Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: OViDyO7HnI/V1juBJ8S837HWuQtzDx2n4mC9av1llz4=
Subject key identifier: BA:50:3B:F3:DC:05:F8:82:C3:C5:5C:C0:43:EB:A6:34:E9:BB:9B:73
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: E68826B4CEB32CD2280A8F64A784C80EEC6798
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
Signing time: Tue 28 Jul 2026 00:00:44 +0000
ROA not before: Mon 27 Jul 2026 23:55:44 +0000
ROA not after: Tue 27 Jul 2027 00:00:44 +0000
asID: 3356
IP address blocks: 82.21.78.0/24 maxlen: 24
82.21.79.0/24 maxlen: 24
82.21.246.0/24 maxlen: 24
82.21.247.0/24 maxlen: 24
82.22.64.0/24 maxlen: 24
82.22.66.0/24 maxlen: 24
82.22.67.0/24 maxlen: 24
82.22.68.0/24 maxlen: 24
82.22.69.0/24 maxlen: 24
82.22.70.0/24 maxlen: 24
82.22.71.0/24 maxlen: 24
82.22.72.0/24 maxlen: 24
82.22.73.0/24 maxlen: 24
82.22.74.0/24 maxlen: 24
82.22.75.0/24 maxlen: 24
82.22.89.0/24 maxlen: 24
82.22.93.0/24 maxlen: 24
82.22.142.0/24 maxlen: 24
82.22.164.0/24 maxlen: 24
82.22.188.0/24 maxlen: 24
82.22.189.0/24 maxlen: 24
82.22.202.0/24 maxlen: 24
82.22.203.0/24 maxlen: 24
82.22.219.0/24 maxlen: 24
82.22.244.0/24 maxlen: 24
82.22.246.0/24 maxlen: 24
82.23.19.0/24 maxlen: 24
82.23.20.0/24 maxlen: 24
82.23.23.0/24 maxlen: 24
82.23.24.0/24 maxlen: 24
82.23.59.0/24 maxlen: 24
82.23.60.0/24 maxlen: 24
82.23.139.0/24 maxlen: 24
82.23.164.0/24 maxlen: 24
82.23.169.0/24 maxlen: 24
82.23.175.0/24 maxlen: 24
82.23.185.0/24 maxlen: 24
82.23.196.0/24 maxlen: 24
82.23.234.0/24 maxlen: 24
82.23.236.0/24 maxlen: 24
82.24.5.0/24 maxlen: 24
82.24.6.0/24 maxlen: 24
82.24.7.0/24 maxlen: 24
82.24.9.0/24 maxlen: 24
82.24.12.0/24 maxlen: 24
82.24.13.0/24 maxlen: 24
82.24.15.0/24 maxlen: 24
82.24.18.0/24 maxlen: 24
82.24.43.0/24 maxlen: 24
82.24.54.0/24 maxlen: 24
82.24.65.0/24 maxlen: 24
82.24.66.0/24 maxlen: 24
82.24.67.0/24 maxlen: 24
82.24.73.0/24 maxlen: 24
82.24.74.0/24 maxlen: 24
82.24.75.0/24 maxlen: 24
82.24.80.0/24 maxlen: 24
82.24.87.0/24 maxlen: 24
82.24.89.0/24 maxlen: 24
82.24.104.0/24 maxlen: 24
82.24.124.0/24 maxlen: 24
82.24.147.0/24 maxlen: 24
82.24.173.0/24 maxlen: 24
82.24.180.0/24 maxlen: 24
82.24.202.0/24 maxlen: 24
82.25.136.0/24 maxlen: 24
82.25.160.0/24 maxlen: 24
82.25.186.0/24 maxlen: 24
82.26.95.0/24 maxlen: 24
82.26.146.0/24 maxlen: 24
82.27.111.0/24 maxlen: 24
82.27.231.0/24 maxlen: 24
82.27.244.0/24 maxlen: 24
82.27.248.0/24 maxlen: 24
82.29.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e6:88:26:b4:ce:b3:2c:d2:28:0a:8f:64:a7:84:c8:0e:ec:67:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 23:55:44 2026 GMT
Not After : Jul 27 00:00:44 2027 GMT
Subject: CN=BA503BF3DC05F882C3C55CC043EBA634E9BB9B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:0b:0a:fa:28:2c:34:ae:f8:ae:16:f4:9b:
6a:32:74:c2:6b:cf:f6:85:33:42:36:2a:34:b8:86:
d4:ee:9f:b6:3c:e8:32:6f:59:4a:ff:d2:cc:3d:42:
4d:80:11:8e:a2:ed:41:68:fd:01:02:0f:86:0c:79:
bb:7e:77:3d:28:b3:ac:28:f7:60:a3:7e:f5:a2:ef:
93:dc:6d:22:98:6f:82:eb:22:8a:66:5d:b1:11:17:
00:44:c5:31:00:51:a0:52:16:cc:02:f4:57:7c:84:
1a:b1:ff:00:84:1f:b4:e6:cc:6e:b8:57:f1:38:a7:
5b:69:39:2e:31:7a:67:a3:63:e6:6a:9b:4c:4c:d3:
38:68:34:b8:7a:20:09:a7:83:31:a6:02:d1:fb:b7:
b5:f4:06:9f:93:f6:f4:b0:48:46:7c:96:c5:97:4c:
7e:12:d2:cb:5c:f6:dd:46:00:8e:66:8e:ce:ff:d8:
57:96:98:54:9e:16:7d:87:71:3e:57:20:20:f2:ef:
e3:49:8c:4f:63:dc:8e:f7:85:bb:eb:d9:36:da:7b:
c2:e7:f6:8c:0e:87:d6:24:f2:ac:c1:91:13:52:73:
72:19:aa:c8:fe:60:47:ca:8b:fb:83:3f:63:8b:f0:
7f:6f:96:ef:c3:c0:0c:96:12:74:1b:37:a9:e7:b1:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:3B:F3:DC:05:F8:82:C3:C5:5C:C0:43:EB:A6:34:E9:BB:9B:73
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.78.0/23
82.21.246.0/23
82.22.64.0/24
82.22.66.0-82.22.75.255
82.22.89.0/24
82.22.93.0/24
82.22.142.0/24
82.22.164.0/24
82.22.188.0/23
82.22.202.0/23
82.22.219.0/24
82.22.244.0/24
82.22.246.0/24
82.23.19.0-82.23.20.255
82.23.23.0-82.23.24.255
82.23.59.0-82.23.60.255
82.23.139.0/24
82.23.164.0/24
82.23.169.0/24
82.23.175.0/24
82.23.185.0/24
82.23.196.0/24
82.23.234.0/24
82.23.236.0/24
82.24.5.0-82.24.7.255
82.24.9.0/24
82.24.12.0/23
82.24.15.0/24
82.24.18.0/24
82.24.43.0/24
82.24.54.0/24
82.24.65.0-82.24.67.255
82.24.73.0-82.24.75.255
82.24.80.0/24
82.24.87.0/24
82.24.89.0/24
82.24.104.0/24
82.24.124.0/24
82.24.147.0/24
82.24.173.0/24
82.24.180.0/24
82.24.202.0/24
82.25.136.0/24
82.25.160.0/24
82.25.186.0/24
82.26.95.0/24
82.26.146.0/24
82.27.111.0/24
82.27.231.0/24
82.27.244.0/24
82.27.248.0/24
82.29.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:40:37:f1:96:c6:23:e7:31:71:49:08:38:dc:74:d7:f7:1d:
44:9d:ab:d4:77:6d:98:95:87:3e:92:4c:ec:f3:ef:3c:c3:b2:
b1:47:41:5e:cb:26:97:ed:ea:d8:1c:78:8e:73:a1:3a:7e:4a:
0e:97:c7:34:ea:fa:fd:d2:42:eb:be:49:2e:b4:57:9b:e5:b6:
85:85:06:63:7d:80:02:eb:00:18:00:91:8c:95:ed:5d:75:20:
1a:42:5c:c0:51:cf:f8:2c:52:b8:9c:ee:d7:b7:4b:6e:71:9f:
67:df:32:48:af:8b:99:1b:de:9a:bb:60:a2:f1:7b:16:0a:34:
b4:53:cd:4b:4b:1c:84:cc:40:dd:31:b3:4b:74:25:45:4b:39:
b0:af:41:f4:94:53:df:66:d4:02:1e:40:2c:56:ff:5f:37:84:
70:72:70:f9:3f:93:79:f5:9b:83:14:f3:3c:69:b1:b6:6c:77:
9a:02:c9:4d:16:4c:ce:05:df:84:28:d8:49:90:b4:b7:8b:5d:
96:ec:23:68:8b:ee:5e:46:86:39:7b:13:44:b4:fc:b3:41:e8:
3d:8e:00:1f:cf:a1:4b:a1:9d:50:76:cd:5d:58:e1:7e:e5:12:
b7:90:71:06:59:33:cb:3a:c4:32:7a:a4:64:0a:73:4f:df:d9:
b2:d5:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:34 2026 by rpki-client