Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: /J4+zdr2ZyG+qbYuyFoyvkC7U4fvqT7w8Uyjp6os+co=
Subject key identifier: A8:12:B9:B2:8E:A7:67:EB:05:14:72:2E:5B:74:24:76:F7:91:F5:D0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3D8D0EB1ECA529B3C9EDFC7B0FA606EB14200EB2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3320.roa
Signing time: Tue 28 Jul 2026 00:02:02 +0000
ROA not before: Mon 27 Jul 2026 23:57:02 +0000
ROA not after: Tue 27 Jul 2027 00:02:02 +0000
asID: 3320
IP address blocks: 91.124.112.0/24 maxlen: 24
91.124.113.0/24 maxlen: 24
91.124.114.0/24 maxlen: 24
91.124.115.0/24 maxlen: 24
91.124.164.0/22 maxlen: 24
92.112.10.0/24 maxlen: 24
95.134.16.0/22 maxlen: 24
95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
95.134.178.0/24 maxlen: 24
95.134.180.0/24 maxlen: 24
95.134.192.0/24 maxlen: 24
95.134.205.0/24 maxlen: 24
95.134.224.0/22 maxlen: 24
95.134.233.0/24 maxlen: 24
95.135.44.0/22 maxlen: 24
95.135.76.0/24 maxlen: 24
95.135.77.0/24 maxlen: 24
95.135.78.0/24 maxlen: 24
95.135.79.0/24 maxlen: 24
95.135.88.0/22 maxlen: 24
178.92.85.0/24 maxlen: 24
178.92.88.0/24 maxlen: 24
178.92.93.0/24 maxlen: 24
178.92.106.0/24 maxlen: 24
178.92.172.0/22 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.19.0/24 maxlen: 24
178.93.31.0/24 maxlen: 24
178.93.35.0/24 maxlen: 24
178.93.59.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8d:0e:b1:ec:a5:29:b3:c9:ed:fc:7b:0f:a6:06:eb:14:20:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 27 23:57:02 2026 GMT
Not After : Jul 27 00:02:02 2027 GMT
Subject: CN=A812B9B28EA767EB0514722E5B742476F791F5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:c2:4b:ef:61:27:a1:bb:f8:8f:79:83:82:
26:30:71:94:ad:df:37:f4:b1:30:44:e7:dc:4e:77:
d1:d9:53:20:98:0f:70:94:cc:0f:bc:a0:cf:c9:35:
68:ef:ed:06:a6:6e:39:91:9d:5b:ef:e2:c4:30:3b:
65:93:03:e3:e1:07:8f:ae:0a:30:2b:56:21:ec:7f:
58:f0:39:71:f6:93:13:2f:b2:94:e4:4b:e7:57:f8:
23:25:f6:32:32:03:2c:28:2e:a5:b7:87:f8:f9:a7:
ee:b8:0a:8b:03:17:da:9c:9f:d8:3e:a7:5d:78:f4:
3d:d1:2c:5e:f3:c8:6a:7b:a4:fa:db:00:68:8d:86:
6e:eb:76:40:52:05:ac:52:74:b1:67:9b:91:fa:01:
07:d7:5b:49:27:34:0b:83:0b:98:9d:15:b1:88:86:
c4:cf:b1:c9:df:cf:dc:0d:cd:2f:4b:c1:67:4a:35:
91:4f:c4:e7:2f:62:4e:ca:83:5e:ea:09:4c:f6:76:
cd:34:3d:2f:b3:0a:22:79:ae:1c:5a:0a:ac:00:ba:
23:bf:9b:51:a3:58:13:db:b9:78:0e:b8:73:5e:b1:
61:a3:74:b0:36:46:29:c7:28:56:97:9a:f8:e3:60:
f8:5c:d9:38:41:64:fe:76:e3:a7:8c:46:7b:7d:e6:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:12:B9:B2:8E:A7:67:EB:05:14:72:2E:5B:74:24:76:F7:91:F5:D0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.112.0/22
91.124.164.0/22
92.112.10.0/24
95.134.16.0/22
95.134.61.0/24
95.134.112.0/24
95.134.178.0/24
95.134.180.0/24
95.134.192.0/24
95.134.205.0/24
95.134.224.0/22
95.134.233.0/24
95.135.44.0/22
95.135.76.0/22
95.135.88.0/22
178.92.85.0/24
178.92.88.0/24
178.92.93.0/24
178.92.106.0/24
178.92.172.0/22
178.92.199.0/24
178.92.207.0/24
178.93.19.0/24
178.93.31.0/24
178.93.35.0/24
178.93.59.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a0:d9:27:6f:51:c0:72:96:e7:8d:1c:15:11:2f:5c:c7:c7:
c1:ac:c7:c9:c9:7f:4c:22:b3:7d:3e:72:1e:fd:ee:68:6c:d5:
d2:a0:d3:f6:10:5f:34:cc:a0:58:cb:77:d0:0f:ce:f9:d4:c9:
38:af:07:bb:9a:bb:d4:4e:ff:a1:7a:57:01:cb:33:4a:b5:bd:
8f:b7:e7:e5:1a:fc:b4:02:5b:cb:13:e1:79:ff:54:06:4f:0d:
36:0d:7d:7f:5b:da:4d:44:0c:6c:15:80:54:9e:4e:dd:32:bc:
05:a5:4e:77:38:19:4f:f9:18:a5:fe:e5:d9:d9:4e:66:c1:9e:
48:ea:fe:9b:aa:a6:60:5f:df:8f:c8:58:17:6f:0d:3c:1c:07:
60:9a:a4:42:be:86:92:7a:83:d4:cb:99:08:cc:ba:42:e0:2d:
dd:76:a2:11:5d:a2:99:87:25:95:fb:81:4b:3f:cc:5b:4d:d8:
27:66:20:3f:a2:1a:3e:ca:bb:99:3b:7d:76:c3:30:cf:1a:bc:
75:13:84:46:e8:69:ea:b7:e4:00:fb:f2:b2:a5:fd:ce:28:cb:
8b:2d:8d:89:1a:30:b0:98:a9:16:38:e9:7a:f8:a4:d3:2c:65:
3f:db:92:f7:d2:f1:c6:12:00:0a:d9:f3:2a:07:a9:63:1d:b0:
4e:96:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:49:10 2026 by rpki-client