Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: oFkBKx+W4xCVrmWK5I2e7lsCtS5mOjLgKxwMOQSI1Rw=
Subject key identifier: A0:FD:D9:7F:79:21:E6:E5:6D:AA:54:C3:53:86:A8:3D:F8:EC:71:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 76383956A5EB51E53D1BD6D5981CF049C973F88B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
Signing time: Thu 17 Sep 2026 13:51:38 +0000
ROA not before: Thu 17 Sep 2026 13:46:38 +0000
ROA not after: Thu 16 Sep 2027 13:51:38 +0000
asID: 3223
IP address blocks: 78.105.141.0/24 maxlen: 24
188.220.2.0/24 maxlen: 24
188.220.17.0/24 maxlen: 24
188.220.224.0/24 maxlen: 24
188.221.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:38:39:56:a5:eb:51:e5:3d:1b:d6:d5:98:1c:f0:49:c9:73:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 17 13:46:38 2026 GMT
Not After : Sep 16 13:51:38 2027 GMT
Subject: CN=A0FDD97F7921E6E56DAA54C35386A83DF8EC7149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cb:4d:1d:75:fa:6c:c9:76:61:c4:b3:7e:38:
0a:08:46:cc:f6:7a:69:1d:38:85:5d:1e:45:03:d7:
1c:e6:20:32:2d:4d:6c:17:c7:6e:73:ee:96:82:a2:
3f:14:6e:c0:71:98:24:01:0d:c2:bb:70:80:24:56:
47:90:f6:26:88:47:0f:c4:36:60:67:d5:87:b7:2c:
68:69:98:4f:07:07:18:f6:cb:b6:ef:9c:9d:e7:52:
23:25:9e:cb:ec:de:5f:6c:76:88:47:e3:16:6f:8b:
78:7c:4b:0c:c8:09:03:a6:06:b6:36:ff:90:6b:e5:
ed:46:12:eb:93:1c:89:f2:a8:24:0d:5f:a4:86:0e:
6b:6e:8a:cf:30:d4:94:2f:8c:99:c8:8c:59:91:d7:
6b:17:55:ac:fa:fb:7f:42:e7:eb:e0:67:47:59:ae:
7a:8a:d9:0e:60:56:6b:6a:b0:fa:2d:58:ac:00:dc:
81:da:4e:3c:12:a3:4e:ee:78:2c:dd:c8:1b:7f:48:
95:35:49:db:df:91:10:a7:e3:8c:80:f7:ae:c2:f2:
d3:13:19:44:12:ec:5f:15:3f:f8:67:bd:d5:77:c0:
78:0f:e0:00:f6:46:81:28:61:12:d9:33:5d:bf:b9:
bd:1c:f2:62:da:d4:eb:08:0a:40:aa:9b:5b:59:42:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:D9:7F:79:21:E6:E5:6D:AA:54:C3:53:86:A8:3D:F8:EC:71:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.141.0/24
188.220.2.0/24
188.220.17.0/24
188.220.224.0/24
188.221.228.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0c:0c:1f:1f:7b:a3:f3:f1:8d:de:7a:25:01:c6:6e:86:bf:
58:46:49:59:7d:25:e5:60:9e:63:1f:43:bd:9d:2f:f2:6d:62:
bd:d5:a0:7f:1a:e9:fc:be:23:4b:82:76:96:30:39:de:02:e0:
df:f8:7c:83:89:b9:26:ac:7e:84:b7:aa:50:f2:c0:73:4d:5b:
43:c7:75:af:e1:62:9c:ca:e6:03:47:9f:dc:05:13:4a:dc:c1:
78:51:9e:b9:f5:70:4e:1a:59:9d:29:cd:bd:9f:38:14:9d:c5:
f3:e1:24:19:57:8c:12:97:2b:51:a2:ed:b1:f9:27:65:39:25:
31:8b:d8:2a:bd:28:43:c3:c8:d6:a5:f0:88:b1:bb:ca:74:0c:
4d:af:b6:4e:5c:35:dd:77:36:01:87:3d:e5:a3:9b:78:4b:a2:
69:4a:a0:25:f4:12:6d:dd:d6:79:7e:4d:48:44:d9:b3:fc:5f:
18:95:51:0f:4c:0b:19:1f:a3:82:d4:09:3e:26:95:23:3d:b5:
d8:e7:b3:25:a1:e6:27:7c:29:6b:9c:04:28:64:3d:75:3a:97:
d7:f2:f7:93:e3:42:1e:07:bf:00:eb:5f:44:bd:6b:d5:e8:8a:
5b:42:65:ed:22:bf:0a:15:74:e3:b2:a9:70:55:76:18:d6:64:
1a:91:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:14 2026 by rpki-client