Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: owCE3535kI+fHYJvI4K3o8DHZGGwzeA/JGyvNcaj72M=
Subject key identifier: B2:CA:61:62:5C:E9:0F:C1:F5:39:30:7B:36:DD:DA:AC:59:E0:EB:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 03AA29B4DADE114E7B234F2B2E90EA15FF1AB334
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
Signing time: Wed 14 Oct 2026 11:02:41 +0000
ROA not before: Wed 14 Oct 2026 10:57:41 +0000
ROA not after: Wed 13 Oct 2027 11:02:41 +0000
asID: 3320
IP address blocks: 82.21.184.0/24 maxlen: 24
82.22.105.0/24 maxlen: 24
82.22.108.0/24 maxlen: 24
82.22.191.0/24 maxlen: 24
82.22.194.0/24 maxlen: 24
82.23.228.0/24 maxlen: 24
82.24.14.0/24 maxlen: 24
82.24.30.0/24 maxlen: 24
82.24.55.0/24 maxlen: 24
82.24.78.0/24 maxlen: 24
82.24.109.0/24 maxlen: 24
82.24.114.0/24 maxlen: 24
82.24.125.0/24 maxlen: 24
82.25.24.0/24 maxlen: 24
82.25.133.0/24 maxlen: 24
82.25.191.0/24 maxlen: 24
82.26.70.0/24 maxlen: 24
82.26.100.0/24 maxlen: 24
82.26.108.0/24 maxlen: 24
82.26.128.0/24 maxlen: 24
82.26.135.0/24 maxlen: 24
82.26.161.0/24 maxlen: 24
82.26.168.0/24 maxlen: 24
82.27.22.0/24 maxlen: 24
82.27.198.0/24 maxlen: 24
82.29.23.0/24 maxlen: 24
82.29.29.0/24 maxlen: 24
82.29.65.0/24 maxlen: 24
82.29.120.0/24 maxlen: 24
82.38.102.0/24 maxlen: 24
82.38.111.0/24 maxlen: 24
82.38.133.0/24 maxlen: 24
82.38.220.0/24 maxlen: 24
82.38.221.0/24 maxlen: 24
82.38.222.0/24 maxlen: 24
82.39.102.0/24 maxlen: 24
82.39.254.0/24 maxlen: 24
82.39.255.0/24 maxlen: 24
82.40.21.0/24 maxlen: 24
82.41.143.0/24 maxlen: 24
82.41.158.0/24 maxlen: 24
82.41.244.0/24 maxlen: 24
82.47.14.0/24 maxlen: 24
82.47.15.0/24 maxlen: 24
82.47.16.0/24 maxlen: 24
82.47.27.0/24 maxlen: 24
82.47.59.0/24 maxlen: 24
82.47.104.0/24 maxlen: 24
82.47.117.0/24 maxlen: 24
82.47.147.0/24 maxlen: 24
82.47.220.0/24 maxlen: 24
84.75.154.0/24 maxlen: 24
84.75.172.0/24 maxlen: 24
84.75.196.0/24 maxlen: 24
84.75.200.0/24 maxlen: 24
84.75.206.0/24 maxlen: 24
84.75.209.0/24 maxlen: 24
84.75.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:aa:29:b4:da:de:11:4e:7b:23:4f:2b:2e:90:ea:15:ff:1a:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 10:57:41 2026 GMT
Not After : Oct 13 11:02:41 2027 GMT
Subject: CN=B2CA61625CE90FC1F539307B36DDDAAC59E0EBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:fe:c7:66:3f:4a:5b:46:6d:40:f3:d4:e2:
a3:a9:76:8d:eb:f0:46:b0:57:1f:64:7d:93:65:8f:
8c:6a:09:28:b3:17:4a:cd:04:af:12:3c:74:ae:19:
a5:e9:c8:72:6c:9c:31:c9:17:8a:ee:9f:58:c4:07:
eb:ea:a3:60:7c:ce:90:44:61:79:fa:3b:cc:fb:4d:
a7:09:fd:5b:ab:29:1e:8d:c0:ae:53:9b:b2:04:22:
f3:51:d1:35:d7:cb:81:25:cb:b1:d8:5f:fc:ef:8f:
b4:35:22:6c:71:1a:eb:a4:56:0e:02:ce:54:b8:ca:
d5:35:8f:3a:47:ad:2f:99:91:7e:a4:4f:23:ac:23:
3f:f3:15:38:0d:cf:e7:d0:60:d0:3f:03:04:7c:bb:
e1:08:d2:75:8d:02:d7:ca:24:20:15:c5:de:94:2a:
27:da:29:38:df:6c:8c:99:53:37:dc:11:ef:4d:25:
82:f9:95:54:66:c1:86:58:ca:c4:5a:55:7f:a3:31:
16:52:52:b3:1a:12:a2:9b:92:77:b7:e5:47:aa:d6:
0d:76:50:7a:2a:f2:e2:12:b6:25:eb:66:ee:f1:22:
fe:2a:c0:fb:58:42:bd:33:b9:45:af:20:1d:89:cc:
e9:ee:81:d5:fa:7e:1a:7b:59:88:76:94:1e:5a:bf:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CA:61:62:5C:E9:0F:C1:F5:39:30:7B:36:DD:DA:AC:59:E0:EB:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.184.0/24
82.22.105.0/24
82.22.108.0/24
82.22.191.0/24
82.22.194.0/24
82.23.228.0/24
82.24.14.0/24
82.24.30.0/24
82.24.55.0/24
82.24.78.0/24
82.24.109.0/24
82.24.114.0/24
82.24.125.0/24
82.25.24.0/24
82.25.133.0/24
82.25.191.0/24
82.26.70.0/24
82.26.100.0/24
82.26.108.0/24
82.26.128.0/24
82.26.135.0/24
82.26.161.0/24
82.26.168.0/24
82.27.22.0/24
82.27.198.0/24
82.29.23.0/24
82.29.29.0/24
82.29.65.0/24
82.29.120.0/24
82.38.102.0/24
82.38.111.0/24
82.38.133.0/24
82.38.220.0-82.38.222.255
82.39.102.0/24
82.39.254.0/23
82.40.21.0/24
82.41.143.0/24
82.41.158.0/24
82.41.244.0/24
82.47.14.0-82.47.16.255
82.47.27.0/24
82.47.59.0/24
82.47.104.0/24
82.47.117.0/24
82.47.147.0/24
82.47.220.0/24
84.75.154.0/24
84.75.172.0/24
84.75.196.0/24
84.75.200.0/24
84.75.206.0/24
84.75.209.0/24
84.75.218.0/24
Signature Algorithm: sha256WithRSAEncryption
83:74:a5:43:c9:1e:da:41:8e:e0:70:ed:ca:f3:58:5d:21:7a:
2e:af:b6:02:bf:df:75:fd:34:c1:33:87:3e:55:d1:7d:16:c1:
f2:8a:82:03:10:51:79:99:32:dd:34:86:d2:74:c9:b3:c2:7e:
b5:7b:7f:7f:f8:41:19:60:9f:36:cb:99:1c:63:2a:08:e9:46:
bb:3b:94:db:3b:0a:b2:34:4f:8f:02:d4:6e:f8:d9:cd:ce:d3:
a5:0e:91:a1:16:b0:8a:55:fd:7e:3f:7e:49:d5:5f:32:0e:20:
e2:6f:c1:96:05:c7:22:a5:37:40:76:91:be:61:0a:ad:12:fd:
63:12:89:28:3f:e0:48:fa:26:e9:4a:e7:79:cc:15:84:20:1c:
8c:76:20:db:b1:b7:b3:95:81:be:74:25:a2:79:a0:bb:b8:7b:
97:96:07:df:a3:fa:12:f6:8e:a0:ba:f0:bf:96:35:78:72:1a:
73:f6:ce:b0:a2:54:8f:0f:cf:cc:b8:99:dc:63:78:e8:85:2e:
e5:db:7c:ff:7a:0d:b1:4f:d3:da:b0:89:98:b7:c9:23:b7:51:
4a:1b:a1:61:9d:e6:75:40:9b:c8:f3:f8:d1:2a:63:5d:ff:57:
dd:0a:ce:aa:d4:a6:43:fe:f4:53:0a:e5:12:f1:d7:cc:64:75:
0c:70:7f:89
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUA6optNreEU57I08rLpDqFf8aszQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTQxMDU3NDFaFw0yNzEwMTMxMTAyNDFaMDMxMTAvBgNV
BAMTKEIyQ0E2MTYyNUNFOTBGQzFGNTM5MzA3QjM2REREQUFDNTlFMEVCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJ/7HZj9KW0ZtQPPU4qOpdo3r
8EawVx9kfZNlj4xqCSizF0rNBK8SPHSuGaXpyHJsnDHJF4run1jEB+vqo2B8zpBE
YXn6O8z7TacJ/VurKR6NwK5Tm7IEIvNR0TXXy4Ely7HYX/zvj7Q1ImxxGuukVg4C
zlS4ytU1jzpHrS+ZkX6kTyOsIz/zFTgNz+fQYNA/AwR8u+EI0nWNAtfKJCAVxd6U
KifaKTjfbIyZUzfcEe9NJYL5lVRmwYZYysRaVX+jMRZSUrMaEqKbkne35Ueq1g12
UHoq8uIStiXrZu7xIv4qwPtYQr0zuUWvIB2JzOnugdX6fhp7WYh2lB5avyvfAgMB
AAGjggNaMIIDVjAdBgNVHQ4EFgQUssphYlzpD8H1OTB7Nt3arFng6+0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzMyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAW8GCCsGAQUFBwEHAQH/BIIBXjCCAVowggFWBAIAATCC
AU4DBABSFbgDBABSFmkDBABSFmwDBABSFr8DBABSFsIDBABSF+QDBABSGA4DBABS
GB4DBABSGDcDBABSGE4DBABSGG0DBABSGHIDBABSGH0DBABSGRgDBABSGYUDBABS
Gb8DBABSGkYDBABSGmQDBABSGmwDBABSGoADBABSGocDBABSGqEDBABSGqgDBABS
GxYDBABSG8YDBABSHRcDBABSHR0DBABSHUEDBABSHXgDBABSJmYDBABSJm8DBABS
JoUwDAMEAlIm3AMEAFIm3gMEAFInZgMEAVIn/gMEAFIoFQMEAFIpjwMEAFIpngME
AFIp9DAMAwQBUi8OAwQAUi8QAwQAUi8bAwQAUi87AwQAUi9oAwQAUi91AwQAUi+T
AwQAUi/cAwQAVEuaAwQAVEusAwQAVEvEAwQAVEvIAwQAVEvOAwQAVEvRAwQAVEva
MA0GCSqGSIb3DQEBCwUAA4IBAQCDdKVDyR7aQY7gcO3K81hdIXour7YCv991/TTB
M4c+VdF9FsHyioIDEFF5mTLdNIbSdMmzwn61e39/+EEZYJ82y5kcYyoI6Ua7O5Tb
OwqyNE+PAtRu+NnNztOlDpGhFrCKVf1+P35J1V8yDiDib8GWBccipTdAdpG+YQqt
Ev1jEokoP+BI+ibpSud5zBWEIByMdiDbsbezlYG+dCWieaC7uHuXlgffo/oS9o6g
uvC/ljV4chpz9s6wolSPD8/MuJncY3johS7l23z/eg2xT9PasImYt8kjt1FKG6Fh
neZ1QJvI8/jRKmNd/1fdCs6q1KZD/vRTCuUS8dfMZHUMcH+J
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:52:49 2026 by rpki-client