This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS3320.roa File: AS3320.roa (raw, json) Hash identifier: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs= Subject key identifier: 3D:5D:FF:5B:A6:2C:FA:54:13:59:E9:C6:CF:28:2D:B6:50:90:8A:36 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 75954DCB4CE8C7A7F927A4EA4583F43DB03B22B1 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS3320.roa Signing time: Tue 11 Nov 2025 16:45:50 +0000 ROA not before: Tue 11 Nov 2025 16:40:50 +0000 ROA not after: Tue 10 Nov 2026 16:45:50 +0000 asID: 3320 IP address blocks: 78.41.48.0/24 maxlen: 24 82.139.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:95:4d:cb:4c:e8:c7:a7:f9:27:a4:ea:45:83:f4:3d:b0:3b:22:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 11 16:40:50 2025 GMT Not After : Nov 10 16:45:50 2026 GMT Subject: CN=3D5DFF5BA62CFA541359E9C6CF282DB650908A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4a:78:7c:fe:4f:51:37:cc:e2:36:b9:e4:11: da:f9:88:46:61:e4:b0:52:e6:07:f6:8c:cb:0c:2b: 78:4a:a5:69:10:91:a6:00:d6:83:c9:31:d3:e2:3c: 35:46:52:b0:23:b4:ac:0a:24:a1:30:e4:5c:91:72: b4:82:ec:5f:8a:48:11:2b:c2:61:71:8e:da:65:74: 85:91:34:b1:cb:78:f1:6e:cb:15:5b:a1:b6:ca:38: 0c:8c:55:f7:34:1a:83:aa:1e:8e:44:2f:18:da:42: 39:b2:d6:41:b2:68:97:55:24:23:41:9a:8f:7d:65: a0:68:fd:2d:80:23:8a:b8:85:b7:d5:f3:05:a8:b8: 5f:f1:35:2f:24:b1:62:99:45:9f:c3:3f:ff:4b:19: 2d:0c:a9:c1:d7:c4:30:f0:1e:9f:7f:a0:91:9c:0b: 82:46:2d:49:6b:a6:92:ef:2a:3d:1a:ca:87:e4:fb: 3b:7a:b2:09:b6:60:7d:69:6f:e7:15:3d:06:c3:25: be:44:19:19:48:11:2b:dc:4c:a7:5c:b5:17:65:32: c3:f5:d7:b2:96:cf:08:41:fe:57:81:00:0f:d5:e6: a1:8d:e8:91:51:35:49:4b:ab:46:00:0c:42:02:ec: 75:ba:f9:e6:6d:19:9c:e7:49:af:0f:d8:7b:eb:6d: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:FF:5B:A6:2C:FA:54:13:59:E9:C6:CF:28:2D:B6:50:90:8A:36 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS3320.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.48.0/24 82.139.230.0/24 Signature Algorithm: sha256WithRSAEncryption 76:68:d2:87:a0:7c:b5:c1:d1:83:13:23:b9:e6:17:89:ba:0a: e8:6b:14:f4:ea:10:dd:ff:ca:fe:fe:bf:0e:88:ad:4b:52:88: aa:d0:86:bf:50:23:fb:62:ba:6c:82:f3:88:8d:f3:3a:84:c7: 40:aa:89:2a:2c:3c:9d:9e:53:3c:46:ac:b5:14:d7:58:99:fc: 61:47:6b:3d:5c:53:ca:71:34:31:ac:f2:ae:87:4b:6f:c8:56: 8a:5d:b5:74:8f:e6:94:0b:c9:7e:89:60:89:43:93:92:8d:29: f0:03:7b:63:02:5f:49:a9:a9:48:1a:ce:cb:3f:06:c0:63:39: fd:38:d6:30:f6:25:67:2a:03:7d:40:9a:ed:66:f5:14:ca:76: 3e:9d:8b:31:73:a0:ac:98:43:90:87:14:7e:87:f2:05:4c:06: d6:02:c5:07:9e:a1:24:aa:8c:d8:0e:42:29:68:00:28:6d:32: 74:43:94:c8:9e:f5:08:f4:df:0a:39:8c:b8:99:b0:81:b0:4f: 08:35:c1:c9:d7:e9:f1:70:ed:14:57:31:60:21:d8:e6:f8:a8: 41:c3:b5:e3:ba:02:2e:70:33:51:27:68:e3:53:b0:22:5f:f1: d6:8d:9e:19:10:b5:d2:d5:88:6e:38:6a:2b:b3:e4:2a:d4:12: f7:0a:b7:44 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUdZVNy0zox6f5J6TqRYP0PbA7IrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMTExNjQwNTBaFw0yNjExMTAxNjQ1NTBaMDMxMTAvBgNV BAMTKDNENURGRjVCQTYyQ0ZBNTQxMzU5RTlDNkNGMjgyREI2NTA5MDhBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Snh8/k9RN8ziNrnkEdr5iEZh 5LBS5gf2jMsMK3hKpWkQkaYA1oPJMdPiPDVGUrAjtKwKJKEw5FyRcrSC7F+KSBEr wmFxjtpldIWRNLHLePFuyxVbobbKOAyMVfc0GoOqHo5ELxjaQjmy1kGyaJdVJCNB mo99ZaBo/S2AI4q4hbfV8wWouF/xNS8ksWKZRZ/DP/9LGS0MqcHXxDDwHp9/oJGc C4JGLUlrppLvKj0ayofk+zt6sgm2YH1pb+cVPQbDJb5EGRlIESvcTKdctRdlMsP1 17KWzwhB/leBAA/V5qGN6JFRNUlLq0YADEIC7HW6+eZtGZznSa8P2Hvrbbm7AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUPV3/W6Ys+lQTWenGzygttlCQijYwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMzMyMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE4pMAME AFKL5jANBgkqhkiG9w0BAQsFAAOCAQEAdmjSh6B8tcHRgxMjueYXiboK6GsU9OoQ 3f/K/v6/DoitS1KIqtCGv1Aj+2K6bILziI3zOoTHQKqJKiw8nZ5TPEastRTXWJn8 YUdrPVxTynE0MazyrodLb8hWil21dI/mlAvJfolgiUOTko0p8AN7YwJfSampSBrO yz8GwGM5/TjWMPYlZyoDfUCa7Wb1FMp2Pp2LMXOgrJhDkIcUfofyBUwG1gLFB56h JKqM2A5CKWgAKG0ydEOUyJ71CPTfCjmMuJmwgbBPCDXBydfp8XDtFFcxYCHY5vio QcO147oCLnAzUSdo41OwIl/x1o2eGRC10tWIbjhqK7PkKtQS9wq3RA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:28 2025 by rpki-client