Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
File: AS3223.roa (raw, json)
Hash identifier: Quwm1uvgimdGYRgmBLOf6AO4XencsL3y4DNxzpVQgjM=
Subject key identifier: DE:80:22:E2:2A:6E:48:13:7B:B6:EC:5E:B1:BE:CA:66:91:79:6A:5D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7D263D1041A8D2433942438AB94C83D854306004
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
Signing time: Sat 17 Oct 2026 13:24:41 +0000
ROA not before: Sat 17 Oct 2026 13:19:41 +0000
ROA not after: Sat 16 Oct 2027 13:24:41 +0000
asID: 3223
IP address blocks: 168.222.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:26:3d:10:41:a8:d2:43:39:42:43:8a:b9:4c:83:d8:54:30:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 13:19:41 2026 GMT
Not After : Oct 16 13:24:41 2027 GMT
Subject: CN=DE8022E22A6E48137BB6EC5EB1BECA6691796A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:3f:9b:1c:3d:7b:aa:b3:36:4f:a4:0c:14:
20:4b:56:c2:ad:75:63:52:73:5b:07:de:c5:e4:40:
8d:6c:61:35:a3:fa:da:05:9b:59:65:b3:f4:e5:b9:
81:a5:4e:8e:64:9f:b7:2f:9d:e1:14:10:58:e0:67:
2d:55:e8:2e:b6:fc:6c:81:9a:c8:61:9e:4d:bd:a1:
aa:db:62:5a:c1:27:86:d7:69:33:15:a5:b0:1d:0d:
96:6b:88:2e:5e:e2:b2:65:c6:c5:31:ef:e1:88:20:
0d:06:f1:45:26:cb:48:06:a5:45:db:04:98:9d:e8:
9d:c8:34:6b:b1:d3:42:ac:93:10:0d:52:3f:33:e2:
e6:38:f3:33:38:d3:a7:fe:76:e3:7a:1c:16:81:59:
ee:7f:27:21:57:ea:6a:ed:a8:c2:37:05:af:a7:50:
d6:e6:64:03:55:c9:e1:81:7b:e4:bb:8f:7c:ed:dc:
aa:e9:4e:50:1d:08:86:41:2b:e7:7a:f1:5e:5f:ef:
a4:73:46:80:ce:0e:22:bd:29:cc:86:22:a7:ac:d7:
32:01:dc:37:07:2f:cb:fb:09:b4:b1:83:9d:2b:c7:
8d:c0:63:9b:2f:c2:95:8b:9e:9b:e0:35:64:d5:df:
a7:0d:67:43:a3:05:e1:e6:b3:07:3a:e5:b1:0e:3d:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:22:E2:2A:6E:48:13:7B:B6:EC:5E:B1:BE:CA:66:91:79:6A:5D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ab:65:b5:20:68:a0:50:02:47:59:f4:94:61:bb:a1:4b:69:
ce:da:4d:b2:ee:7d:17:1e:a5:7e:a3:9d:9a:e1:87:d4:de:dd:
49:49:73:25:0c:bc:f3:bc:83:39:87:ab:9a:23:e6:1c:85:fd:
a8:f3:2b:3a:53:06:eb:41:98:57:6e:fc:e8:21:91:54:e7:f9:
e6:8f:e4:e3:b0:f4:4f:1c:a0:f1:3f:4c:fb:ac:26:b8:dc:58:
6e:81:3e:62:2e:a3:5c:bf:c7:6d:87:a5:3b:d8:77:d5:bf:ad:
71:95:7b:2d:36:ba:8e:4c:91:bc:b0:23:ed:ea:56:3e:07:9b:
9a:9e:2c:f1:18:72:1b:0f:54:a1:a1:24:ef:d3:ee:d2:b9:a1:
3c:9b:8a:db:5d:85:71:20:f6:d3:8c:7d:09:bb:4a:8e:a7:a9:
cd:5b:f9:0a:03:0b:62:fa:77:07:65:3f:7a:38:f0:1a:a3:f7:
06:3d:bb:f5:9e:d8:38:c7:25:62:3f:1e:57:f7:a8:ae:27:16:
87:00:fc:da:9b:07:38:9d:dc:bc:9e:01:3c:d8:9d:25:98:d6:
8c:63:bb:51:e0:22:56:d5:e4:02:48:2b:0d:42:df:00:6a:2e:
4e:ba:54:cc:2f:2f:00:e3:8a:fb:bf:da:6e:61:a3:3e:4e:ef:
bc:56:d1:bc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUfSY9EEGo0kM5QkOKuUyD2FQwYAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMTcxMzE5NDFaFw0yNzEwMTYxMzI0NDFaMDMxMTAvBgNV
BAMTKERFODAyMkUyMkE2RTQ4MTM3QkI2RUM1RUIxQkVDQTY2OTE3OTZBNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIz+bHD17qrM2T6QMFCBLVsKt
dWNSc1sH3sXkQI1sYTWj+toFm1lls/TluYGlTo5kn7cvneEUEFjgZy1V6C62/GyB
mshhnk29oarbYlrBJ4bXaTMVpbAdDZZriC5e4rJlxsUx7+GIIA0G8UUmy0gGpUXb
BJid6J3INGux00KskxANUj8z4uY48zM406f+duN6HBaBWe5/JyFX6mrtqMI3Ba+n
UNbmZANVyeGBe+S7j3zt3KrpTlAdCIZBK+d68V5f76RzRoDODiK9KcyGIqes1zIB
3DcHL8v7CbSxg50rx43AY5svwpWLnpvgNWTV36cNZ0OjBeHmswc65bEOPcxfAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQU3oAi4ipuSBN7tuxesb7KZpF5al0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzIyMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjePzAN
BgkqhkiG9w0BAQsFAAOCAQEAG6tltSBooFACR1n0lGG7oUtpztpNsu59Fx6lfqOd
muGH1N7dSUlzJQy887yDOYermiPmHIX9qPMrOlMG60GYV2786CGRVOf55o/k47D0
Txyg8T9M+6wmuNxYboE+Yi6jXL/HbYelO9h31b+tcZV7LTa6jkyRvLAj7epWPgeb
mp4s8RhyGw9UoaEk79Pu0rmhPJuK212FcSD204x9CbtKjqepzVv5CgMLYvp3B2U/
ejjwGqP3Bj279Z7YOMclYj8eV/eoricWhwD82psHOJ3cvJ4BPNidJZjWjGO7UeAi
VtXkAkgrDULfAGouTrpUzC8vAOOK+7/abmGjPk7vvFbRvA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:30 2026 by rpki-client