Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: yKcm5K79AFEmW3qi39mN3yF13cYmU1YT3/8U/al2Rz8=
Subject key identifier: 52:EE:82:27:81:19:9A:1E:2B:53:D3:11:9E:B6:D6:6D:88:02:AE:A2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EB8900A8705DF5BAC51A76624DD8C91BDD014E8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Mon 27 Jul 2026 14:52:00 +0000
ROA not before: Mon 27 Jul 2026 14:47:00 +0000
ROA not after: Mon 26 Jul 2027 14:52:00 +0000
asID: 3320
IP address blocks: 51.146.74.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
188.220.36.0/24 maxlen: 24
188.220.128.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b8:90:0a:87:05:df:5b:ac:51:a7:66:24:dd:8c:91:bd:d0:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 27 14:47:00 2026 GMT
Not After : Jul 26 14:52:00 2027 GMT
Subject: CN=52EE822781199A1E2B53D3119EB6D66D8802AEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:2b:d7:37:b9:f7:6d:bf:08:88:9c:47:25:
3b:cc:cd:74:a2:8e:b9:4b:81:35:64:e7:e4:90:4b:
bd:d8:8a:54:4f:18:20:d6:06:79:27:28:00:c6:aa:
d7:5e:4c:89:50:06:f7:00:28:e9:92:4a:d3:2c:85:
ab:c1:1a:f2:91:42:80:1c:d1:43:c0:b7:ae:dd:7e:
af:bd:a9:cb:90:8e:86:9f:fb:ff:0e:25:72:09:f0:
6b:ca:36:37:a8:74:96:2d:8b:1b:50:39:82:e5:71:
d9:c1:13:35:cf:35:49:3d:6e:de:e3:c1:c5:d9:0a:
b0:e6:b9:bc:91:e2:c7:f8:99:b9:e1:e8:2e:a3:d5:
76:40:6d:bf:e4:ac:23:17:43:b7:0a:8d:76:40:42:
e8:f9:15:5b:77:a8:9b:ec:80:1c:2d:0d:52:c5:d6:
9c:ae:4d:8b:2b:87:fd:83:b3:56:47:58:35:c9:c7:
b8:48:e8:92:4d:03:84:cb:d4:ed:ef:94:35:ba:06:
c7:d0:b4:b9:52:10:88:3b:8c:41:0a:1d:61:f6:2e:
4c:28:0f:ba:cb:8e:1f:94:a3:66:d4:5d:57:4f:6f:
8e:7f:ec:24:4d:a8:89:ce:3a:07:4c:0b:36:9a:d5:
08:70:6e:54:bc:98:d0:ff:6b:4b:b0:4a:33:2a:90:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:82:27:81:19:9A:1E:2B:53:D3:11:9E:B6:D6:6D:88:02:AE:A2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.74.0/24
51.194.221.0/24
51.241.86.0/24
51.241.228.0/22
78.105.116.0/24
78.105.146.0/24
78.105.204.0/24
188.220.36.0/24
188.220.128.0/24
188.220.240.0/22
188.221.10.0/24
188.221.244.0/24
Signature Algorithm: sha256WithRSAEncryption
10:24:8f:47:40:7f:7e:d1:03:b1:6c:43:0d:b8:80:1d:3c:80:
d9:81:51:54:37:b1:2e:bb:b6:7f:eb:3b:6d:b7:02:b9:56:56:
18:8d:8d:92:52:e0:f9:e4:3c:f7:ba:36:73:c4:c0:37:54:13:
b8:dc:95:1d:3a:6f:f4:c3:67:70:c9:b9:2b:12:ac:74:17:f3:
2c:65:ff:2f:e1:99:dc:06:3f:22:dc:2b:ee:24:df:cb:c0:8f:
cf:f9:ea:fe:e4:ff:cd:68:40:df:f8:e7:12:89:29:17:33:d5:
69:fd:a1:6f:11:81:3a:29:27:cf:48:94:ce:dd:2d:21:94:c9:
55:12:6d:57:49:96:92:6b:01:89:48:a4:c8:a3:02:09:ab:3e:
86:e3:60:4d:b0:40:22:c3:80:a8:cd:0b:c2:ce:46:29:94:ed:
e1:3a:e5:f3:4e:c4:d7:18:94:1d:b8:59:31:07:9b:66:98:7a:
6b:73:74:8a:95:4e:18:c5:9b:b9:74:b9:26:20:7c:56:58:ba:
61:1f:d5:28:f4:13:57:45:ea:2e:bc:f2:0b:6f:27:7a:6d:7a:
d3:56:4d:e5:e6:eb:2e:32:65:6b:28:4f:ef:c4:fb:46:14:96:
95:9e:27:ea:a1:32:02:54:7a:79:28:2d:d5:4f:86:b0:99:1e:
92:52:34:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:49:27 2026 by rpki-client