Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: y0AvCQD/zYmsMUnoW223gyWk9Wbm4SNwswBmwJw8JOk=
Subject key identifier: F9:CA:CB:F6:82:1D:D9:3E:91:0E:86:53:BD:26:88:C6:7C:33:AE:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C8D63B4CDC25957B38EFEC125F20343CD697BD3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
Signing time: Mon 13 Apr 2026 04:13:02 +0000
ROA not before: Mon 13 Apr 2026 04:08:02 +0000
ROA not after: Mon 12 Apr 2027 04:13:02 +0000
asID: 3320
IP address blocks: 82.21.57.0/24 maxlen: 24
82.21.184.0/24 maxlen: 24
82.22.4.0/24 maxlen: 24
82.22.102.0/24 maxlen: 24
82.22.105.0/24 maxlen: 24
82.22.108.0/24 maxlen: 24
82.22.161.0/24 maxlen: 24
82.22.191.0/24 maxlen: 24
82.22.194.0/24 maxlen: 24
82.23.168.0/24 maxlen: 24
82.23.197.0/24 maxlen: 24
82.24.4.0/24 maxlen: 24
82.24.14.0/24 maxlen: 24
82.24.21.0/24 maxlen: 24
82.24.30.0/24 maxlen: 24
82.24.41.0/24 maxlen: 24
82.24.52.0/24 maxlen: 24
82.24.55.0/24 maxlen: 24
82.24.72.0/24 maxlen: 24
82.24.78.0/24 maxlen: 24
82.24.109.0/24 maxlen: 24
82.24.114.0/24 maxlen: 24
82.24.125.0/24 maxlen: 24
82.24.190.0/24 maxlen: 24
82.24.203.0/24 maxlen: 24
82.25.4.0/24 maxlen: 24
82.25.5.0/24 maxlen: 24
82.25.6.0/24 maxlen: 24
82.25.7.0/24 maxlen: 24
82.25.9.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.16.0/24 maxlen: 24
82.25.24.0/24 maxlen: 24
82.25.133.0/24 maxlen: 24
82.25.138.0/24 maxlen: 24
82.25.140.0/24 maxlen: 24
82.25.191.0/24 maxlen: 24
82.25.197.0/24 maxlen: 24
82.25.202.0/24 maxlen: 24
82.26.70.0/24 maxlen: 24
82.26.100.0/24 maxlen: 24
82.26.108.0/24 maxlen: 24
82.26.111.0/24 maxlen: 24
82.26.123.0/24 maxlen: 24
82.26.128.0/24 maxlen: 24
82.26.135.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.161.0/24 maxlen: 24
82.26.168.0/24 maxlen: 24
82.26.197.0/24 maxlen: 24
82.27.10.0/24 maxlen: 24
82.27.22.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.27.119.0/24 maxlen: 24
82.27.198.0/24 maxlen: 24
82.29.23.0/24 maxlen: 24
82.29.29.0/24 maxlen: 24
82.29.65.0/24 maxlen: 24
82.29.120.0/24 maxlen: 24
82.29.121.0/24 maxlen: 24
82.38.102.0/24 maxlen: 24
82.38.111.0/24 maxlen: 24
82.38.133.0/24 maxlen: 24
82.38.147.0/24 maxlen: 24
82.38.150.0/24 maxlen: 24
82.38.220.0/24 maxlen: 24
82.38.221.0/24 maxlen: 24
82.38.222.0/24 maxlen: 24
82.39.102.0/24 maxlen: 24
82.39.103.0/24 maxlen: 24
82.39.251.0/24 maxlen: 24
82.39.254.0/24 maxlen: 24
82.39.255.0/24 maxlen: 24
82.40.21.0/24 maxlen: 24
82.41.143.0/24 maxlen: 24
82.41.158.0/24 maxlen: 24
82.41.244.0/24 maxlen: 24
82.41.245.0/24 maxlen: 24
82.47.14.0/24 maxlen: 24
82.47.15.0/24 maxlen: 24
82.47.16.0/24 maxlen: 24
82.47.27.0/24 maxlen: 24
82.47.59.0/24 maxlen: 24
82.47.104.0/24 maxlen: 24
82.47.117.0/24 maxlen: 24
82.47.147.0/24 maxlen: 24
82.47.220.0/24 maxlen: 24
84.75.154.0/24 maxlen: 24
84.75.172.0/24 maxlen: 24
84.75.196.0/24 maxlen: 24
84.75.200.0/24 maxlen: 24
84.75.206.0/24 maxlen: 24
84.75.209.0/24 maxlen: 24
84.75.218.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8d:63:b4:cd:c2:59:57:b3:8e:fe:c1:25:f2:03:43:cd:69:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 13 04:08:02 2026 GMT
Not After : Apr 12 04:13:02 2027 GMT
Subject: CN=F9CACBF6821DD93E910E8653BD2688C67C33AE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:16:9d:05:82:fa:dc:df:25:5e:11:56:49:
e9:43:15:9c:99:9b:44:a8:8c:57:1d:b1:90:21:07:
20:47:d4:3d:4d:36:97:36:6f:96:24:27:1f:67:5a:
8e:40:35:ce:35:4d:f7:e2:b2:2b:9e:00:6c:d7:d5:
91:4e:c9:47:3e:8b:9e:dd:d0:b2:57:f2:76:b9:2f:
2e:05:15:33:84:dc:c7:e1:71:1c:92:02:03:56:32:
e0:96:e0:16:50:8d:de:b2:07:ed:c3:db:51:4a:07:
fb:b5:cf:99:6d:ae:48:f7:51:cf:ee:40:e2:99:c1:
58:db:74:2f:3e:a1:55:0a:05:ac:72:a5:c7:8d:54:
ba:ab:81:48:dc:e5:ff:f2:7b:07:c2:65:51:fc:7d:
06:7e:82:cc:6d:f4:47:7d:9b:12:0e:af:0e:57:86:
79:3e:4d:6c:67:4e:a1:20:5f:b3:e2:f7:cf:ef:2d:
a6:12:d3:a3:10:3a:84:d1:80:c7:e2:a4:16:2e:5c:
6d:96:96:e3:e3:a0:6e:72:55:3e:ba:55:f3:3c:eb:
6e:2f:b9:32:6c:94:70:14:ef:ed:0a:6c:4a:21:6c:
8d:76:f0:17:12:f6:60:5e:dc:db:41:59:bb:e5:ae:
68:54:0b:0c:5e:d4:99:37:30:31:16:89:ab:9d:b7:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:CB:F6:82:1D:D9:3E:91:0E:86:53:BD:26:88:C6:7C:33:AE:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.21.184.0/24
82.22.4.0/24
82.22.102.0/24
82.22.105.0/24
82.22.108.0/24
82.22.161.0/24
82.22.191.0/24
82.22.194.0/24
82.23.168.0/24
82.23.197.0/24
82.24.4.0/24
82.24.14.0/24
82.24.21.0/24
82.24.30.0/24
82.24.41.0/24
82.24.52.0/24
82.24.55.0/24
82.24.72.0/24
82.24.78.0/24
82.24.109.0/24
82.24.114.0/24
82.24.125.0/24
82.24.190.0/24
82.24.203.0/24
82.25.4.0/22
82.25.9.0/24
82.25.14.0/24
82.25.16.0/24
82.25.24.0/24
82.25.133.0/24
82.25.138.0/24
82.25.140.0/24
82.25.191.0/24
82.25.197.0/24
82.25.202.0/24
82.26.70.0/24
82.26.100.0/24
82.26.108.0/24
82.26.111.0/24
82.26.123.0/24
82.26.128.0/24
82.26.135.0/24
82.26.141.0/24
82.26.161.0/24
82.26.168.0/24
82.26.197.0/24
82.27.10.0/24
82.27.22.0/24
82.27.105.0/24
82.27.119.0/24
82.27.198.0/24
82.29.23.0/24
82.29.29.0/24
82.29.65.0/24
82.29.120.0/23
82.38.102.0/24
82.38.111.0/24
82.38.133.0/24
82.38.147.0/24
82.38.150.0/24
82.38.220.0-82.38.222.255
82.39.102.0/23
82.39.251.0/24
82.39.254.0/23
82.40.21.0/24
82.41.143.0/24
82.41.158.0/24
82.41.244.0/23
82.47.14.0-82.47.16.255
82.47.27.0/24
82.47.59.0/24
82.47.104.0/24
82.47.117.0/24
82.47.147.0/24
82.47.220.0/24
84.75.154.0/24
84.75.172.0/24
84.75.196.0/24
84.75.200.0/24
84.75.206.0/24
84.75.209.0/24
84.75.218.0/24
178.83.152.0/24
178.83.161.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7b:70:b8:45:b7:b9:9a:d7:dc:8d:65:16:2f:94:01:74:a1:
97:fa:52:f8:52:cc:9f:b4:2a:1e:44:1d:21:ee:80:8e:d4:ef:
e2:14:78:a5:37:91:dd:e9:6d:13:87:1d:68:e5:dd:0d:1c:e5:
75:c5:01:b2:6b:b7:4e:57:60:05:0d:ee:ec:22:97:e3:bb:d9:
1e:f3:0e:b0:0e:4e:9f:41:50:f5:ca:7d:07:e1:f3:7a:d7:57:
f0:a1:b9:eb:cf:38:b8:7e:f5:c7:7b:ba:5d:18:b2:5c:4b:d0:
4e:97:39:30:db:dd:97:88:bc:2f:87:82:48:18:f2:5b:c9:7a:
80:e8:a9:ff:1b:14:70:b3:e7:ac:90:e2:bc:0e:e4:dd:46:fc:
62:8d:55:86:7b:72:76:50:e8:9f:94:29:67:a6:5f:34:4b:8d:
86:60:56:b0:8e:84:07:3a:bd:69:e5:9d:86:7e:87:fa:b4:00:
10:cf:45:07:c7:c1:70:2d:e9:67:43:2e:09:95:f4:58:aa:02:
57:92:7c:0f:2a:cb:1d:d1:b8:89:87:a8:9b:c4:cd:55:f3:87:
b2:58:c7:83:a9:e6:4c:23:b9:cf:1b:d8:9b:19:85:5c:5b:28:
41:be:c3:c4:17:07:c7:1c:0f:a2:9a:83:93:57:cb:a3:f6:46:
8b:8d:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:41 2026 by rpki-client