Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: KVnVl593ga4/KVkD7dg01wD9O+JIly5LFykXeY+gKCU=
Subject key identifier: 46:03:29:3D:06:2C:17:00:36:77:D7:2E:D5:EB:40:10:96:EE:C9:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0890EBD6F7525BE8D388A940510A64B539570E86
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
Signing time: Wed 28 Jan 2026 00:04:09 +0000
ROA not before: Tue 27 Jan 2026 23:59:09 +0000
ROA not after: Wed 27 Jan 2027 00:04:09 +0000
asID: 3356
IP address blocks: 82.21.78.0/24 maxlen: 24
82.21.79.0/24 maxlen: 24
82.21.246.0/24 maxlen: 24
82.21.247.0/24 maxlen: 24
82.22.64.0/24 maxlen: 24
82.22.66.0/24 maxlen: 24
82.22.67.0/24 maxlen: 24
82.22.68.0/24 maxlen: 24
82.22.69.0/24 maxlen: 24
82.22.70.0/24 maxlen: 24
82.22.71.0/24 maxlen: 24
82.22.72.0/24 maxlen: 24
82.22.73.0/24 maxlen: 24
82.22.74.0/24 maxlen: 24
82.22.75.0/24 maxlen: 24
82.22.89.0/24 maxlen: 24
82.22.93.0/24 maxlen: 24
82.22.142.0/24 maxlen: 24
82.22.164.0/24 maxlen: 24
82.22.188.0/24 maxlen: 24
82.22.189.0/24 maxlen: 24
82.22.202.0/24 maxlen: 24
82.22.203.0/24 maxlen: 24
82.22.219.0/24 maxlen: 24
82.22.244.0/24 maxlen: 24
82.22.246.0/24 maxlen: 24
82.23.19.0/24 maxlen: 24
82.23.20.0/24 maxlen: 24
82.23.23.0/24 maxlen: 24
82.23.24.0/24 maxlen: 24
82.23.59.0/24 maxlen: 24
82.23.60.0/24 maxlen: 24
82.23.139.0/24 maxlen: 24
82.23.164.0/24 maxlen: 24
82.23.169.0/24 maxlen: 24
82.23.175.0/24 maxlen: 24
82.23.185.0/24 maxlen: 24
82.23.196.0/24 maxlen: 24
82.23.234.0/24 maxlen: 24
82.23.236.0/24 maxlen: 24
82.24.5.0/24 maxlen: 24
82.24.6.0/24 maxlen: 24
82.24.7.0/24 maxlen: 24
82.24.9.0/24 maxlen: 24
82.24.12.0/24 maxlen: 24
82.24.13.0/24 maxlen: 24
82.24.15.0/24 maxlen: 24
82.24.18.0/24 maxlen: 24
82.24.43.0/24 maxlen: 24
82.24.54.0/24 maxlen: 24
82.24.65.0/24 maxlen: 24
82.24.66.0/24 maxlen: 24
82.24.67.0/24 maxlen: 24
82.24.73.0/24 maxlen: 24
82.24.74.0/24 maxlen: 24
82.24.75.0/24 maxlen: 24
82.24.80.0/24 maxlen: 24
82.24.87.0/24 maxlen: 24
82.24.89.0/24 maxlen: 24
82.24.104.0/24 maxlen: 24
82.24.115.0/24 maxlen: 24
82.24.124.0/24 maxlen: 24
82.24.147.0/24 maxlen: 24
82.24.173.0/24 maxlen: 24
82.24.180.0/24 maxlen: 24
82.24.202.0/24 maxlen: 24
82.25.136.0/24 maxlen: 24
82.25.160.0/24 maxlen: 24
82.25.186.0/24 maxlen: 24
82.26.71.0/24 maxlen: 24
82.26.95.0/24 maxlen: 24
82.26.146.0/24 maxlen: 24
82.27.111.0/24 maxlen: 24
82.27.231.0/24 maxlen: 24
82.27.244.0/24 maxlen: 24
82.27.248.0/24 maxlen: 24
82.29.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:90:eb:d6:f7:52:5b:e8:d3:88:a9:40:51:0a:64:b5:39:57:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 27 23:59:09 2026 GMT
Not After : Jan 27 00:04:09 2027 GMT
Subject: CN=4603293D062C17003677D72ED5EB401096EEC93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:91:bf:5a:34:c3:46:3d:ef:cf:27:3d:c5:
b8:26:48:79:73:b8:f0:92:f0:63:57:5d:30:75:06:
c7:c2:ef:4b:8a:7e:d8:20:07:d6:a1:76:13:d3:48:
73:94:67:16:3e:6f:70:55:74:41:04:dc:7e:b2:b3:
49:39:c3:e5:f8:5c:80:fa:f7:1b:cd:e3:63:96:8c:
d6:86:c5:2f:b2:53:e9:a0:9c:3b:49:3a:5c:d9:43:
5c:79:b1:0c:46:cf:0b:48:94:bd:dd:eb:72:6a:91:
d6:4b:7d:c8:5d:4c:c1:a9:df:82:61:f3:c2:f4:21:
17:0f:16:5f:87:44:06:c3:88:f7:28:f5:89:af:67:
b1:3d:f3:4f:3c:6e:8c:fd:4e:fb:bb:2e:fb:9b:48:
28:c4:31:82:ea:03:fa:b8:21:ae:b5:4d:e9:b6:3d:
9d:c7:75:5d:65:07:93:c9:40:93:dc:a7:98:61:30:
bb:01:74:90:d7:3a:be:d2:ac:0f:cb:af:60:ef:dc:
79:94:d1:3e:21:4e:31:17:66:44:7c:5c:55:e2:c9:
d4:d5:40:7b:ac:28:9a:60:2f:ed:53:42:43:ce:0f:
c1:78:5d:21:42:1c:1a:29:4d:4e:7e:81:1d:f5:31:
1a:a3:33:4e:3f:22:c4:f1:f9:9f:31:93:d4:07:a7:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:29:3D:06:2C:17:00:36:77:D7:2E:D5:EB:40:10:96:EE:C9:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.78.0/23
82.21.246.0/23
82.22.64.0/24
82.22.66.0-82.22.75.255
82.22.89.0/24
82.22.93.0/24
82.22.142.0/24
82.22.164.0/24
82.22.188.0/23
82.22.202.0/23
82.22.219.0/24
82.22.244.0/24
82.22.246.0/24
82.23.19.0-82.23.20.255
82.23.23.0-82.23.24.255
82.23.59.0-82.23.60.255
82.23.139.0/24
82.23.164.0/24
82.23.169.0/24
82.23.175.0/24
82.23.185.0/24
82.23.196.0/24
82.23.234.0/24
82.23.236.0/24
82.24.5.0-82.24.7.255
82.24.9.0/24
82.24.12.0/23
82.24.15.0/24
82.24.18.0/24
82.24.43.0/24
82.24.54.0/24
82.24.65.0-82.24.67.255
82.24.73.0-82.24.75.255
82.24.80.0/24
82.24.87.0/24
82.24.89.0/24
82.24.104.0/24
82.24.115.0/24
82.24.124.0/24
82.24.147.0/24
82.24.173.0/24
82.24.180.0/24
82.24.202.0/24
82.25.136.0/24
82.25.160.0/24
82.25.186.0/24
82.26.71.0/24
82.26.95.0/24
82.26.146.0/24
82.27.111.0/24
82.27.231.0/24
82.27.244.0/24
82.27.248.0/24
82.29.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2d:55:92:e8:6d:49:5e:33:e9:5f:0d:d7:e8:1a:be:18:7e:
e3:cb:6f:0c:da:2d:fd:ca:6f:37:51:09:a7:8a:0c:d4:dc:97:
71:f0:61:61:39:91:30:9d:44:d5:02:65:c1:51:4f:bd:bb:94:
ba:38:50:75:cb:22:55:b6:3f:10:9b:a9:fe:af:ea:5a:eb:66:
07:5c:e8:14:ac:fd:d1:ae:16:7f:f5:fe:56:79:8d:61:81:ec:
2d:02:1e:0d:7b:b5:5e:cb:7c:00:57:ab:2b:07:68:ee:e3:8f:
82:7b:32:5a:4d:5d:f3:c9:35:67:f3:13:db:8d:e6:21:b8:91:
3c:b1:f2:88:b4:dd:1a:4e:b3:ec:84:bd:46:42:4d:1a:1d:64:
d7:f9:1d:16:7e:44:09:e4:c5:ab:4d:e4:e0:a5:0e:88:a0:b1:
56:26:61:dd:7f:11:29:dd:b1:03:1e:57:3e:19:f5:84:4f:d5:
0b:18:c5:49:ec:3c:59:0c:14:80:5b:6d:12:cb:c7:b8:e4:0e:
ed:5c:8a:bc:fa:9a:d7:ae:ea:8d:d9:c3:11:d4:40:b8:31:64:
ab:78:47:fd:b9:43:aa:ca:e8:03:59:22:3c:78:31:05:68:e0:
95:10:c1:5a:0b:41:a4:9b:7c:98:5f:f6:2f:6f:44:44:46:5c:
94:3e:99:16
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIUCJDr1vdSW+jTiKlAUQpktTlXDoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMjcyMzU5MDlaFw0yNzAxMjcwMDA0MDlaMDMxMTAvBgNV
BAMTKDQ2MDMyOTNEMDYyQzE3MDAzNjc3RDcyRUQ1RUI0MDEwOTZFRUM5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PpG/WjTDRj3vzyc9xbgmSHlz
uPCS8GNXXTB1BsfC70uKftggB9ahdhPTSHOUZxY+b3BVdEEE3H6ys0k5w+X4XID6
9xvN42OWjNaGxS+yU+mgnDtJOlzZQ1x5sQxGzwtIlL3d63JqkdZLfchdTMGp34Jh
88L0IRcPFl+HRAbDiPco9YmvZ7E98088boz9Tvu7LvubSCjEMYLqA/q4Ia61Tem2
PZ3HdV1lB5PJQJPcp5hhMLsBdJDXOr7SrA/Lr2Dv3HmU0T4hTjEXZkR8XFXiydTV
QHusKJpgL+1TQkPOD8F4XSFCHBopTU5+gR31MRqjM04/IsTx+Z8xk9QHp1SFAgMB
AAGjggOIMIIDhDAdBgNVHQ4EFgQURgMpPQYsFwA2d9cu1etAEJbuyT4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzM1Ni5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAZ0GCCsGAQUFBwEHAQH/BIIBjDCCAYgwggGEBAIAATCC
AXwDBAFSFU4DBAFSFfYDBABSFkAwDAMEAVIWQgMEAlIWSAMEAFIWWQMEAFIWXQME
AFIWjgMEAFIWpAMEAVIWvAMEAVIWygMEAFIW2wMEAFIW9AMEAFIW9jAMAwQAUhcT
AwQAUhcUMAwDBABSFxcDBABSFxgwDAMEAFIXOwMEAFIXPAMEAFIXiwMEAFIXpAME
AFIXqQMEAFIXrwMEAFIXuQMEAFIXxAMEAFIX6gMEAFIX7DAMAwQAUhgFAwQDUhgA
AwQAUhgJAwQBUhgMAwQAUhgPAwQAUhgSAwQAUhgrAwQAUhg2MAwDBABSGEEDBAJS
GEAwDAMEAFIYSQMEAlIYSAMEAFIYUAMEAFIYVwMEAFIYWQMEAFIYaAMEAFIYcwME
AFIYfAMEAFIYkwMEAFIYrQMEAFIYtAMEAFIYygMEAFIZiAMEAFIZoAMEAFIZugME
AFIaRwMEAFIaXwMEAFIakgMEAFIbbwMEAFIb5wMEAFIb9AMEAFIb+AMEAFId9jAN
BgkqhkiG9w0BAQsFAAOCAQEAHC1VkuhtSV4z6V8N1+gavhh+48tvDNot/cpvN1EJ
p4oM1NyXcfBhYTmRMJ1E1QJlwVFPvbuUujhQdcsiVbY/EJup/q/qWutmB1zoFKz9
0a4Wf/X+VnmNYYHsLQIeDXu1Xst8AFerKwdo7uOPgnsyWk1d88k1Z/MT243mIbiR
PLHyiLTdGk6z7IS9RkJNGh1k1/kdFn5ECeTFq03k4KUOiKCxViZh3X8RKd2xAx5X
Phn1hE/VCxjFSew8WQwUgFttEsvHuOQO7VyKvPqa167qjdnDEdRAuDFkq3hH/blD
qsroA1kiPHgxBWjglRDBWgtBpJt8mF/2L29EREZclD6ZFg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:17 2026 by rpki-client