Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: H3goHuIxx60quXo3E8+9SdOVN7/Pzjz5qMyV5tk0nsY=
Subject key identifier: 91:CC:F2:66:0B:94:39:2E:AD:CD:77:1B:6D:46:B1:67:06:8C:F7:6D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E0A434CDE540BD3CC85DAD1F729A44AEB89D86D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
Signing time: Sat 17 Oct 2026 13:25:14 +0000
ROA not before: Sat 17 Oct 2026 13:20:14 +0000
ROA not after: Sat 16 Oct 2027 13:25:14 +0000
asID: 3223
IP address blocks: 188.221.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0a:43:4c:de:54:0b:d3:cc:85:da:d1:f7:29:a4:4a:eb:89:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 17 13:20:14 2026 GMT
Not After : Oct 16 13:25:14 2027 GMT
Subject: CN=91CCF2660B94392EADCD771B6D46B167068CF76D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:9d:ba:89:d7:aa:80:01:f0:02:c3:85:81:
4e:12:53:23:06:f5:47:71:ce:77:6c:65:ce:d2:be:
d2:14:15:c8:21:b6:f4:09:7f:3d:95:60:6d:b8:1e:
7a:76:42:7d:36:f6:d4:17:46:51:9c:25:d7:46:2e:
4f:51:c1:19:e0:eb:05:93:16:90:99:11:14:e7:c2:
57:32:b7:21:59:ed:7a:2c:d4:7d:e5:b0:2c:59:a6:
09:e7:8d:ef:cf:20:a6:ad:ee:96:e9:34:0d:d8:79:
8c:78:85:81:10:9d:36:8b:9c:34:02:dd:f6:ac:e5:
63:5b:01:02:1b:a7:e5:27:39:d0:69:43:fd:53:8c:
92:fd:1d:98:54:47:db:6d:91:4c:68:94:8f:58:0b:
12:c6:d6:4a:a5:4e:17:1b:75:5c:49:33:af:c9:b4:
82:dd:39:d9:d9:31:bc:1e:7d:ce:81:4b:b5:2f:75:
95:82:dd:66:90:59:4d:b3:83:81:26:7f:73:ed:8e:
8e:b0:1b:34:21:ee:22:98:be:a6:8c:92:95:cb:c7:
99:8c:1c:1a:c6:ab:9b:b8:0d:7b:3b:97:5d:08:65:
75:c2:fb:2b:6b:c2:c2:b6:ea:3e:ab:62:82:8b:80:
0b:27:f7:6b:43:f3:73:01:52:ee:e3:c4:9e:b8:ea:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:F2:66:0B:94:39:2E:AD:CD:77:1B:6D:46:B1:67:06:8C:F7:6D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.228.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d4:11:c0:cc:c0:85:0e:cc:b3:ec:55:22:e2:2f:3b:fe:91:
9a:e0:76:21:c5:9d:9e:ae:a2:ef:8b:fb:87:14:99:08:1e:bb:
e3:ee:9c:e7:5b:b0:1e:1f:ad:6e:d2:a0:5d:1e:91:58:93:d8:
24:e9:73:49:50:37:93:48:48:94:2a:64:e9:74:ab:d4:32:7c:
4b:76:10:c9:56:4a:c1:06:11:ac:bc:c1:e3:1a:36:eb:d6:53:
a9:2e:40:62:5a:3b:a9:af:1c:4c:78:59:9f:3c:64:82:b6:7e:
f2:95:00:91:9c:bc:57:75:13:e3:40:d8:3d:31:94:12:f2:2d:
3f:d4:a6:cc:4c:50:f9:51:eb:92:b9:80:6e:97:ef:0f:53:07:
55:8c:9e:25:d7:74:73:b6:f3:ff:b4:65:22:2b:8f:8f:7a:f5:
aa:04:47:0a:54:b4:35:48:3c:f0:08:85:d8:47:80:cf:93:a4:
fe:99:88:8b:4b:8c:89:d8:90:84:c6:41:e3:76:87:66:a9:c0:
49:b6:3b:78:a6:60:41:27:09:51:14:7d:54:2c:10:60:57:23:
37:52:be:26:dd:bd:08:ab:3c:ca:18:64:2b:02:04:fc:99:0e:
1b:4d:e2:41:c9:26:69:c5:8a:be:cf:5d:ce:a4:a4:10:b7:62:
2e:24:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:24:49 2026 by rpki-client