Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: mATA85cby7wTU8hhUzc7H6Wjim4XnOhDrZQ6S2ggq9Y=
Subject key identifier: BA:C3:22:97:9D:94:1B:E1:1B:23:6E:16:F6:A2:16:1E:1C:9B:74:D0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A0895F0CFBCC79748436EAA2FC07A0AE75090B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
Signing time: Thu 28 May 2026 13:54:23 +0000
ROA not before: Thu 28 May 2026 13:49:23 +0000
ROA not after: Thu 27 May 2027 13:54:23 +0000
asID: 3257
IP address blocks: 82.26.207.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
84.75.39.0/24 maxlen: 24
84.75.43.0/24 maxlen: 24
84.75.49.0/24 maxlen: 24
84.75.54.0/24 maxlen: 24
84.75.60.0/24 maxlen: 24
84.75.66.0/24 maxlen: 24
84.75.79.0/24 maxlen: 24
84.75.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:08:95:f0:cf:bc:c7:97:48:43:6e:aa:2f:c0:7a:0a:e7:50:90:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 13:49:23 2026 GMT
Not After : May 27 13:54:23 2027 GMT
Subject: CN=BAC322979D941BE11B236E16F6A2161E1C9B74D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:2f:74:6d:24:b9:cd:5e:eb:c4:e8:66:74:
e3:91:83:b3:0a:04:2c:ed:89:d0:3e:f1:71:df:93:
50:b0:e8:98:b1:97:84:da:77:09:ea:72:f3:1b:6c:
57:81:6e:b8:59:de:f4:bf:05:eb:39:cf:44:18:0c:
56:81:b0:59:a3:43:14:8f:89:17:ff:10:e2:2f:d8:
73:36:b1:64:7a:da:74:01:82:b1:4b:89:d4:b0:e5:
3b:7b:eb:6b:87:7d:78:ed:c9:88:9d:c9:34:bd:e3:
13:b4:ca:91:ce:39:73:fa:dd:22:a4:15:39:3b:fa:
ac:04:52:f9:a7:a2:24:e9:31:39:30:03:91:a9:12:
57:5c:f0:21:49:0c:db:3d:e2:02:f5:c9:ff:23:12:
3a:ec:91:6c:92:ef:91:31:d7:bb:4f:2d:4e:75:9b:
6e:22:a8:84:09:a0:4f:24:58:2d:99:1a:f2:73:bf:
9f:90:ac:8b:aa:9d:54:3f:91:2e:1f:cc:a2:52:16:
ad:3d:2c:b5:2c:8e:8f:ef:13:80:62:19:1a:a2:b7:
c1:55:71:29:d6:b5:09:d3:e1:12:53:1b:c1:82:ba:
7e:94:14:98:d7:5d:b0:bc:d4:92:63:4b:73:60:09:
d6:c2:17:5d:9c:fe:25:e7:db:83:0b:ad:8f:d2:24:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:22:97:9D:94:1B:E1:1B:23:6E:16:F6:A2:16:1E:1C:9B:74:D0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.207.0/24
82.41.75.0/24
84.75.39.0/24
84.75.43.0/24
84.75.49.0/24
84.75.54.0/24
84.75.60.0/24
84.75.66.0/24
84.75.79.0/24
84.75.160.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ba:1d:88:55:02:9b:af:69:18:80:7d:31:cd:5d:c9:9f:e7:
6c:09:50:e0:31:47:c8:cb:2c:4b:36:a4:bb:64:b0:77:fb:3a:
e1:44:84:98:ed:0e:de:07:ae:59:39:60:31:39:1a:fc:f7:76:
3e:63:74:3a:4c:3e:b7:fd:07:36:63:91:a3:a9:2a:60:8e:40:
2f:3f:05:f2:7c:fe:08:67:0c:68:2a:37:b2:47:63:6a:36:b2:
57:04:f4:e5:a6:95:d5:3c:16:9d:d3:61:3d:53:e4:60:28:12:
1f:44:8a:0d:05:03:c4:51:63:ff:89:88:fe:ca:49:d7:f1:35:
b8:0d:a7:fd:0f:e9:ad:8b:89:0b:3e:6f:82:5c:ac:6d:72:ab:
48:66:24:9e:db:06:b4:4c:cc:f5:58:ee:00:5c:3c:54:7d:8c:
89:61:5d:ba:1b:bf:fc:72:8f:51:fd:15:e7:25:a0:8d:54:ea:
a8:6c:a9:35:d9:eb:ea:9b:61:fb:1e:b1:65:bc:d5:7d:1e:d0:
50:25:53:76:e0:2b:e7:e6:e7:66:3f:93:61:9b:d1:6d:7f:ca:
69:f2:9d:5f:83:9d:d7:44:81:b2:6a:e1:4e:05:e4:97:27:49:
29:58:76:d7:54:2b:60:e7:f0:e4:d1:26:16:92:83:4e:63:cf:
fe:7a:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:13 2026 by rpki-client