Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: GiR3zk6cL3KEeDt4BRfo8J6T2j+WpVRYX22UtZvE4J4=
Subject key identifier: A8:17:3E:0C:11:15:90:4C:40:AE:BB:6D:60:CE:8B:9E:60:F8:AC:99
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 62F03C06B70154A5EC6BCE5D763234A6183325F8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
Signing time: Sat 19 Jul 2025 23:23:49 +0000
ROA not before: Sat 19 Jul 2025 23:18:49 +0000
ROA not after: Sat 18 Jul 2026 23:23:49 +0000
asID: 3320
IP address blocks: 140.233.192.0/18 maxlen: 24
140.233.192.0/24 maxlen: 24
143.14.128.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.130.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.170.0/24 maxlen: 24
147.79.8.0/21 maxlen: 24
147.79.48.0/24 maxlen: 24
147.79.49.0/24 maxlen: 24
147.79.50.0/24 maxlen: 24
147.79.51.0/24 maxlen: 24
148.135.192.0/24 maxlen: 24
150.241.192.0/24 maxlen: 24
150.241.193.0/24 maxlen: 24
150.241.194.0/24 maxlen: 24
150.241.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f0:3c:06:b7:01:54:a5:ec:6b:ce:5d:76:32:34:a6:18:33:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 23:18:49 2025 GMT
Not After : Jul 18 23:23:49 2026 GMT
Subject: CN=A8173E0C1115904C40AEBB6D60CE8B9E60F8AC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:9c:d4:f1:47:db:a0:7b:bc:7f:f4:d2:17:
27:f1:7c:cc:c7:e8:55:28:a1:12:5c:72:83:da:fa:
a2:3d:36:93:7f:35:5c:bd:c0:11:e5:e4:01:f9:22:
e3:d1:e0:21:44:6e:f0:b2:ec:9e:ae:b2:71:6c:eb:
3d:ad:c8:37:ac:60:2a:a8:17:39:46:62:f9:b6:1b:
12:dc:d3:01:3f:86:be:9d:34:29:eb:ac:02:52:11:
78:1c:8f:a0:f2:bc:7d:7c:fa:d8:37:1d:86:aa:ae:
d3:97:87:39:72:19:41:89:27:22:05:79:23:e9:fc:
a7:c7:5e:c1:77:e1:66:0d:0c:0c:3f:ff:41:92:dd:
85:19:17:58:5c:c8:60:a2:42:f6:0f:b6:5f:a6:62:
20:43:73:c0:0f:5e:8c:c4:14:ae:84:62:83:cf:fa:
73:f3:21:66:3b:6f:d2:23:b1:d4:c4:c8:75:85:19:
53:bf:b7:68:6b:61:99:59:d9:11:99:9f:20:43:53:
97:ed:75:4c:a2:1f:72:6f:51:79:1e:72:70:f9:19:
1a:53:5f:64:0c:43:b0:70:c7:9b:a1:91:b5:64:f2:
00:2b:9b:61:c8:0c:9d:ff:f7:2a:8c:fe:bf:1f:e2:
d5:b2:5f:6c:9c:1a:88:44:b0:7c:42:48:67:52:f8:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:3E:0C:11:15:90:4C:40:AE:BB:6D:60:CE:8B:9E:60:F8:AC:99
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
143.14.128.0-143.14.130.255
143.14.140.0/24
143.14.170.0/24
147.79.8.0/21
147.79.48.0/22
148.135.192.0/24
150.241.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:57:86:6b:4c:3b:b8:52:57:d4:cf:5a:73:ca:ca:f4:2d:35:
20:b8:8d:b2:d6:91:e8:72:14:80:c2:92:ca:b7:2f:c5:96:db:
23:8c:32:6b:c2:9a:1d:36:4d:f4:6e:c1:a1:6c:be:10:ff:59:
18:f8:a4:8b:39:ed:64:71:76:1a:01:d8:01:4c:4a:77:2d:1f:
e3:34:33:77:c2:02:7d:78:86:fa:90:e3:9a:9a:36:30:77:46:
ab:90:ef:95:81:c7:2c:e4:70:f9:d2:d7:3f:32:ee:0d:9e:18:
c2:47:84:b8:48:47:ad:7c:1d:5f:d8:05:69:36:7f:7f:63:3f:
84:f1:c6:61:af:97:91:ff:62:61:56:3c:90:8e:1c:51:e9:9b:
3b:3a:ab:b0:66:cb:fc:3c:59:fe:1b:be:ee:e3:5f:24:62:d2:
96:ef:7d:52:0e:4b:47:68:ae:22:9f:19:a2:92:b5:76:7c:e7:
99:e5:98:54:1f:51:d0:b4:d9:ba:a8:ba:6d:5d:5a:b0:5f:13:
74:2a:ec:4a:77:b4:16:06:20:10:f5:20:b3:fc:4c:c4:6e:e4:
71:2b:91:fc:b3:10:a7:11:bf:3a:1e:d5:9b:d9:18:0e:cc:d1:
5d:05:a7:1e:11:30:2c:83:35:53:83:c0:d9:5a:b9:da:ea:56:
49:77:c4:4d
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUYvA8BrcBVKXsa85ddjI0phgzJfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MTkyMzE4NDlaFw0yNjA3MTgyMzIzNDlaMDMxMTAvBgNV
BAMTKEE4MTczRTBDMTExNTkwNEM0MEFFQkI2RDYwQ0U4QjlFNjBGOEFDOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gZzU8UfboHu8f/TSFyfxfMzH
6FUooRJccoPa+qI9NpN/NVy9wBHl5AH5IuPR4CFEbvCy7J6usnFs6z2tyDesYCqo
FzlGYvm2GxLc0wE/hr6dNCnrrAJSEXgcj6DyvH18+tg3HYaqrtOXhzlyGUGJJyIF
eSPp/KfHXsF34WYNDAw//0GS3YUZF1hcyGCiQvYPtl+mYiBDc8APXozEFK6EYoPP
+nPzIWY7b9IjsdTEyHWFGVO/t2hrYZlZ2RGZnyBDU5ftdUyiH3JvUXkecnD5GRpT
X2QMQ7Bwx5uhkbVk8gArm2HIDJ3/9yqM/r8f4tWyX2ycGohEsHxCSGdS+O8bAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUqBc+DBEVkExArrttYM6LnmD4rJkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzMyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEBozpwDAM
AwQHjw6AAwQAjw6CAwQAjw6MAwQAjw6qAwQDk08IAwQCk08wAwQAlIfAAwQClvHA
MA0GCSqGSIb3DQEBCwUAA4IBAQCtV4ZrTDu4UlfUz1pzysr0LTUguI2y1pHochSA
wpLKty/FltsjjDJrwpodNk30bsGhbL4Q/1kY+KSLOe1kcXYaAdgBTEp3LR/jNDN3
wgJ9eIb6kOOamjYwd0arkO+Vgccs5HD50tc/Mu4NnhjCR4S4SEetfB1f2AVpNn9/
Yz+E8cZhr5eR/2JhVjyQjhxR6Zs7OquwZsv8PFn+G77u418kYtKW731SDktHaK4i
nxmikrV2fOeZ5ZhUH1HQtNm6qLptXVqwXxN0KuxKd7QWBiAQ9SCz/EzEbuRxK5H8
sxCnEb86HtWb2RgOzNFdBaceETAsgzVTg8DZWrna6lZJd8RN
-----END CERTIFICATE-----
Generated at Mon Jul 21 06:48:22 2025 by rpki-client