Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: oriwSY2ZrLCcYoG1fv+K0+/MsIljkbU7bfKntIrGbAU=
Subject key identifier: C2:57:03:65:40:A3:6A:D6:DE:B0:0C:82:31:AA:0C:B1:66:40:19:F7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 647177CA5AD34254BF798DCC1E1A48F7A333157F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
Signing time: Sat 28 Feb 2026 00:00:26 +0000
ROA not before: Fri 27 Feb 2026 23:55:26 +0000
ROA not after: Sat 27 Feb 2027 00:00:26 +0000
asID: 3320
IP address blocks: 82.21.57.0/24 maxlen: 24
82.21.184.0/24 maxlen: 24
82.22.102.0/24 maxlen: 24
82.22.105.0/24 maxlen: 24
82.22.108.0/24 maxlen: 24
82.22.161.0/24 maxlen: 24
82.22.191.0/24 maxlen: 24
82.22.194.0/24 maxlen: 24
82.23.168.0/24 maxlen: 24
82.23.197.0/24 maxlen: 24
82.24.4.0/24 maxlen: 24
82.24.14.0/24 maxlen: 24
82.24.21.0/24 maxlen: 24
82.24.30.0/24 maxlen: 24
82.24.41.0/24 maxlen: 24
82.24.52.0/24 maxlen: 24
82.24.55.0/24 maxlen: 24
82.24.72.0/24 maxlen: 24
82.24.78.0/24 maxlen: 24
82.24.109.0/24 maxlen: 24
82.24.114.0/24 maxlen: 24
82.24.125.0/24 maxlen: 24
82.24.190.0/24 maxlen: 24
82.24.203.0/24 maxlen: 24
82.25.4.0/24 maxlen: 24
82.25.5.0/24 maxlen: 24
82.25.6.0/24 maxlen: 24
82.25.7.0/24 maxlen: 24
82.25.9.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.16.0/24 maxlen: 24
82.25.133.0/24 maxlen: 24
82.25.138.0/24 maxlen: 24
82.25.140.0/24 maxlen: 24
82.25.191.0/24 maxlen: 24
82.25.197.0/24 maxlen: 24
82.25.202.0/24 maxlen: 24
82.26.70.0/24 maxlen: 24
82.26.100.0/24 maxlen: 24
82.26.108.0/24 maxlen: 24
82.26.111.0/24 maxlen: 24
82.26.123.0/24 maxlen: 24
82.26.128.0/24 maxlen: 24
82.26.135.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.161.0/24 maxlen: 24
82.26.168.0/24 maxlen: 24
82.26.197.0/24 maxlen: 24
82.27.10.0/24 maxlen: 24
82.27.22.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.27.119.0/24 maxlen: 24
82.27.198.0/24 maxlen: 24
82.29.23.0/24 maxlen: 24
82.29.29.0/24 maxlen: 24
82.29.65.0/24 maxlen: 24
82.29.120.0/24 maxlen: 24
82.29.121.0/24 maxlen: 24
82.38.220.0/24 maxlen: 24
82.38.221.0/24 maxlen: 24
82.38.222.0/24 maxlen: 24
82.39.251.0/24 maxlen: 24
82.39.254.0/24 maxlen: 24
82.39.255.0/24 maxlen: 24
82.41.244.0/24 maxlen: 24
82.41.245.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:71:77:ca:5a:d3:42:54:bf:79:8d:cc:1e:1a:48:f7:a3:33:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 27 23:55:26 2026 GMT
Not After : Feb 27 00:00:26 2027 GMT
Subject: CN=C257036540A36AD6DEB00C8231AA0CB1664019F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:e7:0d:4f:dc:98:4e:86:96:4e:c1:1d:eb:
ba:49:c8:f5:39:7e:06:d0:ad:a8:ca:f6:56:ab:ad:
16:1a:6a:f0:d7:91:d4:3b:3c:85:10:ea:ab:9f:21:
3b:d7:ce:48:4c:10:46:16:44:e6:f6:20:47:cd:76:
60:0a:90:dc:b2:39:19:f8:fd:4e:3c:f8:a4:e9:57:
75:d9:d7:1f:6a:bc:20:4e:46:8b:f0:f3:0e:e4:60:
c1:84:e2:33:27:91:b9:94:1f:e3:76:49:43:d9:dc:
e7:58:7a:7d:83:cb:c6:e7:1b:33:b7:b2:12:67:fc:
01:6d:d9:f8:55:86:c4:c3:f7:45:5e:79:ac:c9:1b:
44:6b:34:72:0c:39:07:79:60:b6:58:fb:f7:e8:79:
ec:c9:1e:c1:b3:0c:45:e6:75:d9:7e:59:8d:85:3e:
c7:bb:b0:42:0e:95:3d:ab:c3:e1:bc:75:ac:de:3f:
af:92:fb:5c:f4:74:48:18:14:4d:3f:95:f5:f3:3a:
6e:9f:14:f6:f7:31:e2:97:e8:6b:d8:5f:77:76:a6:
60:6e:e2:45:e2:a4:92:a6:09:0e:23:64:f7:5c:3a:
fe:ee:f6:d5:74:bd:bf:33:d3:be:c1:4f:5f:58:e6:
67:4b:ae:b5:6f:46:32:e6:8e:05:20:8a:46:5f:2f:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:03:65:40:A3:6A:D6:DE:B0:0C:82:31:AA:0C:B1:66:40:19:F7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.21.184.0/24
82.22.102.0/24
82.22.105.0/24
82.22.108.0/24
82.22.161.0/24
82.22.191.0/24
82.22.194.0/24
82.23.168.0/24
82.23.197.0/24
82.24.4.0/24
82.24.14.0/24
82.24.21.0/24
82.24.30.0/24
82.24.41.0/24
82.24.52.0/24
82.24.55.0/24
82.24.72.0/24
82.24.78.0/24
82.24.109.0/24
82.24.114.0/24
82.24.125.0/24
82.24.190.0/24
82.24.203.0/24
82.25.4.0/22
82.25.9.0/24
82.25.14.0/24
82.25.16.0/24
82.25.133.0/24
82.25.138.0/24
82.25.140.0/24
82.25.191.0/24
82.25.197.0/24
82.25.202.0/24
82.26.70.0/24
82.26.100.0/24
82.26.108.0/24
82.26.111.0/24
82.26.123.0/24
82.26.128.0/24
82.26.135.0/24
82.26.141.0/24
82.26.161.0/24
82.26.168.0/24
82.26.197.0/24
82.27.10.0/24
82.27.22.0/24
82.27.105.0/24
82.27.119.0/24
82.27.198.0/24
82.29.23.0/24
82.29.29.0/24
82.29.65.0/24
82.29.120.0/23
82.38.220.0-82.38.222.255
82.39.251.0/24
82.39.254.0/23
82.41.244.0/23
178.83.152.0/24
178.83.161.0/24
Signature Algorithm: sha256WithRSAEncryption
74:eb:51:34:c7:05:f7:bd:bc:7d:9e:d6:2a:60:65:99:82:41:
d9:25:1e:40:24:dc:43:a7:63:3c:8e:3c:fa:26:96:22:0a:85:
e6:17:b9:ba:47:66:79:81:e5:f1:c1:c4:f9:76:3b:d8:84:b7:
f6:47:b1:40:28:b3:2b:b6:74:41:cb:99:e7:98:f3:8f:f8:23:
d9:1d:c6:a1:55:5c:47:84:d0:42:46:26:96:30:19:05:48:f8:
e1:b3:16:14:bb:2c:fc:36:4c:2b:f5:7d:a9:60:a7:11:3f:21:
3f:2f:88:66:5f:36:04:00:44:97:ad:fc:65:d4:f6:2c:39:3e:
95:66:2e:f4:2b:70:58:db:eb:3c:4c:bd:86:39:4e:9f:88:1a:
89:fb:42:3d:c4:82:78:13:06:a8:38:5f:e9:7c:6a:6e:a2:cc:
3c:25:2e:aa:ff:df:16:8e:6a:39:bd:97:7c:ce:42:7c:41:31:
47:ca:d9:a1:3d:27:55:dc:d4:92:7e:ed:ad:81:7d:62:a6:e9:
00:87:97:2f:6e:72:ed:c3:c5:ff:2d:14:75:27:bc:dd:7c:3c:
4d:3a:5a:61:28:70:1b:bf:84:f7:95:54:8c:61:ba:01:dd:45:
f4:65:ac:b6:ce:c7:fa:31:7f:65:2d:d5:5b:a4:66:8a:ce:9a:
92:60:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:33 2026 by rpki-client