Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: qbMnzvkaK1DkS+e+PEXiaGGmn76eMpCatLC+XKOQ2GE=
Subject key identifier: 16:AC:DD:1B:33:16:18:22:3C:7C:15:54:FA:79:7F:C2:C3:8C:8B:E5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3B11843B321714B607DB202B5FB891FBF0358A6A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Sun 05 Jul 2026 12:00:20 +0000
ROA not before: Sun 05 Jul 2026 11:55:20 +0000
ROA not after: Sun 04 Jul 2027 12:00:20 +0000
asID: 3320
IP address blocks: 51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:11:84:3b:32:17:14:b6:07:db:20:2b:5f:b8:91:fb:f0:35:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 5 11:55:20 2026 GMT
Not After : Jul 4 12:00:20 2027 GMT
Subject: CN=16ACDD1B331618223C7C1554FA797FC2C38C8BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:9b:63:f6:55:41:31:d7:5e:30:dc:6c:74:
af:12:89:da:d9:12:f6:8e:99:ec:12:3c:b2:a8:b2:
71:51:d7:7d:41:28:87:55:c6:79:7e:4b:9b:02:7a:
2d:55:a4:e9:73:89:4b:98:30:3f:78:b8:af:23:10:
80:a5:8c:d5:51:5a:a4:6d:65:90:6e:f6:9b:3c:26:
48:96:73:c7:54:43:06:f8:ea:9d:06:81:67:24:7c:
5e:31:14:31:ef:63:29:83:d1:f6:b0:10:3a:dc:84:
97:35:2c:a3:55:60:be:7c:68:2b:85:01:35:2f:c0:
71:07:e8:ff:19:59:03:17:12:57:d3:a1:f8:42:c7:
9c:a9:29:aa:8e:80:0d:3a:65:56:2b:8a:a5:ca:9f:
d9:94:fa:c9:f0:56:a1:52:2b:2a:7b:2a:b8:df:33:
02:bb:e4:d6:98:9c:c5:4b:eb:e6:ac:39:19:d1:95:
d3:65:f1:61:f2:0a:71:03:85:9d:56:c3:73:6a:74:
db:6d:b0:ad:77:4f:b9:66:7f:31:7b:08:f0:54:57:
cc:12:cb:ef:1c:c1:e8:ed:53:28:37:1b:34:2c:94:
9f:f8:52:b0:09:33:a5:53:c8:7f:ed:47:f8:0f:94:
d7:cd:91:84:ba:75:73:00:39:7e:dc:cc:bc:01:1e:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:DD:1B:33:16:18:22:3C:7C:15:54:FA:79:7F:C2:C3:8C:8B:E5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.228.0/22
78.105.116.0/24
188.220.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1d:62:08:40:cb:fa:3b:ff:fa:a7:63:e5:1d:95:02:3a:1c:
2b:54:a2:af:e5:87:5a:ff:ca:fe:df:e6:89:5c:33:70:52:dd:
ee:4b:cd:02:9c:bc:57:dd:c4:6c:52:28:cc:9b:e9:38:e0:99:
d5:fb:e3:b6:a2:d1:9c:33:49:9f:e8:67:9a:c8:53:7b:b1:73:
e7:a4:d0:9a:c3:aa:f1:4c:98:f7:c8:4f:8d:24:c0:be:06:b6:
12:27:9e:b5:67:a3:9b:43:1c:09:d0:0a:17:40:cf:71:4c:c0:
fa:ec:f6:71:0b:15:5f:79:71:59:67:39:0b:69:10:00:1e:70:
a2:27:01:7f:ff:f0:d0:50:38:36:fe:09:a2:97:20:26:d4:a2:
2e:85:ef:8d:19:99:9d:12:ec:28:2d:7a:36:22:1d:dc:22:9e:
71:57:c0:f9:90:8f:ff:0b:fc:f1:7d:94:ec:2b:a6:ee:e3:81:
40:5c:c7:af:3c:6a:81:f0:67:05:97:8d:d2:e1:d2:49:30:20:
f0:cf:7b:9f:49:a3:26:24:58:25:92:a7:98:89:87:a4:af:4d:
82:f4:48:08:2b:ac:22:60:10:79:f4:87:67:68:0d:0d:fb:5c:
4e:e3:67:18:bb:2f:81:bd:eb:a7:e2:45:ab:07:2f:0b:d1:95:
68:68:6f:70
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUOxGEOzIXFLYH2yArX7iR+/A1imowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDUxMTU1MjBaFw0yNzA3MDQxMjAwMjBaMDMxMTAvBgNV
BAMTKDE2QUNERDFCMzMxNjE4MjIzQzdDMTU1NEZBNzk3RkMyQzM4QzhCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjz5tj9lVBMddeMNxsdK8SidrZ
EvaOmewSPLKosnFR131BKIdVxnl+S5sCei1VpOlziUuYMD94uK8jEICljNVRWqRt
ZZBu9ps8JkiWc8dUQwb46p0GgWckfF4xFDHvYymD0fawEDrchJc1LKNVYL58aCuF
ATUvwHEH6P8ZWQMXElfTofhCx5ypKaqOgA06ZVYriqXKn9mU+snwVqFSKyp7Krjf
MwK75NaYnMVL6+asORnRldNl8WHyCnEDhZ1Ww3NqdNttsK13T7lmfzF7CPBUV8wS
y+8cwejtUyg3GzQslJ/4UrAJM6VTyH/tR/gPlNfNkYS6dXMAOX7czLwBHo6JAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUFqzdGzMWGCI8fBVU+nl/wsOMi+UwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzMyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAjPx5AME
AE5pdAMEArzc8DANBgkqhkiG9w0BAQsFAAOCAQEAox1iCEDL+jv/+qdj5R2VAjoc
K1Sir+WHWv/K/t/miVwzcFLd7kvNApy8V93EbFIozJvpOOCZ1fvjtqLRnDNJn+hn
mshTe7Fz56TQmsOq8UyY98hPjSTAvga2EieetWejm0McCdAKF0DPcUzA+uz2cQsV
X3lxWWc5C2kQAB5woicBf//w0FA4Nv4JopcgJtSiLoXvjRmZnRLsKC16NiId3CKe
cVfA+ZCP/wv88X2U7Cum7uOBQFzHrzxqgfBnBZeN0uHSSTAg8M97n0mjJiRYJZKn
mImHpK9NgvRICCusImAQefSHZ2gNDftcTuNnGLsvgb3rp+JFqwcvC9GVaGhvcA==
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:23 2026 by rpki-client