Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: LJ3JCcXVvlSgEc1Qc1XBhKdrlcjSg3QqEjCLymIza4U=
Subject key identifier: C4:55:71:83:DD:2D:AC:5B:03:20:BC:31:4D:B5:74:5D:CA:35:66:73
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C6BB77DF12CF64377F805BA9A5885818FCEFAB8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Wed 23 Jul 2025 14:08:21 +0000
ROA not before: Wed 23 Jul 2025 14:03:21 +0000
ROA not after: Wed 22 Jul 2026 14:08:21 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
178.95.116.0/22 maxlen: 24
178.95.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6b:b7:7d:f1:2c:f6:43:77:f8:05:ba:9a:58:85:81:8f:ce:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 14:03:21 2025 GMT
Not After : Jul 22 14:08:21 2026 GMT
Subject: CN=C4557183DD2DAC5B0320BC314DB5745DCA356673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:55:98:44:fe:87:53:7e:c0:91:dc:e1:58:
cc:81:28:1a:db:fb:f1:a2:8e:85:9b:f1:dd:c7:79:
b2:72:cc:29:ee:20:ec:29:8a:be:8e:ce:55:11:51:
3c:94:fc:9e:05:ef:20:fd:6a:ad:1a:1a:95:02:18:
ff:15:41:24:a6:a6:b9:18:b6:30:d6:71:2f:35:38:
fe:33:80:74:01:cc:6f:ff:ba:53:1f:ee:0b:f7:41:
45:8b:ff:b2:ed:a6:4e:50:4b:b4:a2:22:14:ec:4b:
da:77:19:f4:0b:15:db:1f:d6:ab:06:d8:73:c4:59:
b9:0b:ac:93:92:d3:d5:48:8d:63:79:d3:2a:3e:8d:
6e:cb:cb:5a:45:8a:00:59:a7:54:72:7e:7a:ab:af:
04:86:4d:a3:f3:ec:ae:c6:36:41:96:bd:21:f5:8f:
d2:26:e4:79:9b:76:57:cb:ac:4d:a5:72:b7:a4:27:
02:5a:54:bb:8f:35:f0:8e:74:99:5b:45:77:14:6c:
a9:65:51:ae:e1:da:78:d8:44:da:03:eb:e8:44:db:
e5:d3:3b:ad:40:3f:25:0c:d6:9f:a8:f0:64:6d:66:
a4:26:f4:a1:ff:0e:48:d9:34:b6:99:43:36:25:4c:
96:e1:19:d0:c1:c5:5d:33:04:84:20:c1:f2:08:62:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:71:83:DD:2D:AC:5B:03:20:BC:31:4D:B5:74:5D:CA:35:66:73
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
178.95.116.0/22
178.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:48:86:78:95:89:8b:99:53:44:10:42:e0:db:1d:91:6b:bc:
20:66:4d:ba:04:84:ff:d1:4d:06:be:f6:f6:d9:a3:1c:85:51:
ee:50:6b:2e:08:8e:66:4f:ce:bb:5b:09:36:cc:76:82:34:d0:
91:f4:48:7b:df:47:fa:a6:c5:b7:11:d4:24:72:28:0a:d7:56:
77:30:4a:ca:2e:a1:94:b7:1e:50:08:ce:d7:a7:7d:e2:d0:86:
e2:65:e7:2c:ca:50:3b:6f:eb:fe:e6:1c:dd:1a:7e:a6:de:2e:
a0:82:0f:3f:f8:54:55:7b:0e:39:dc:27:d6:bd:f9:3c:03:81:
76:d6:51:a4:ba:cc:4d:4f:8b:78:d3:3b:1c:a7:03:24:6f:4c:
91:8d:3b:0c:d4:43:0f:ce:80:d6:67:3d:b6:93:12:f0:27:aa:
99:10:e0:84:15:18:c1:a4:42:f9:ce:72:1d:9e:8e:2c:30:31:
22:f3:7f:cf:9d:3f:30:6f:5d:01:14:84:cb:de:bb:d0:72:a8:
f0:28:4e:bc:7e:84:70:42:3c:b3:51:35:2d:3d:ef:85:0f:86:
4a:06:a5:0e:63:57:a5:a2:f1:63:58:07:e2:11:18:41:9d:a7:
e5:3f:34:96:e3:43:dc:64:95:b7:5b:80:11:de:85:5e:ff:e8:
25:4f:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:49:26 2025 by rpki-client