Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
File: AS20326.roa (raw, json)
Hash identifier: wdpmGciEGQ5hhtB2WpIgcrCFJlI3T3z5Phx/+NFGv/A=
Subject key identifier: FB:AF:06:9B:3A:A1:1C:66:39:2D:F4:BA:EE:3C:91:00:1D:34:37:D9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7485C8F922E6F26E1EE610E25C90115CFF6E88F1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
Signing time: Mon 03 Aug 2026 00:05:02 +0000
ROA not before: Mon 03 Aug 2026 00:00:02 +0000
ROA not after: Mon 02 Aug 2027 00:05:02 +0000
asID: 20326
IP address blocks: 82.21.43.0/24 maxlen: 24
82.22.32.0/24 maxlen: 24
82.26.96.0/22 maxlen: 24
82.39.135.0/24 maxlen: 24
82.40.61.0/24 maxlen: 24
82.47.132.0/24 maxlen: 24
82.47.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:c8:f9:22:e6:f2:6e:1e:e6:10:e2:5c:90:11:5c:ff:6e:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 3 00:00:02 2026 GMT
Not After : Aug 2 00:05:02 2027 GMT
Subject: CN=FBAF069B3AA11C66392DF4BAEE3C91001D3437D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:82:7a:a8:48:14:1b:0f:c2:44:15:66:4f:
07:46:2c:68:0b:1c:e2:4f:fa:76:74:46:d0:5b:1a:
f7:ba:2f:0a:b7:0b:10:b8:d2:56:8a:4a:a1:36:ca:
19:6a:35:fb:96:5e:6d:c7:52:b0:e6:ad:50:1d:2e:
d8:a1:41:7d:e5:41:b8:ff:94:62:8c:6e:2c:07:e7:
86:95:4f:2f:93:0c:2e:73:7e:44:7b:af:d1:01:ec:
db:18:41:23:56:b8:8f:9b:7d:db:a4:c4:67:b9:09:
ba:32:db:19:93:c9:0e:d6:59:25:4a:1b:a2:78:d1:
1d:84:dd:d9:11:46:c3:02:ae:fc:a0:54:4f:63:27:
39:fd:ec:6b:c0:97:f8:a2:61:74:0c:ce:01:1b:99:
95:1c:79:30:44:36:c9:dc:4c:3e:ec:99:ce:f1:c1:
7a:93:e8:ef:85:32:3c:f8:22:d6:a5:00:99:16:00:
4e:af:89:2a:24:24:f9:2f:f5:3c:25:be:5e:16:50:
38:61:36:72:a1:88:a4:b0:45:d4:a9:35:f2:75:37:
59:76:1b:cf:6b:72:0d:0c:b6:e5:17:45:4a:00:20:
f4:6b:5e:57:4d:81:bb:3d:f3:4d:e0:1d:96:74:e6:
de:e1:2e:bb:33:b3:94:4e:07:ad:db:7f:a2:68:ce:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:06:9B:3A:A1:1C:66:39:2D:F4:BA:EE:3C:91:00:1D:34:37:D9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.43.0/24
82.22.32.0/24
82.26.96.0/22
82.39.135.0/24
82.40.61.0/24
82.47.132.0/24
82.47.232.0/21
Signature Algorithm: sha256WithRSAEncryption
92:37:6c:3c:76:7a:e7:30:6c:4b:22:1c:ee:6a:4e:aa:b0:0c:
57:e6:f5:a8:d7:ee:e9:3e:f5:6b:41:78:70:23:34:5b:6c:7d:
53:df:98:e8:e4:f1:47:cf:84:1a:ee:d8:d0:a7:3c:b3:bb:af:
6c:38:a5:4e:dd:e7:cf:85:a4:3a:6a:ae:70:34:56:a2:b2:4d:
8f:2e:a1:d6:f6:ad:16:76:53:50:62:18:d7:7b:e4:8c:da:67:
59:58:ca:2e:26:75:40:66:8e:94:c6:fd:6e:ef:37:2e:70:3e:
f8:65:c5:4c:ef:39:ec:e8:84:7b:dd:70:dc:89:0d:3d:92:0d:
f2:d5:4a:bc:ba:37:ac:f9:8c:7c:39:9d:40:50:b2:a9:fc:50:
c4:17:86:8d:c5:85:59:d1:5d:f9:41:5b:77:c7:95:10:aa:8e:
9c:69:3c:34:e2:4e:89:45:7f:4b:dc:89:c5:7d:5b:d5:78:a1:
2a:49:36:e6:d9:60:10:30:d3:06:85:a2:2f:1f:9f:e1:9a:59:
4c:6d:2f:91:9b:f0:68:3e:1e:58:e6:cd:05:fc:33:96:a2:51:
41:54:cd:6e:40:d0:ab:c5:bc:bd:83:41:d7:e2:6d:7b:46:64:
59:d8:4a:16:c7:cf:d9:af:d4:44:71:6b:3c:5d:67:30:c1:b1:
56:50:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:41 2026 by rpki-client