Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: d6Dw1riO9dSVHv0hVH2j6YcKwNSvTe6J5Ux1fDfeA5g=
Subject key identifier: 0C:DB:BE:F1:12:8F:9A:7D:15:7F:9B:E1:21:C9:66:5D:66:63:6D:08
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3E717725E55CDE87726CC48DBB96553434F95349
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
Signing time: Thu 15 Oct 2026 10:55:20 +0000
ROA not before: Thu 15 Oct 2026 10:50:20 +0000
ROA not after: Thu 14 Oct 2027 10:55:20 +0000
asID: 3223
IP address blocks: 82.41.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:71:77:25:e5:5c:de:87:72:6c:c4:8d:bb:96:55:34:34:f9:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 10:50:20 2026 GMT
Not After : Oct 14 10:55:20 2027 GMT
Subject: CN=0CDBBEF1128F9A7D157F9BE121C9665D66636D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:74:bc:ad:29:0a:eb:5f:bf:59:a7:71:f5:
7c:86:b1:20:a9:b1:5a:30:5d:71:2d:57:de:b5:f6:
37:2c:e0:bb:48:9b:ff:21:45:f1:9f:6c:82:d8:86:
a5:ad:ab:65:3d:b7:43:e5:44:eb:94:b0:cf:41:68:
7a:2b:74:51:25:55:62:52:54:38:c3:d8:a9:fc:bd:
67:06:81:39:03:6d:cb:36:bb:1e:21:14:86:97:f8:
db:7c:24:fc:7e:37:e9:b8:ee:34:a0:de:2b:31:9b:
f2:21:1d:c8:ea:57:ee:06:c7:d5:76:ef:90:b9:b0:
7f:f5:23:0c:ff:40:38:25:69:09:9e:f0:78:7c:cf:
11:69:82:9f:9c:55:77:d6:54:15:9e:df:11:e6:95:
51:5a:17:08:86:6d:fa:1e:88:44:cc:d8:24:a2:13:
7b:88:92:c5:1a:09:2b:e2:f5:31:7c:68:b7:7c:29:
a3:bb:ed:20:b7:13:1b:51:b3:55:2e:2c:13:74:0c:
2e:f6:b3:1a:2d:56:3d:5e:16:d7:1d:d2:5c:19:e7:
fb:d3:a4:ed:2a:a5:b6:fd:14:c6:df:b1:8e:f4:a6:
58:15:e6:20:b8:36:2b:45:3d:b7:28:2e:44:3c:fd:
05:b6:fb:a7:93:20:4f:fd:69:6a:d7:f3:eb:2a:87:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:BE:F1:12:8F:9A:7D:15:7F:9B:E1:21:C9:66:5D:66:63:6D:08
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:50:7c:26:9f:3d:41:ad:bd:28:0d:a9:12:b4:d0:e4:e5:c2:
1a:74:69:3a:72:bf:4c:f2:82:0a:0e:4d:c9:74:f0:a6:44:32:
bf:9b:45:3d:7c:16:fc:95:89:f3:2a:12:7c:00:c7:cc:61:7c:
63:2e:eb:a6:06:fa:50:b7:54:16:b0:b0:ca:87:c6:59:f9:69:
ea:22:2c:1c:98:5d:c3:84:26:73:39:64:ff:91:aa:bc:2d:a3:
1f:7a:3b:8a:f6:91:f1:7a:2e:84:a4:a0:99:e5:ee:47:54:99:
9e:f8:f1:97:ce:64:be:1f:eb:bd:dc:92:3d:61:ac:06:6e:b2:
57:a5:d6:c7:e9:a5:2e:b0:79:c1:a3:9d:ba:36:0f:21:e4:68:
c7:23:53:15:1a:3b:b9:4e:88:62:6c:a8:e1:83:ad:e9:65:de:
60:b7:85:e1:4b:d0:24:36:3c:f6:93:94:a8:ec:b6:c2:51:fd:
f4:b4:8b:88:24:9e:c7:5d:18:26:74:82:e9:29:3f:19:19:7d:
52:47:93:d2:99:95:44:ec:23:9a:33:13:23:96:c1:7c:cc:ca:
09:4a:08:b7:bb:e3:a2:e3:14:8c:f4:cd:e3:eb:ed:34:36:88:
8e:22:b0:31:ee:ad:1d:10:d6:97:1e:c9:3b:8c:c4:f3:4d:2d:
a1:8c:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:01:40 2026 by rpki-client