Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: 0doe5mw5O39sGZ+YcVCfyo7tbPj6nf7d/rnQeg2NOBA=
Subject key identifier: BA:5B:69:03:97:67:49:9A:01:D2:8C:98:C7:67:68:7F:AE:D9:A9:1C
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1214262847EFE24FA85E79790131A4CAF891587F
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS3257.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 3257
IP address blocks: 79.176.64.0/24 maxlen: 24
79.176.110.0/24 maxlen: 24
79.176.112.0/24 maxlen: 24
109.66.51.0/24 maxlen: 24
109.66.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:14:26:28:47:ef:e2:4f:a8:5e:79:79:01:31:a4:ca:f8:91:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=BA5B69039767499A01D28C98C767687FAED9A91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:4a:8f:ad:d3:b2:90:b1:52:bb:5d:a9:60:
14:f9:53:24:bb:f3:47:aa:13:05:9d:47:18:08:49:
e2:63:f7:48:37:b9:9f:0c:8a:24:ba:31:3c:53:2b:
9a:7a:b9:2e:8a:82:69:ed:f0:53:0b:2c:f8:4e:ea:
13:86:0f:40:c3:d7:b9:47:fe:59:2b:ba:22:ac:46:
91:84:42:51:67:2d:4b:83:ee:a3:a2:7b:7c:1e:d7:
6a:c7:45:a3:8f:46:01:5b:7d:e3:72:17:e9:a0:4e:
e3:ab:3c:d0:e3:11:15:26:cf:f1:05:e0:3a:e5:be:
f6:62:4b:4b:5e:f5:01:1a:7d:12:07:ca:df:fa:99:
a4:f7:84:fd:a4:f7:a6:53:c3:08:f5:b4:92:63:90:
eb:d7:07:c7:ab:d0:47:1a:2c:f6:a9:24:95:8b:ef:
be:07:46:87:3f:ea:59:6e:d4:ef:02:5f:7d:fa:ea:
f5:a6:cc:32:bb:07:99:51:8a:9b:d2:a6:85:ba:53:
1e:bd:2f:ed:df:08:86:71:82:d9:70:55:cc:bd:bb:
be:89:3d:1e:7f:85:83:21:ef:34:ba:bd:b6:b3:7d:
ab:b6:e7:0c:cc:b4:9d:2e:e1:a9:d5:0c:5b:e9:30:
e3:dd:44:5f:eb:b6:89:5b:4f:03:b7:dd:3c:42:54:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:69:03:97:67:49:9A:01:D2:8C:98:C7:67:68:7F:AE:D9:A9:1C
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.64.0/24
79.176.110.0/24
79.176.112.0/24
109.66.51.0/24
109.66.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:08:ad:92:e0:20:34:5d:3f:59:2b:b2:da:c4:70:42:97:80:
23:16:4a:07:67:48:bb:20:92:8e:27:54:1d:a6:9c:5c:d1:00:
49:ef:8e:34:7e:d6:86:7c:fe:89:0e:5b:d3:6f:04:c3:45:81:
8f:ab:60:ce:4d:75:da:e5:07:f6:54:a0:eb:a0:df:64:78:70:
ed:58:c3:6d:88:26:53:32:4a:2e:28:52:93:c6:6e:3e:33:34:
60:99:8b:5b:8e:91:19:2e:b2:31:00:6a:3d:0b:3b:b2:6e:38:
12:8c:d9:ab:b3:e7:7f:6c:cd:90:0b:55:c9:19:83:82:0f:e0:
72:52:85:f2:13:4f:69:22:14:5d:c3:db:0e:3b:87:4d:04:9a:
8c:d6:79:02:d2:bd:1c:07:fe:2c:f0:da:12:af:5c:6b:8c:70:
fb:3a:5b:77:41:a7:71:52:f3:c1:89:9e:3e:6a:6f:c6:f1:dd:
90:6f:90:78:77:ff:40:a7:53:1f:7f:3d:9d:c0:d9:d0:99:01:
59:65:a9:63:19:83:f6:2d:df:2f:b9:3f:ce:28:3d:e3:f0:fd:
4d:be:cb:23:80:56:59:11:49:d0:15:30:44:b5:34:63:52:df:
26:f5:e5:b9:94:99:84:65:26:06:59:85:79:89:27:ae:43:a0:
fb:72:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:23 2026 by rpki-client