Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: 7tFH/lCUJiN0q7/wOoO3K+PJDo6X/HZ0OOyjvhe1HCI=
Subject key identifier: 3D:CB:96:1A:22:7F:56:FC:AC:4A:F6:B4:96:C1:1D:17:46:CD:68:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 55DA7CAE5E6F3E622DCA265283305A86FCA56D96
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
Signing time: Tue 28 Jul 2026 00:02:02 +0000
ROA not before: Mon 27 Jul 2026 23:57:02 +0000
ROA not after: Tue 27 Jul 2027 00:02:02 +0000
asID: 3320
IP address blocks: 82.21.184.0/24 maxlen: 24
82.22.105.0/24 maxlen: 24
82.22.108.0/24 maxlen: 24
82.22.191.0/24 maxlen: 24
82.22.194.0/24 maxlen: 24
82.23.168.0/24 maxlen: 24
82.23.228.0/24 maxlen: 24
82.24.14.0/24 maxlen: 24
82.24.30.0/24 maxlen: 24
82.24.55.0/24 maxlen: 24
82.24.78.0/24 maxlen: 24
82.24.109.0/24 maxlen: 24
82.24.114.0/24 maxlen: 24
82.24.125.0/24 maxlen: 24
82.25.24.0/24 maxlen: 24
82.25.133.0/24 maxlen: 24
82.25.191.0/24 maxlen: 24
82.25.197.0/24 maxlen: 24
82.25.202.0/24 maxlen: 24
82.26.70.0/24 maxlen: 24
82.26.100.0/24 maxlen: 24
82.26.108.0/24 maxlen: 24
82.26.111.0/24 maxlen: 24
82.26.123.0/24 maxlen: 24
82.26.128.0/24 maxlen: 24
82.26.135.0/24 maxlen: 24
82.26.161.0/24 maxlen: 24
82.26.168.0/24 maxlen: 24
82.27.10.0/24 maxlen: 24
82.27.22.0/24 maxlen: 24
82.27.198.0/24 maxlen: 24
82.29.23.0/24 maxlen: 24
82.29.29.0/24 maxlen: 24
82.29.65.0/24 maxlen: 24
82.29.120.0/24 maxlen: 24
82.38.102.0/24 maxlen: 24
82.38.111.0/24 maxlen: 24
82.38.133.0/24 maxlen: 24
82.38.220.0/24 maxlen: 24
82.38.221.0/24 maxlen: 24
82.38.222.0/24 maxlen: 24
82.39.102.0/24 maxlen: 24
82.39.254.0/24 maxlen: 24
82.39.255.0/24 maxlen: 24
82.40.21.0/24 maxlen: 24
82.41.143.0/24 maxlen: 24
82.41.158.0/24 maxlen: 24
82.41.244.0/24 maxlen: 24
82.47.14.0/24 maxlen: 24
82.47.15.0/24 maxlen: 24
82.47.16.0/24 maxlen: 24
82.47.27.0/24 maxlen: 24
82.47.59.0/24 maxlen: 24
82.47.104.0/24 maxlen: 24
82.47.117.0/24 maxlen: 24
82.47.147.0/24 maxlen: 24
82.47.220.0/24 maxlen: 24
84.75.154.0/24 maxlen: 24
84.75.172.0/24 maxlen: 24
84.75.196.0/24 maxlen: 24
84.75.200.0/24 maxlen: 24
84.75.206.0/24 maxlen: 24
84.75.209.0/24 maxlen: 24
84.75.218.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:da:7c:ae:5e:6f:3e:62:2d:ca:26:52:83:30:5a:86:fc:a5:6d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 23:57:02 2026 GMT
Not After : Jul 27 00:02:02 2027 GMT
Subject: CN=3DCB961A227F56FCAC4AF6B496C11D1746CD686F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:30:89:9e:32:04:e8:4c:fe:b8:d3:88:6d:
27:d9:a3:f5:f5:77:a6:b7:a0:e0:ab:83:e6:92:84:
2a:6a:8d:42:04:94:52:bd:24:e7:0a:d2:de:31:8a:
76:c3:d2:ae:33:7f:eb:22:ff:2d:c3:06:ef:ee:04:
99:34:fc:2f:9f:56:3d:78:16:5d:a6:dc:dc:54:c2:
52:09:35:f9:6b:c9:60:7d:f4:6f:2b:70:52:7b:47:
4b:06:1c:1f:6a:bc:9e:a7:b0:9f:2b:c8:de:b3:c0:
11:02:a3:3f:2a:b8:d4:de:ff:91:9a:ac:81:12:9b:
fa:6e:77:78:79:5c:3e:0d:12:57:22:90:6f:66:6b:
57:e9:8b:09:a1:81:47:95:e9:2e:09:11:e7:5e:b4:
28:ae:51:4d:23:a6:79:f6:ce:c4:45:2f:3a:d6:04:
3d:4a:e6:08:54:e1:3f:90:87:a4:26:8d:3d:ca:aa:
20:c0:98:ad:32:ee:6d:da:72:5a:b9:78:88:49:26:
e5:d0:32:fe:00:e5:f7:cc:f1:b1:e8:1c:7f:09:5e:
82:c7:57:43:09:da:58:bf:bf:b1:7d:d9:5a:94:44:
22:d6:0b:f5:93:40:ae:b8:e5:2f:75:ad:f2:a4:b7:
f4:4d:91:ca:c5:f3:a1:ea:4e:da:b0:f4:3c:4b:eb:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CB:96:1A:22:7F:56:FC:AC:4A:F6:B4:96:C1:1D:17:46:CD:68:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.184.0/24
82.22.105.0/24
82.22.108.0/24
82.22.191.0/24
82.22.194.0/24
82.23.168.0/24
82.23.228.0/24
82.24.14.0/24
82.24.30.0/24
82.24.55.0/24
82.24.78.0/24
82.24.109.0/24
82.24.114.0/24
82.24.125.0/24
82.25.24.0/24
82.25.133.0/24
82.25.191.0/24
82.25.197.0/24
82.25.202.0/24
82.26.70.0/24
82.26.100.0/24
82.26.108.0/24
82.26.111.0/24
82.26.123.0/24
82.26.128.0/24
82.26.135.0/24
82.26.161.0/24
82.26.168.0/24
82.27.10.0/24
82.27.22.0/24
82.27.198.0/24
82.29.23.0/24
82.29.29.0/24
82.29.65.0/24
82.29.120.0/24
82.38.102.0/24
82.38.111.0/24
82.38.133.0/24
82.38.220.0-82.38.222.255
82.39.102.0/24
82.39.254.0/23
82.40.21.0/24
82.41.143.0/24
82.41.158.0/24
82.41.244.0/24
82.47.14.0-82.47.16.255
82.47.27.0/24
82.47.59.0/24
82.47.104.0/24
82.47.117.0/24
82.47.147.0/24
82.47.220.0/24
84.75.154.0/24
84.75.172.0/24
84.75.196.0/24
84.75.200.0/24
84.75.206.0/24
84.75.209.0/24
84.75.218.0/24
178.83.152.0/24
178.83.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:50:de:74:52:d5:84:10:07:f6:eb:fe:14:8b:ed:3d:ed:c1:
62:f2:51:ca:5e:9a:d8:0a:aa:ff:9b:af:34:15:c1:7d:4b:08:
2d:f1:bc:8f:74:cb:92:7e:b6:55:29:22:4b:18:1f:8f:d6:c9:
53:05:9e:ce:a1:97:45:e8:f9:22:b0:51:74:84:be:e7:6f:15:
16:fb:2c:31:53:43:d6:3a:81:6d:b7:92:cc:35:1a:73:93:49:
14:bd:3d:08:a6:6a:01:73:d7:7c:d0:2b:d2:8c:e4:50:75:81:
aa:1b:91:36:c6:54:71:b9:bb:da:bf:59:6b:23:d1:11:37:45:
a9:1a:50:47:2a:a1:a1:66:37:fe:0a:c3:23:4c:0d:5a:89:36:
48:4d:d9:51:6c:0a:37:da:fb:f8:36:59:09:56:bb:63:6d:4c:
c8:22:f5:f4:c8:f8:7f:1f:eb:8f:0a:c5:05:9c:e6:ec:28:20:
ce:50:66:32:79:da:1d:05:6f:81:6a:a0:25:0f:73:c2:4c:34:
00:07:64:d3:e5:7f:6a:e1:d2:ae:3d:28:7d:1c:b7:63:59:ca:
54:a2:85:99:16:ad:21:61:4c:19:2a:6e:08:72:a7:7b:5c:59:
22:c5:34:e9:0f:7e:b5:d6:b4:6a:b9:dc:1b:4c:04:1c:13:8b:
cb:21:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:35:07 2026 by rpki-client