Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: s5PtLwpG+tzrAx0At9fpYEvEATUUSW78VOCXSgDT7Ok=
Subject key identifier: BF:BA:16:65:20:2A:4F:A6:32:DE:5F:A9:C8:ED:81:60:59:62:94:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 22254BFB68CF93B706EB9B6C867CB945BAC5E414
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
Signing time: Thu 17 Sep 2026 13:51:36 +0000
ROA not before: Thu 17 Sep 2026 13:46:36 +0000
ROA not after: Thu 16 Sep 2027 13:51:36 +0000
asID: 3223
IP address blocks: 82.41.128.0/24 maxlen: 24
178.83.149.0/24 maxlen: 24
178.83.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:25:4b:fb:68:cf:93:b7:06:eb:9b:6c:86:7c:b9:45:ba:c5:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 13:46:36 2026 GMT
Not After : Sep 16 13:51:36 2027 GMT
Subject: CN=BFBA1665202A4FA632DE5FA9C8ED81605962943E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:87:e5:4a:e4:31:c7:52:ed:c4:f2:5c:7b:
74:be:d6:49:53:29:2d:8b:18:38:6d:4d:92:03:39:
5c:5a:7b:81:ff:ea:9d:77:44:36:14:6e:82:d9:1d:
49:a6:0f:71:7b:53:15:5f:00:b4:1a:18:05:7c:22:
2b:28:ea:bd:ca:43:04:95:d7:fb:05:37:43:68:67:
54:37:59:7e:73:3f:ed:fe:cb:e9:62:f3:8a:8a:26:
25:fe:56:5c:8b:6a:36:79:86:9f:58:01:98:70:cb:
71:52:91:c1:d0:e5:b8:b1:48:7d:b6:0b:df:1d:82:
81:56:87:d9:5f:21:00:3b:8b:f6:92:6d:0b:fa:0a:
32:0c:69:79:2b:92:f7:ea:48:92:d1:1b:42:82:b2:
14:bd:da:d3:06:57:fb:e8:9d:2e:c4:0c:33:ae:dc:
79:a5:ed:e4:6b:17:90:7d:d3:b4:79:fe:d9:6b:ec:
98:6a:37:c2:bf:fa:b5:af:ab:92:a2:1f:62:b9:f1:
c1:38:88:13:5a:7f:8c:61:2e:b0:20:de:2d:39:37:
f8:17:4d:06:3d:10:50:33:72:ee:b1:d3:37:44:a2:
70:3d:c5:ab:04:2e:63:13:10:4b:a2:70:6f:77:5d:
80:65:96:0a:de:d0:97:95:ad:9c:40:9e:3c:6c:6f:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:16:65:20:2A:4F:A6:32:DE:5F:A9:C8:ED:81:60:59:62:94:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.128.0/24
178.83.149.0/24
178.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:2e:57:cd:c4:64:5f:15:bc:30:37:8f:5b:00:b7:29:4d:
be:8f:f6:ee:49:13:5d:6c:5c:b2:1a:9b:86:56:91:63:e2:45:
14:89:96:d5:06:75:7f:18:ba:88:d4:64:fd:3d:ea:55:2c:27:
b6:9e:31:81:16:c7:a7:7d:63:9a:13:18:5a:91:d3:d3:bf:b7:
62:79:1e:df:fb:03:7f:85:af:5f:d5:ee:b8:9b:77:bd:e2:97:
ff:ee:46:5e:40:b6:9b:ea:f3:66:19:eb:df:97:05:8a:93:d9:
fa:cc:be:27:0c:9e:63:29:b0:fb:75:bb:68:a2:ae:86:f9:88:
50:de:61:40:33:ab:ac:58:0d:1a:50:a4:c5:0f:e5:38:9f:9b:
c9:6c:b9:d9:bc:f3:7c:c5:af:78:28:1c:71:c4:64:6e:8c:a3:
7f:b8:37:06:b7:eb:79:57:f7:1a:14:33:85:a2:60:6f:fe:66:
88:7d:d0:4c:7d:77:91:02:7a:b7:99:c7:55:e9:20:89:94:7f:
cf:5f:d9:5b:6a:f7:b8:a0:04:a9:50:6e:b2:b8:e1:86:3e:93:
ea:c4:63:ad:0f:43:d5:25:a2:cf:40:d1:da:ad:a1:d6:14:a1:
1e:ee:d9:a7:38:b6:7b:32:8b:4c:5d:a5:04:3a:10:9d:d8:63:
eb:a9:87:00
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIiVL+2jPk7cG65tshny5RbrF5BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTcxMzQ2MzZaFw0yNzA5MTYxMzUxMzZaMDMxMTAvBgNV
BAMTKEJGQkExNjY1MjAyQTRGQTYzMkRFNUZBOUM4RUQ4MTYwNTk2Mjk0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEoflSuQxx1LtxPJce3S+1klT
KS2LGDhtTZIDOVxae4H/6p13RDYUboLZHUmmD3F7UxVfALQaGAV8Iiso6r3KQwSV
1/sFN0NoZ1Q3WX5zP+3+y+li84qKJiX+VlyLajZ5hp9YAZhwy3FSkcHQ5bixSH22
C98dgoFWh9lfIQA7i/aSbQv6CjIMaXkrkvfqSJLRG0KCshS92tMGV/vonS7EDDOu
3Hml7eRrF5B907R5/tlr7JhqN8K/+rWvq5KiH2K58cE4iBNaf4xhLrAg3i05N/gX
TQY9EFAzcu6x0zdEonA9xasELmMTEEuicG93XYBllgre0JeVrZxAnjxsb7L1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUv7oWZSAqT6Yy3l+pyO2BYFlilD4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzIyMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFIpgAME
ALJTlQMEALJT5jANBgkqhkiG9w0BAQsFAAOCAQEATvwuV83EZF8VvDA3j1sAtylN
vo/27kkTXWxcshqbhlaRY+JFFImW1QZ1fxi6iNRk/T3qVSwntp4xgRbHp31jmhMY
WpHT07+3Ynke3/sDf4WvX9XuuJt3veKX/+5GXkC2m+rzZhnr35cFipPZ+sy+Jwye
Yymw+3W7aKKuhvmIUN5hQDOrrFgNGlCkxQ/lOJ+byWy52bzzfMWveCgcccRkboyj
f7g3BrfreVf3GhQzhaJgb/5miH3QTH13kQJ6t5nHVekgiZR/z1/ZW2r3uKAEqVBu
srjhhj6T6sRjrQ9D1SWiz0DR2q2h1hShHu7Zpzi2ezKLTF2lBDoQndhj66mHAA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:57 2026 by rpki-client