Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
File: AS20326.roa (raw, json)
Hash identifier: FcIcTARXrhoN/9fWxkVVUGqXaAkbyE9vLY23Qz/R5nc=
Subject key identifier: 5F:92:35:AC:4D:FC:99:15:59:AA:BF:DF:4A:2A:AD:DF:DA:AC:91:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E03ABEEE79067AC7F82DCC5CA5BB516DB6A44B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
Signing time: Wed 25 Mar 2026 10:55:24 +0000
ROA not before: Wed 25 Mar 2026 10:50:24 +0000
ROA not after: Wed 24 Mar 2027 10:55:24 +0000
asID: 20326
IP address blocks: 82.21.43.0/24 maxlen: 24
82.21.125.0/24 maxlen: 24
82.22.124.0/23 maxlen: 23
82.22.160.0/24 maxlen: 24
82.25.13.0/24 maxlen: 24
82.26.96.0/22 maxlen: 24
82.39.135.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
82.39.232.0/23 maxlen: 24
82.40.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:03:ab:ee:e7:90:67:ac:7f:82:dc:c5:ca:5b:b5:16:db:6a:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 10:50:24 2026 GMT
Not After : Mar 24 10:55:24 2027 GMT
Subject: CN=5F9235AC4DFC991559AABFDF4A2AADDFDAAC9163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:0a:be:14:b9:84:5e:da:35:fb:e0:92:27:
09:16:7c:2c:a8:47:ed:69:03:fb:84:75:5b:f8:70:
99:d6:b5:cf:65:9f:97:53:00:b6:a9:99:87:ab:f8:
43:42:e8:3f:01:10:5a:77:d5:72:f1:4d:b4:51:bb:
9d:a4:03:5c:02:c7:94:2d:50:3f:a2:2e:9a:f6:0b:
a1:d1:25:29:64:98:46:13:c2:a4:48:a4:fa:f5:f4:
91:95:3c:ac:08:3c:f7:d6:40:b4:9f:a2:1a:81:73:
09:cd:1f:ce:b2:d6:0c:98:6a:ef:b7:97:de:37:3e:
16:5b:31:a2:bf:a6:0b:ec:18:df:16:e7:65:62:51:
bd:6a:a6:74:6e:bb:36:f6:80:a0:0c:e9:59:d4:14:
a6:61:3e:ca:a7:72:a8:d3:01:9c:e6:8a:94:12:62:
d4:e4:68:62:6a:96:3e:ab:48:a6:47:4b:6b:f4:1a:
72:29:45:e6:51:c9:a0:b2:de:cd:c3:0a:ce:56:f1:
e7:79:80:cd:eb:ac:1a:1a:d8:d2:94:83:8b:8b:8c:
03:f4:18:a8:1f:c7:1e:74:92:26:53:d2:b3:02:28:
b6:21:f2:bb:b5:c5:9c:72:40:53:8b:82:ae:02:0b:
b2:60:55:72:72:e1:e5:82:00:cb:09:c1:b3:cf:a3:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:35:AC:4D:FC:99:15:59:AA:BF:DF:4A:2A:AD:DF:DA:AC:91:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.43.0/24
82.21.125.0/24
82.22.124.0/23
82.22.160.0/24
82.25.13.0/24
82.26.96.0/22
82.39.135.0-82.39.136.255
82.39.232.0/23
82.40.61.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f0:8b:30:67:8f:90:c5:b3:5e:82:b7:41:91:2f:39:93:12:
78:f0:4b:1e:34:d2:fb:9d:6c:96:ca:75:06:8c:a2:f5:c8:92:
38:41:9c:63:00:2f:4d:9b:50:46:70:7c:6d:83:dc:4f:66:be:
66:e1:99:22:26:54:23:3e:34:02:51:af:8e:51:4d:94:be:67:
03:d0:7f:79:a0:0d:f3:f8:e7:86:e5:01:6f:72:0e:f3:05:26:
b7:35:b3:4b:bd:4f:95:c2:37:9c:24:91:cb:a5:14:e2:d4:1a:
13:c5:c6:4c:1b:59:24:af:7f:65:5c:ed:de:da:42:cb:9f:5c:
37:db:29:d6:0c:73:20:29:aa:5f:a6:01:23:26:05:0c:e8:a3:
f9:22:7b:18:cc:d5:1a:9f:74:15:fe:d5:01:48:be:95:8a:36:
51:82:8c:20:6c:c3:ed:ed:69:69:e5:45:dc:a8:52:74:c2:01:
c6:56:76:8a:f0:39:ee:ab:b9:26:9b:e3:d2:67:c4:d8:df:0f:
b1:ed:49:5b:62:24:03:24:57:3c:a9:b6:bd:4b:d0:e2:20:57:
01:a7:ed:52:8e:f0:2c:4e:4a:86:76:d4:63:94:21:f7:02:0b:
d8:3b:a0:1c:a1:f6:bb:07:fb:98:4b:90:17:46:92:12:65:18:
e8:eb:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:57 2026 by rpki-client