Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: efULVyXRETgxYKv1EgmragUZ6DzwvpaOzy2nsgdERJM=
Subject key identifier: 2A:E5:62:EB:E1:32:F9:27:9A:AC:D8:24:5B:E9:02:96:11:C7:DB:69
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 476762DF92220580076206034521778B71A39403
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Thu 29 Oct 2026 21:00:34 +0000
ROA not before: Thu 29 Oct 2026 20:55:34 +0000
ROA not after: Thu 28 Oct 2027 21:00:34 +0000
asID: 3320
IP address blocks: 2.216.252.0/22 maxlen: 24
51.146.22.0/24 maxlen: 24
51.146.74.0/24 maxlen: 24
51.146.105.0/24 maxlen: 24
51.146.120.0/24 maxlen: 24
51.146.121.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.194.240.0/24 maxlen: 24
51.241.18.0/24 maxlen: 24
51.241.40.0/24 maxlen: 24
51.241.41.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.108.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
51.241.219.0/24 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.168.0/24 maxlen: 24
78.105.177.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
94.116.16.0/22 maxlen: 24
94.116.20.0/22 maxlen: 24
94.118.72.0/24 maxlen: 24
94.118.75.0/24 maxlen: 24
94.118.205.0/24 maxlen: 24
94.118.216.0/24 maxlen: 24
94.194.20.0/22 maxlen: 24
94.194.60.0/22 maxlen: 24
94.194.128.0/22 maxlen: 24
94.194.244.0/22 maxlen: 24
176.25.128.0/22 maxlen: 24
188.220.11.0/24 maxlen: 24
188.220.20.0/24 maxlen: 24
188.220.36.0/24 maxlen: 24
188.220.92.0/24 maxlen: 24
188.220.102.0/24 maxlen: 24
188.220.109.0/24 maxlen: 24
188.220.125.0/24 maxlen: 24
188.220.128.0/24 maxlen: 24
188.220.133.0/24 maxlen: 24
188.220.200.0/24 maxlen: 24
188.220.204.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.16.0/24 maxlen: 24
188.221.41.0/24 maxlen: 24
188.221.47.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
188.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:67:62:df:92:22:05:80:07:62:06:03:45:21:77:8b:71:a3:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 20:55:34 2026 GMT
Not After : Oct 28 21:00:34 2027 GMT
Subject: CN=2AE562EBE132F9279AACD8245BE9029611C7DB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:8e:62:11:8c:e2:3b:ff:21:aa:be:67:64:
d3:09:83:46:a7:f0:61:1b:32:2e:96:a2:c2:fe:58:
1d:d5:37:62:88:d2:0d:a5:07:a1:77:dd:79:50:17:
58:bf:90:71:8f:82:a3:65:6f:62:73:ed:4e:bf:43:
4e:50:ba:54:25:1e:dd:4f:e4:f0:b1:71:68:73:b0:
10:3d:9f:ea:80:1f:54:6e:2a:f1:a8:5f:5b:69:29:
67:d9:b3:2a:3c:46:df:63:fc:12:ee:ce:df:3b:3f:
eb:96:74:92:c8:0c:4e:c4:c7:51:af:e3:d3:0b:7c:
ce:60:6c:33:17:d2:5a:70:00:c2:20:ff:26:22:12:
b7:73:85:b7:4c:86:6b:6a:44:f0:1a:17:6d:ab:de:
45:d1:26:c0:e6:3c:fe:2a:d9:20:9d:11:2c:f3:63:
fb:a8:dc:4d:e4:13:94:c9:75:be:dc:e9:36:68:b4:
e2:bc:fa:df:2f:d8:a4:96:07:7a:5c:61:b8:03:67:
23:d7:fe:43:05:fa:98:a1:33:34:6a:1c:7b:99:a3:
00:5a:75:84:cd:57:09:8f:98:94:7d:e4:a5:38:9b:
a4:8e:89:03:31:c9:3b:19:48:c3:08:ca:98:3f:6e:
83:89:43:4c:c3:cb:35:36:39:42:35:3e:2e:5b:e2:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:62:EB:E1:32:F9:27:9A:AC:D8:24:5B:E9:02:96:11:C7:DB:69
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.252.0/22
51.146.22.0/24
51.146.74.0/24
51.146.105.0/24
51.146.120.0/23
51.194.221.0/24
51.194.240.0/24
51.241.18.0/24
51.241.40.0/23
51.241.86.0/24
51.241.108.0/24
51.241.133.0/24
51.241.219.0/24
51.241.228.0/22
78.105.116.0/24
78.105.146.0/24
78.105.155.0/24
78.105.168.0/24
78.105.177.0/24
78.105.204.0/24
94.116.16.0/21
94.118.72.0/24
94.118.75.0/24
94.118.205.0/24
94.118.216.0/24
94.194.20.0/22
94.194.60.0/22
94.194.128.0/22
94.194.244.0/22
176.25.128.0/22
188.220.11.0/24
188.220.20.0/24
188.220.36.0/24
188.220.92.0/24
188.220.102.0/24
188.220.109.0/24
188.220.125.0/24
188.220.128.0/24
188.220.133.0/24
188.220.200.0/24
188.220.204.0/24
188.220.240.0/22
188.221.10.0/24
188.221.16.0/24
188.221.41.0/24
188.221.47.0/24
188.221.244.0/24
188.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2a:81:27:e1:69:85:fd:38:f2:f8:6e:77:f2:c7:81:34:84:
24:40:c3:3a:23:a0:c1:fd:4c:78:36:f8:01:9f:85:3c:3c:99:
b1:3f:a8:58:4c:63:34:9d:96:fb:1c:6b:b4:e9:1e:8c:5b:75:
9d:1a:0b:d7:8f:a0:c9:57:62:a3:b2:17:c8:0b:3e:7c:54:96:
bf:c4:b5:ac:d1:e5:37:2e:c0:78:a0:75:32:c6:5d:95:5f:7f:
64:64:87:b8:6b:fb:ae:86:4b:bf:8f:f9:2c:1a:c0:6d:f1:f5:
68:f9:3d:bf:ea:d6:27:8c:e7:22:dc:38:25:73:90:01:c2:ec:
51:0f:0d:1d:1f:05:31:64:98:20:d3:e9:56:6c:6f:bc:74:7f:
a4:d6:b6:24:ab:6d:b2:5a:19:3c:23:77:8a:e0:bf:c5:19:37:
4d:de:79:b8:aa:40:fb:46:db:5f:b6:eb:f5:a6:47:1f:fe:3d:
91:e3:56:0a:2a:79:1a:5b:55:f2:29:49:87:52:17:d4:3f:bb:
eb:ac:99:47:df:54:64:13:f0:c0:41:9b:b3:4d:a5:f3:f6:5d:
ac:1e:38:38:e5:d7:55:c4:ea:0c:10:c2:8a:ed:4b:fb:80:3d:
ee:cd:46:d5:3a:3a:e6:d4:49:61:11:f9:cd:c9:0a:5e:54:ac:
7c:da:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:18:37 2026 by rpki-client