Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: bAr5P5+LlZ+FpBJgZns8uISJGjgg1Y8TQdryLJvWteU=
Subject key identifier: 7B:B8:DC:AE:A0:CE:86:BC:E5:E5:6B:AA:F2:EF:7C:B7:49:73:67:C9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5917A025E46460D0ABC1B8F8EC9B5903BA97D1FC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Sat 29 Aug 2026 18:39:48 +0000
ROA not before: Sat 29 Aug 2026 18:34:48 +0000
ROA not after: Sat 28 Aug 2027 18:39:48 +0000
asID: 3320
IP address blocks: 51.146.22.0/24 maxlen: 24
51.146.74.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.241.18.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.108.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
51.241.219.0/24 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.168.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
188.220.36.0/24 maxlen: 24
188.220.92.0/24 maxlen: 24
188.220.102.0/24 maxlen: 24
188.220.109.0/24 maxlen: 24
188.220.125.0/24 maxlen: 24
188.220.128.0/24 maxlen: 24
188.220.133.0/24 maxlen: 24
188.220.200.0/24 maxlen: 24
188.220.204.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.16.0/24 maxlen: 24
188.221.41.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:17:a0:25:e4:64:60:d0:ab:c1:b8:f8:ec:9b:59:03:ba:97:d1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 29 18:34:48 2026 GMT
Not After : Aug 28 18:39:48 2027 GMT
Subject: CN=7BB8DCAEA0CE86BCE5E56BAAF2EF7CB7497367C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:6b:0c:6e:e0:82:e3:3f:71:1e:c7:5e:d8:
e5:cb:fe:dd:6b:2e:54:32:c4:f0:a9:73:4d:99:34:
dd:d7:32:37:41:19:5d:01:67:7a:7c:d0:f1:8e:49:
05:29:c5:4c:7a:95:8c:a6:4c:18:c2:bc:b5:07:a2:
f8:fa:1c:66:42:c0:45:8d:c6:54:66:ef:de:bc:52:
93:0d:05:1a:4a:fb:be:7d:4e:95:57:3b:79:01:0f:
36:75:c6:79:99:12:8c:b1:8f:99:5f:3a:41:22:37:
b3:d7:bf:da:c1:be:0d:f0:54:0d:37:a8:b0:51:40:
12:3b:fb:d5:1f:67:e9:8e:3e:8e:88:3c:94:03:90:
0e:37:77:cb:bb:c3:30:87:94:0b:8a:48:d5:9b:2e:
72:2c:06:6e:a8:81:99:17:28:0a:0b:f3:2f:62:69:
40:39:e9:61:4b:cc:97:bb:e3:46:df:dc:bb:3a:33:
ff:ec:09:5d:3b:ef:db:a9:9f:93:f8:5e:17:e6:78:
aa:ef:8a:d1:56:66:41:97:bc:fb:8e:ac:f4:60:8a:
6a:30:57:94:55:3a:1d:0a:ad:1d:e5:f2:e8:46:06:
06:ce:f1:77:02:fe:48:03:8b:54:2d:37:d5:a2:6f:
be:46:7b:42:77:d7:84:31:d0:60:de:bd:03:12:3e:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:DC:AE:A0:CE:86:BC:E5:E5:6B:AA:F2:EF:7C:B7:49:73:67:C9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.22.0/24
51.146.74.0/24
51.194.221.0/24
51.241.18.0/24
51.241.86.0/24
51.241.108.0/24
51.241.133.0/24
51.241.219.0/24
51.241.228.0/22
78.105.116.0/24
78.105.146.0/24
78.105.155.0/24
78.105.168.0/24
78.105.204.0/24
188.220.36.0/24
188.220.92.0/24
188.220.102.0/24
188.220.109.0/24
188.220.125.0/24
188.220.128.0/24
188.220.133.0/24
188.220.200.0/24
188.220.204.0/24
188.220.240.0/22
188.221.10.0/24
188.221.16.0/24
188.221.41.0/24
188.221.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ca:4b:ed:3c:86:3e:b2:1c:44:84:9d:9d:02:10:63:2a:fa:
91:2e:b6:b0:b2:18:7a:6b:d3:00:3c:ec:27:a2:56:1e:48:a4:
3f:28:52:a2:fc:28:01:de:dc:66:41:35:c1:db:c4:71:76:0d:
50:3f:5e:76:58:3f:33:f1:04:7a:39:e3:03:21:38:c1:f1:8e:
54:4b:bf:35:a2:fa:e5:47:7e:0f:90:17:88:e4:55:7e:dd:79:
fd:61:a4:31:cd:0f:cf:9e:99:8b:fa:f2:f3:8e:4e:21:35:8d:
e2:fe:c9:27:dc:da:55:53:9b:84:f7:f3:f7:f0:ac:b0:e4:94:
9e:dd:a0:8d:10:79:44:65:ed:0d:16:5c:ff:2d:f1:27:85:f8:
95:e1:e8:aa:79:a9:33:7d:c8:2f:81:a1:c9:44:de:aa:90:5b:
4d:d6:1f:ee:d9:34:01:11:5c:a9:9b:46:17:e9:85:fe:88:76:
e9:3d:db:1e:67:93:b2:af:49:7e:fa:0d:b7:cf:db:64:1f:09:
b3:77:f7:93:90:87:bb:81:53:b6:cb:de:78:21:89:32:70:c1:
7e:f0:40:59:77:62:3f:44:3e:29:bb:2c:dc:35:79:d9:9a:b7:
b4:ae:9c:f8:1f:6c:62:3e:0c:51:ff:31:ce:e9:9e:b8:a7:05:
70:5d:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:07 2026 by rpki-client