1:d0:e0:ea:a5:92:67:63:
2e:98:83:92:bc:79:8f:76:82:f3:a9:0c:22:10:e8:ee:cd:f1:
24:c8:a0:fa:52:20:e3:a0:42:bc:cc:ec:9d:f5:df:8a:15:f1:
f1:1f:9e:52:34:07:87:7f:b6:ea:90:e5:12:bc:e8:14:90:f3:
ed:29:d6:03:af:e7:c1:64:7a:9c:40:ba:89:37:aa:26:94:46:
04:6a:70:b0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJ9hEEs9wMOGa8gAzeMvSREnptJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDExMjQ3NTNaFw0yNzA4MzExMjUyNTNaMDMxMTAvBgNV
BAMTKDIwNjAwQzFBMUI5MDA0Qjc3M0YyMzM3QkUyNUVDQjcyRTVCNzJGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjbE5zvTTfZlQk+e7C1qhvuoE
jmH20lFsPscuji8WwNJeYNXxFkvTlzcYzbY/rAzvtfQY4n7eKYtWEoARMA6B8WmP
rwTxLTVTlEm1A/osVXNZ40MWG96Ckjp5v8GHS/n+3Aj3yj0WWdQFqYHrhS+RBJWN
kQbcQLXPO6k7L/J78WIHTyfZgRskB0obPAj1npTBY5+a8qTHSjM1X34l3eUtLwPo
CXpWbVxnEQ+gZeYy3+9/ssvaabwjbskbzhRTIeB4ygSzwsv5T+APAlm1xLKAUbkT
4hdehHdXE8nOy9OHLPmS1zRJCBLmOQy5FhSjxtC2jIxJZ55q1MWSNqhRz3hbAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUIGAMGhuQBLdz8jN74l7LcuW3L8AwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjAzMjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSi+0D
BADUEeswDQYJKoZIhvcNAQELBQADggEBAHelxcUBCpZq48k16MoLZPr9w9Xdgi/g
hn+oRopMX08/GDlE7RpgpKST0gFxVL7toz2/b8gDpAuBuYINYo5tuh5NeMwJfupW
XWLf2bXq90qA2VM9B1sFIoiuYkuqx4/tWDnM2kvXhJkNOdHxVj4QXmGrY0G1B5+o
L/0Z6BFHtaW1iCDRjF4mdGBR5cUQVuN8UhRAzV+BzRHb735dJ5XAEdqa6SXrKEGt
KGy8uRCx0ODqpZJnYy6Yg5K8eY92gvOpDCIQ6O7N8STIoPpSIOOgQrzM7J3134oV
8fEfnlI0B4d/tuqQ5RK86BSQ8+0p1gOv58FkepxAuok3qiaURgRqcLA=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:57:19 2026 by rpki-client