Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: fDGz7bmubpvmKBNfjhd3uGlCea3GHosYW7imKgVl7jM=
Subject key identifier: DF:65:92:06:7C:29:1E:14:BC:39:F2:F6:4C:4E:EB:17:2F:C0:3D:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1C333118EF7301A8B5BF2FFDDD17EB5FC87851B6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
Signing time: Sun 18 Oct 2026 21:46:07 +0000
ROA not before: Sun 18 Oct 2026 21:41:07 +0000
ROA not after: Sun 17 Oct 2027 21:46:07 +0000
asID: 3320
IP address blocks: 51.146.22.0/24 maxlen: 24
51.146.74.0/24 maxlen: 24
51.146.105.0/24 maxlen: 24
51.146.120.0/24 maxlen: 24
51.146.121.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.194.240.0/24 maxlen: 24
51.241.18.0/24 maxlen: 24
51.241.40.0/24 maxlen: 24
51.241.41.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.108.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
51.241.219.0/24 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.168.0/24 maxlen: 24
78.105.177.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
94.116.16.0/22 maxlen: 24
94.116.20.0/22 maxlen: 24
94.118.72.0/24 maxlen: 24
94.118.75.0/24 maxlen: 24
94.118.205.0/24 maxlen: 24
94.118.216.0/24 maxlen: 24
94.194.20.0/22 maxlen: 24
94.194.244.0/22 maxlen: 24
188.220.11.0/24 maxlen: 24
188.220.20.0/24 maxlen: 24
188.220.36.0/24 maxlen: 24
188.220.92.0/24 maxlen: 24
188.220.102.0/24 maxlen: 24
188.220.109.0/24 maxlen: 24
188.220.125.0/24 maxlen: 24
188.220.128.0/24 maxlen: 24
188.220.133.0/24 maxlen: 24
188.220.200.0/24 maxlen: 24
188.220.204.0/24 maxlen: 24
188.220.240.0/22 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.16.0/24 maxlen: 24
188.221.41.0/24 maxlen: 24
188.221.47.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
188.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:33:31:18:ef:73:01:a8:b5:bf:2f:fd:dd:17:eb:5f:c8:78:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 18 21:41:07 2026 GMT
Not After : Oct 17 21:46:07 2027 GMT
Subject: CN=DF6592067C291E14BC39F2F64C4EEB172FC03DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:9c:18:76:d8:14:12:d2:72:f7:58:71:72:
d3:8a:1f:72:60:ad:7a:b2:14:b0:bf:26:f8:58:7b:
d1:d0:60:d0:c8:64:c8:78:88:58:cf:a3:cc:d9:49:
f1:b3:d3:d8:66:09:2d:18:4f:06:de:e3:71:76:83:
83:fa:a2:04:58:3b:37:4c:81:e9:9c:4e:ff:a9:72:
0c:0a:92:26:23:dc:68:88:55:b4:08:36:be:21:06:
07:b9:02:1d:27:42:6c:20:b8:5d:44:cd:06:c9:01:
55:30:07:a1:88:08:ac:72:de:69:20:c9:b5:d2:15:
66:9b:98:0e:96:08:06:4d:7c:0a:5e:81:b5:00:39:
84:67:4d:c4:78:80:c7:c0:c0:97:ba:00:79:a9:a2:
4f:71:20:b4:b1:ab:3e:ae:2a:61:ff:f9:4c:53:d8:
a3:08:b9:d6:13:5b:c7:f8:28:33:01:e2:35:df:4e:
dc:07:f7:8f:23:ee:4d:ac:fa:57:95:e8:b9:63:a9:
f4:50:9d:8e:ad:79:e0:f1:60:78:5c:2f:d4:9f:7f:
4a:97:34:23:84:34:1f:13:47:11:a8:b8:bd:bf:dc:
24:84:35:45:b7:8c:99:b4:4f:66:c6:a5:23:c5:5d:
d2:dd:26:94:63:5a:06:e8:86:57:b0:c9:ed:a5:b2:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:92:06:7C:29:1E:14:BC:39:F2:F6:4C:4E:EB:17:2F:C0:3D:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.22.0/24
51.146.74.0/24
51.146.105.0/24
51.146.120.0/23
51.194.221.0/24
51.194.240.0/24
51.241.18.0/24
51.241.40.0/23
51.241.86.0/24
51.241.108.0/24
51.241.133.0/24
51.241.219.0/24
51.241.228.0/22
78.105.116.0/24
78.105.146.0/24
78.105.155.0/24
78.105.168.0/24
78.105.177.0/24
78.105.204.0/24
94.116.16.0/21
94.118.72.0/24
94.118.75.0/24
94.118.205.0/24
94.118.216.0/24
94.194.20.0/22
94.194.244.0/22
188.220.11.0/24
188.220.20.0/24
188.220.36.0/24
188.220.92.0/24
188.220.102.0/24
188.220.109.0/24
188.220.125.0/24
188.220.128.0/24
188.220.133.0/24
188.220.200.0/24
188.220.204.0/24
188.220.240.0/22
188.221.10.0/24
188.221.16.0/24
188.221.41.0/24
188.221.47.0/24
188.221.244.0/24
188.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:47:80:5a:ca:25:4a:18:b7:46:2e:3b:6a:6e:4c:d8:95:4f:
72:14:4e:39:34:50:c8:75:00:80:b9:8a:ca:73:8c:73:c6:78:
60:84:c9:22:c8:6d:f5:e1:d5:60:0f:18:34:55:7c:a2:e2:0e:
41:b5:bf:0f:ce:57:b1:39:18:58:39:b4:32:e6:92:0f:9c:09:
25:c9:05:35:ae:d5:6c:3f:92:be:0a:1f:72:af:77:19:c5:0c:
d8:97:3a:f4:1d:c7:41:0f:e3:2a:5e:f7:f9:58:2d:44:7c:4b:
45:85:a9:dc:fd:03:be:92:03:b8:e2:0e:e3:78:e0:86:4c:b7:
11:b5:19:e9:2e:c8:e9:5a:f2:85:c4:61:c1:c3:c2:70:36:a2:
8b:de:ea:8c:bb:70:9f:b3:f8:da:70:96:30:26:9f:27:51:61:
b6:d6:48:92:36:39:fa:05:b6:69:6e:a1:a0:32:ed:b5:8b:e2:
a0:63:6c:c0:2b:69:b6:60:bc:a5:b0:70:4a:c3:76:88:64:99:
51:d8:98:9a:0c:63:39:a5:3e:a0:15:20:bd:00:5e:e1:a2:46:
6a:a5:4c:97:6d:74:67:95:50:e5:c1:56:4b:55:6c:e7:3c:01:
a1:f7:3d:aa:84:1a:95:98:22:e1:0e:3a:2e:71:f1:c1:34:22:
43:0c:3a:93
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIUHDMxGO9zAai1vy/93RfrX8h4UbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTgyMTQxMDdaFw0yNzEwMTcyMTQ2MDdaMDMxMTAvBgNV
BAMTKERGNjU5MjA2N0MyOTFFMTRCQzM5RjJGNjRDNEVFQjE3MkZDMDNERDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOZwYdtgUEtJy91hxctOKH3Jg
rXqyFLC/JvhYe9HQYNDIZMh4iFjPo8zZSfGz09hmCS0YTwbe43F2g4P6ogRYOzdM
gemcTv+pcgwKkiYj3GiIVbQINr4hBge5Ah0nQmwguF1EzQbJAVUwB6GICKxy3mkg
ybXSFWabmA6WCAZNfApegbUAOYRnTcR4gMfAwJe6AHmpok9xILSxqz6uKmH/+UxT
2KMIudYTW8f4KDMB4jXfTtwH948j7k2s+leV6LljqfRQnY6teeDxYHhcL9Sff0qX
NCOENB8TRxGouL2/3CSENUW3jJm0T2bGpSPFXdLdJpRjWgbohlewye2lsj01AgMB
AAGjggMUMIIDEDAdBgNVHQ4EFgQU32WSBnwpHhS8OfL2TE7rFy/APdYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzMyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCASkGCCsGAQUFBwEHAQH/BIIBGDCCARQwggEQBAIAATCC
AQgDBAAzkhYDBAAzkkoDBAAzkmkDBAEzkngDBAAzwt0DBAAzwvADBAAz8RIDBAEz
8SgDBAAz8VYDBAAz8WwDBAAz8YUDBAAz8dsDBAIz8eQDBABOaXQDBABOaZIDBABO
aZsDBABOaagDBABOabEDBABOacwDBANedBADBABedkgDBABedksDBABeds0DBABe
dtgDBAJewhQDBAJewvQDBAC83AsDBAC83BQDBAC83CQDBAC83FwDBAC83GYDBAC8
3G0DBAC83H0DBAC83IADBAC83IUDBAC83MgDBAC83MwDBAK83PADBAC83QoDBAC8
3RADBAC83SkDBAC83S8DBAC83fQDBAC83fswDQYJKoZIhvcNAQELBQADggEBAGNH
gFrKJUoYt0YuO2puTNiVT3IUTjk0UMh1AIC5ispzjHPGeGCEySLIbfXh1WAPGDRV
fKLiDkG1vw/OV7E5GFg5tDLmkg+cCSXJBTWu1Ww/kr4KH3KvdxnFDNiXOvQdx0EP
4ype9/lYLUR8S0WFqdz9A76SA7jiDuN44IZMtxG1GekuyOla8oXEYcHDwnA2oove
6oy7cJ+z+NpwljAmnydRYbbWSJI2OfoFtmluoaAy7bWL4qBjbMArabZgvKWwcErD
dohkmVHYmJoMYzmlPqAVIL0AXuGiRmqlTJdtdGeVUOXBVktVbOc8AaH3PaqEGpWY
IuEOOi5x8cE0IkMMOpM=
-----END CERTIFICATE-----
Generated at Thu Oct 22 10:28:53 2026 by rpki-client