Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: opQcFdObwOxVAo066IcqENtU+w2X+OViaaL20mLNyTY=
Subject key identifier: 59:3F:08:D2:8A:C8:0A:2E:CE:0C:28:66:E2:36:85:A9:1B:1D:DB:22
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 11090B63859EBD6C9A24220486F60EB3EAD26F10
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Fri 13 Nov 2026 15:07:00 +0000
ROA not before: Fri 13 Nov 2026 15:02:00 +0000
ROA not after: Fri 12 Nov 2027 15:07:00 +0000
asID: 3320
IP address blocks: 2.216.252.0/22 maxlen: 24
51.146.22.0/24 maxlen: 24
51.146.74.0/24 maxlen: 24
51.146.105.0/24 maxlen: 24
51.146.120.0/24 maxlen: 24
51.146.121.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.194.240.0/24 maxlen: 24
51.241.18.0/24 maxlen: 24
51.241.40.0/24 maxlen: 24
51.241.41.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.108.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
51.241.219.0/24 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.168.0/24 maxlen: 24
78.105.177.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
94.116.16.0/22 maxlen: 24
94.116.20.0/22 maxlen: 24
94.118.4.0/24 maxlen: 24
94.118.51.0/24 maxlen: 24
94.118.72.0/24 maxlen: 24
94.118.75.0/24 maxlen: 24
94.118.205.0/24 maxlen: 24
94.118.216.0/24 maxlen: 24
94.194.20.0/22 maxlen: 24
94.194.60.0/22 maxlen: 24
94.194.128.0/22 maxlen: 24
94.194.244.0/22 maxlen: 24
176.25.128.0/22 maxlen: 24
188.220.11.0/24 maxlen: 24
188.220.20.0/24 maxlen: 24
188.220.36.0/24 maxlen: 24
188.220.92.0/24 maxlen: 24
188.220.102.0/24 maxlen: 24
188.220.109.0/24 maxlen: 24
188.220.125.0/24 maxlen: 24
188.220.128.0/24 maxlen: 24
188.220.133.0/24 maxlen: 24
188.220.200.0/24 maxlen: 24
188.220.204.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
188.220.250.0/24 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.16.0/24 maxlen: 24
188.221.41.0/24 maxlen: 24
188.221.47.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
188.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:09:0b:63:85:9e:bd:6c:9a:24:22:04:86:f6:0e:b3:ea:d2:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 13 15:02:00 2026 GMT
Not After : Nov 12 15:07:00 2027 GMT
Subject: CN=593F08D28AC80A2ECE0C2866E23685A91B1DDB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:aa:a1:fa:a0:4c:9d:8f:ba:3e:15:0f:87:
18:e6:e3:5d:d8:c7:6a:b4:68:08:28:9f:61:8a:db:
fd:23:3b:75:d2:ff:52:ff:9c:c0:56:de:7d:38:56:
de:08:d4:c6:15:0a:54:8a:29:f1:04:8d:f3:b4:c5:
aa:1f:f8:3a:95:51:46:84:3d:4f:0b:6e:37:52:5e:
f4:2c:b6:90:4f:6d:a1:bd:1b:93:ed:6a:64:5b:45:
1a:91:80:0a:57:01:cb:18:96:b1:c9:fd:3b:61:89:
2b:14:0b:7a:8d:c9:0d:6e:eb:1a:10:91:26:07:d3:
25:63:8b:bf:39:7b:1b:bd:24:e1:ee:6b:f6:df:d0:
30:22:04:1f:86:a1:50:06:15:93:16:dc:5a:e0:31:
0c:ce:78:5a:6d:47:97:76:12:c0:23:0e:d3:b7:a3:
8f:87:b1:df:26:94:d1:2c:50:b1:83:db:ff:eb:f4:
ff:0b:db:15:ea:fb:35:7d:f7:cd:6c:bf:53:87:76:
14:19:c6:8c:86:ad:2b:9b:a9:ac:51:51:5a:bb:be:
ac:fd:f8:af:4f:d6:a1:8a:78:d0:a7:f3:66:2d:8d:
59:85:fd:3d:9c:f8:dd:0b:d2:32:1b:e8:66:cf:0f:
eb:43:5f:60:39:72:56:ea:c3:18:40:ed:90:78:cb:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:08:D2:8A:C8:0A:2E:CE:0C:28:66:E2:36:85:A9:1B:1D:DB:22
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.252.0/22
51.146.22.0/24
51.146.74.0/24
51.146.105.0/24
51.146.120.0/23
51.194.221.0/24
51.194.240.0/24
51.241.18.0/24
51.241.40.0/23
51.241.86.0/24
51.241.108.0/24
51.241.133.0/24
51.241.219.0/24
51.241.228.0/22
78.105.116.0/24
78.105.146.0/24
78.105.155.0/24
78.105.168.0/24
78.105.177.0/24
78.105.204.0/24
94.116.16.0/21
94.118.4.0/24
94.118.51.0/24
94.118.72.0/24
94.118.75.0/24
94.118.205.0/24
94.118.216.0/24
94.194.20.0/22
94.194.60.0/22
94.194.128.0/22
94.194.244.0/22
176.25.128.0/22
188.220.11.0/24
188.220.20.0/24
188.220.36.0/24
188.220.92.0/24
188.220.102.0/24
188.220.109.0/24
188.220.125.0/24
188.220.128.0/24
188.220.133.0/24
188.220.200.0/24
188.220.204.0/24
188.220.240.0/22
188.220.250.0/24
188.221.10.0/24
188.221.16.0/24
188.221.41.0/24
188.221.47.0/24
188.221.244.0/24
188.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
64:60:57:61:af:ee:33:68:9b:17:e1:9c:03:26:4e:d1:f5:af:
0a:e5:a0:bf:19:0b:b2:15:8c:a0:67:69:3a:bd:24:99:e2:5c:
cc:b5:26:18:91:0f:0e:a8:c0:ea:b6:a9:4f:ee:c4:3f:53:5e:
b3:34:50:29:75:a7:e0:54:f0:d2:3a:d9:57:0e:ef:cc:33:03:
80:d7:e4:59:1b:5d:87:78:57:63:b6:ea:98:e9:e2:8a:85:0e:
45:9e:2d:b6:6b:b7:81:fd:39:12:eb:bf:ae:03:32:44:1b:83:
a2:cb:64:50:d0:a6:18:be:8f:0c:51:bf:55:56:45:f4:83:0e:
e1:dc:8a:92:a3:9e:b6:ac:c5:9d:49:51:b5:1f:78:3f:ce:fd:
26:52:be:2e:b6:7a:b1:24:3d:98:87:ae:6a:4c:d5:e9:ed:7e:
ea:86:a7:4e:ad:5b:92:ae:b7:ef:9c:f7:f0:3f:16:f4:c3:4a:
5c:cd:49:7d:82:7f:da:7e:08:6b:c4:fc:9d:1d:2b:59:18:48:
36:3f:84:d3:14:27:41:1e:fc:dd:34:5f:df:6a:28:b1:60:09:
e7:ed:94:1d:dd:6a:68:79:ff:47:89:46:41:9f:b4:63:78:26:
db:7a:ab:ed:8b:79:6d:47:f3:a2:1c:b9:25:9c:f9:a1:27:b1:
8b:03:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:22 2026 by rpki-client