Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: ZVJamzqgm3VfzGmOJVtQiPk5p3M6zvQtphRBMjitv1I=
Subject key identifier: C4:F0:27:B0:A3:B8:9C:D6:70:C9:13:5E:DD:14:DE:BC:12:C2:DE:DB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 366DCE933AD755E427E3820E5023328F91A72280
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
Signing time: Tue 08 Sep 2026 00:07:36 +0000
ROA not before: Tue 08 Sep 2026 00:02:36 +0000
ROA not after: Tue 07 Sep 2027 00:07:36 +0000
asID: 3320
IP address blocks: 82.21.184.0/24 maxlen: 24
82.22.105.0/24 maxlen: 24
82.22.108.0/24 maxlen: 24
82.22.191.0/24 maxlen: 24
82.22.194.0/24 maxlen: 24
82.23.228.0/24 maxlen: 24
82.24.14.0/24 maxlen: 24
82.24.30.0/24 maxlen: 24
82.24.55.0/24 maxlen: 24
82.24.78.0/24 maxlen: 24
82.24.109.0/24 maxlen: 24
82.24.114.0/24 maxlen: 24
82.24.125.0/24 maxlen: 24
82.25.24.0/24 maxlen: 24
82.25.133.0/24 maxlen: 24
82.25.191.0/24 maxlen: 24
82.26.70.0/24 maxlen: 24
82.26.100.0/24 maxlen: 24
82.26.108.0/24 maxlen: 24
82.26.128.0/24 maxlen: 24
82.26.135.0/24 maxlen: 24
82.26.161.0/24 maxlen: 24
82.26.168.0/24 maxlen: 24
82.27.22.0/24 maxlen: 24
82.27.198.0/24 maxlen: 24
82.29.23.0/24 maxlen: 24
82.29.29.0/24 maxlen: 24
82.29.65.0/24 maxlen: 24
82.29.120.0/24 maxlen: 24
82.38.102.0/24 maxlen: 24
82.38.111.0/24 maxlen: 24
82.38.133.0/24 maxlen: 24
82.38.220.0/24 maxlen: 24
82.38.221.0/24 maxlen: 24
82.38.222.0/24 maxlen: 24
82.39.102.0/24 maxlen: 24
82.39.254.0/24 maxlen: 24
82.39.255.0/24 maxlen: 24
82.40.21.0/24 maxlen: 24
82.41.143.0/24 maxlen: 24
82.41.158.0/24 maxlen: 24
82.41.244.0/24 maxlen: 24
82.47.14.0/24 maxlen: 24
82.47.15.0/24 maxlen: 24
82.47.16.0/24 maxlen: 24
82.47.27.0/24 maxlen: 24
82.47.59.0/24 maxlen: 24
82.47.104.0/24 maxlen: 24
82.47.117.0/24 maxlen: 24
82.47.147.0/24 maxlen: 24
82.47.220.0/24 maxlen: 24
84.75.154.0/24 maxlen: 24
84.75.172.0/24 maxlen: 24
84.75.196.0/24 maxlen: 24
84.75.200.0/24 maxlen: 24
84.75.206.0/24 maxlen: 24
84.75.209.0/24 maxlen: 24
84.75.218.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6d:ce:93:3a:d7:55:e4:27:e3:82:0e:50:23:32:8f:91:a7:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 00:02:36 2026 GMT
Not After : Sep 7 00:07:36 2027 GMT
Subject: CN=C4F027B0A3B89CD670C9135EDD14DEBC12C2DEDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:21:47:7f:d5:7f:44:4a:fa:d6:9f:32:f8:
21:9f:ff:cd:6f:9b:03:04:be:e3:73:64:3e:38:fa:
39:2c:a9:bb:ab:77:ff:c8:e8:b9:e4:0b:b6:c2:3f:
4b:f3:75:09:06:fd:ba:73:97:4d:f7:5b:0f:5a:27:
22:c4:b6:35:d4:43:bd:91:33:b9:a1:4c:f6:03:db:
37:d4:60:f9:ae:2f:00:3e:b3:0b:ab:49:ae:9f:63:
f0:48:6c:b1:86:c0:0a:bb:d3:8b:4c:20:39:46:c5:
f8:9d:a0:a4:33:56:c7:22:27:ea:0b:96:da:d6:87:
c3:bd:0d:4a:8a:31:c1:b4:ab:9c:3f:d5:78:f5:c2:
1c:fa:92:55:b5:29:de:39:13:15:0c:db:68:7e:bd:
85:b6:3c:36:79:d7:82:0c:7e:63:dd:ae:e0:1b:31:
c0:3f:1f:fb:4c:7b:9b:ce:72:b4:f4:6f:1b:c9:c8:
b6:7e:df:22:82:08:d1:6c:2a:b4:8a:1a:1b:4e:fb:
04:29:b4:71:25:2f:14:37:aa:df:05:cb:3b:04:7e:
a2:57:90:5e:7c:73:f0:6d:5f:81:38:ed:14:88:c3:
32:46:5a:44:cb:e5:25:e1:fc:3f:2a:c9:ed:4d:f9:
82:19:90:f0:9e:7d:55:72:f7:93:5a:af:de:13:9f:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:27:B0:A3:B8:9C:D6:70:C9:13:5E:DD:14:DE:BC:12:C2:DE:DB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.184.0/24
82.22.105.0/24
82.22.108.0/24
82.22.191.0/24
82.22.194.0/24
82.23.228.0/24
82.24.14.0/24
82.24.30.0/24
82.24.55.0/24
82.24.78.0/24
82.24.109.0/24
82.24.114.0/24
82.24.125.0/24
82.25.24.0/24
82.25.133.0/24
82.25.191.0/24
82.26.70.0/24
82.26.100.0/24
82.26.108.0/24
82.26.128.0/24
82.26.135.0/24
82.26.161.0/24
82.26.168.0/24
82.27.22.0/24
82.27.198.0/24
82.29.23.0/24
82.29.29.0/24
82.29.65.0/24
82.29.120.0/24
82.38.102.0/24
82.38.111.0/24
82.38.133.0/24
82.38.220.0-82.38.222.255
82.39.102.0/24
82.39.254.0/23
82.40.21.0/24
82.41.143.0/24
82.41.158.0/24
82.41.244.0/24
82.47.14.0-82.47.16.255
82.47.27.0/24
82.47.59.0/24
82.47.104.0/24
82.47.117.0/24
82.47.147.0/24
82.47.220.0/24
84.75.154.0/24
84.75.172.0/24
84.75.196.0/24
84.75.200.0/24
84.75.206.0/24
84.75.209.0/24
84.75.218.0/24
178.83.152.0/24
178.83.161.0/24
Signature Algorithm: sha256WithRSAEncryption
80:68:08:25:fd:20:cb:3e:8b:f4:a7:00:e9:40:6c:70:89:53:
bb:d1:8c:e5:1f:de:65:0a:dd:08:94:db:2a:59:98:78:13:b4:
81:b6:85:11:f0:96:7e:46:95:58:24:1d:99:fa:d5:e7:5e:f6:
41:c8:5f:e7:2b:44:91:bd:5f:93:80:63:0e:c6:24:3e:c5:31:
7c:ba:40:6a:05:6a:4e:11:0c:67:97:56:64:7d:b2:57:4b:1e:
4a:26:5c:e7:19:39:64:62:c5:3d:8b:3e:70:b0:1a:29:9c:58:
d2:2b:bd:b4:ea:e1:3a:df:7b:ee:40:bc:58:02:91:8c:f9:62:
94:8e:eb:a0:00:33:0d:56:ad:3c:a4:da:fb:a4:fd:de:12:6e:
4c:63:c3:31:b9:21:7b:ec:fb:33:f5:db:40:49:a4:a1:42:29:
5a:c6:21:35:d6:98:19:81:bb:79:52:60:92:60:cd:71:e5:a2:
80:86:a7:30:53:73:2e:ae:6e:7a:dd:ef:64:af:e6:76:f1:de:
55:cc:d2:20:4d:de:90:87:4e:0b:36:15:76:b9:79:4d:76:cb:
ac:f9:b8:9d:46:0d:67:4a:42:ec:db:fa:07:e6:61:58:cd:5e:
a0:92:75:9d:6c:cf:8b:2f:f5:a6:e0:62:d1:aa:9c:e8:8b:e9:
a4:f0:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:50:15 2026 by rpki-client