Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: AeEQqecgcENiAf/Sg47G8hwxIueb6jwgzGaWSXp0sVA=
Subject key identifier: 06:C0:FA:B0:CD:C5:7E:77:F5:4E:C4:E2:6B:2A:A1:C6:16:C3:C5:53
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2CCB85164D8E3A3A7768043DF0047160C41FE042
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Mon 07 Jul 2025 06:31:31 +0000
ROA not before: Mon 07 Jul 2025 06:26:31 +0000
ROA not after: Mon 06 Jul 2026 06:31:31 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
178.95.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:cb:85:16:4d:8e:3a:3a:77:68:04:3d:f0:04:71:60:c4:1f:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 7 06:26:31 2025 GMT
Not After : Jul 6 06:31:31 2026 GMT
Subject: CN=06C0FAB0CDC57E77F54EC4E26B2AA1C616C3C553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:80:8c:3f:2e:0b:91:c3:94:60:cb:14:ea:
42:7f:1d:e9:00:76:41:d7:87:0b:72:af:2e:a1:20:
e0:e2:58:dd:75:26:f0:3d:3c:8f:a9:ea:70:e2:4e:
24:99:f1:b2:dd:2e:51:39:b4:5d:e8:28:f5:f1:a5:
61:54:51:29:ce:4b:f8:f9:71:80:c3:da:7d:fd:07:
1f:03:66:f2:24:ea:40:51:8f:ee:80:a5:86:55:bb:
fe:ca:11:a0:28:8d:fd:24:f9:a8:99:cd:92:59:ef:
40:23:b6:8b:1a:f4:72:4a:b5:3d:79:cc:39:90:bb:
f9:e4:41:ef:55:c2:8d:1b:27:e6:e2:cd:61:05:71:
c5:18:dd:39:8b:a6:8b:d0:44:f9:02:a6:3e:40:9c:
01:a8:a4:da:0e:13:46:34:66:5a:10:8a:76:af:34:
07:04:f2:a2:8f:76:0c:d2:0d:c6:39:0b:2b:8c:13:
af:0e:d5:22:d2:a8:12:64:c3:b9:30:36:62:36:be:
b2:46:20:b6:41:5a:25:99:ce:c6:14:06:7b:a3:82:
a8:30:66:1e:b5:d3:b0:f5:96:6e:cd:81:43:be:9d:
ae:e8:9a:c5:c1:b1:b6:6a:c1:50:a1:22:7b:74:19:
39:d4:82:d3:ac:34:da:2d:a0:86:99:83:cf:80:58:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:FA:B0:CD:C5:7E:77:F5:4E:C4:E2:6B:2A:A1:C6:16:C3:C5:53
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
178.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1e:64:fe:05:1a:df:74:05:13:01:94:5f:aa:cf:0e:4b:b7:
21:af:2f:a6:3a:bd:8f:cd:28:e0:ee:6c:7a:0f:fe:24:bc:42:
02:c0:6b:12:e7:d0:c1:d3:bc:52:bf:d3:49:0a:d8:60:d7:f1:
13:00:8d:f3:c6:f7:56:18:7c:27:c0:cf:45:17:be:30:d6:f0:
15:23:17:16:02:ba:3a:07:e7:cf:95:f9:63:9c:4d:15:ad:49:
c6:b1:03:8c:54:33:d0:f4:a9:b8:18:1d:25:f5:c5:9f:8b:f0:
9c:19:9b:e0:0d:b9:87:7b:fa:5d:f7:d8:da:5d:6a:dc:c5:02:
94:32:6e:f8:96:3a:bd:31:e7:32:24:3c:57:7c:e3:cd:84:37:
86:21:6c:87:ee:56:32:2e:1b:0b:66:e4:25:02:05:90:02:68:
e7:99:29:3b:bd:2c:b1:59:15:d1:98:1c:10:cd:71:1e:d3:cc:
bc:bf:80:2e:e4:98:ac:ee:e8:4a:eb:23:8a:6f:f1:90:f2:f9:
9e:8c:c7:c3:ae:83:cb:d5:32:77:e1:54:cf:21:be:9e:45:10:
53:2b:ed:30:e1:6a:21:68:2f:14:ed:75:43:49:4b:f8:75:c4:
f4:e8:78:51:7f:36:73:86:76:4c:38:d6:9d:6b:ed:ee:b0:28:
e0:ef:5c:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULMuFFk2OOjp3aAQ98ARxYMQf4EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MDcwNjI2MzFaFw0yNjA3MDYwNjMxMzFaMDMxMTAvBgNV
BAMTKDA2QzBGQUIwQ0RDNTdFNzdGNTRFQzRFMjZCMkFBMUM2MTZDM0M1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRQYCMPy4LkcOUYMsU6kJ/HekA
dkHXhwtyry6hIODiWN11JvA9PI+p6nDiTiSZ8bLdLlE5tF3oKPXxpWFUUSnOS/j5
cYDD2n39Bx8DZvIk6kBRj+6ApYZVu/7KEaAojf0k+aiZzZJZ70Ajtosa9HJKtT15
zDmQu/nkQe9Vwo0bJ+bizWEFccUY3TmLpovQRPkCpj5AnAGopNoOE0Y0ZloQinav
NAcE8qKPdgzSDcY5CyuME68O1SLSqBJkw7kwNmI2vrJGILZBWiWZzsYUBnujgqgw
Zh6107D1lm7NgUO+na7omsXBsbZqwVChInt0GTnUgtOsNNotoIaZg8+AWHfVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBsD6sM3Ffnf1TsTiayqhxhbDxVMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzI1Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAC7KNgME
AC7KOAMEALJcgwMEALJchQMEALJclAMEALJcmwMEALJd9AMEALJfnzANBgkqhkiG
9w0BAQsFAAOCAQEAlB5k/gUa33QFEwGUX6rPDku3Ia8vpjq9j80o4O5seg/+JLxC
AsBrEufQwdO8Ur/TSQrYYNfxEwCN88b3Vhh8J8DPRRe+MNbwFSMXFgK6Ogfnz5X5
Y5xNFa1JxrEDjFQz0PSpuBgdJfXFn4vwnBmb4A25h3v6XffY2l1q3MUClDJu+JY6
vTHnMiQ8V3zjzYQ3hiFsh+5WMi4bC2bkJQIFkAJo55kpO70ssVkV0ZgcEM1xHtPM
vL+ALuSYrO7oSusjim/xkPL5nozHw66Dy9Uyd+FUzyG+nkUQUyvtMOFqIWgvFO11
Q0lL+HXE9Oh4UX82c4Z2TDjWnWvt7rAo4O9cDA==
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:33 2025 by rpki-client