Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: cwPSnWcVG3h6AAbvysPlFf2NpgmYWMxs5NV3pGuM40s=
Subject key identifier: 6C:27:78:36:40:B4:27:53:8D:08:8F:9B:4C:C2:D9:B8:85:86:95:5F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 03E968B1D49B92A9473E0077445F646F1EA242EB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
Signing time: Sat 27 Jun 2026 13:24:13 +0000
ROA not before: Sat 27 Jun 2026 13:19:13 +0000
ROA not after: Sat 26 Jun 2027 13:24:13 +0000
asID: 3257
IP address blocks: 82.26.207.0/24 maxlen: 24
84.75.39.0/24 maxlen: 24
84.75.43.0/24 maxlen: 24
84.75.49.0/24 maxlen: 24
84.75.54.0/24 maxlen: 24
84.75.60.0/24 maxlen: 24
84.75.66.0/24 maxlen: 24
84.75.79.0/24 maxlen: 24
84.75.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:68:b1:d4:9b:92:a9:47:3e:00:77:44:5f:64:6f:1e:a2:42:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 27 13:19:13 2026 GMT
Not After : Jun 26 13:24:13 2027 GMT
Subject: CN=6C27783640B427538D088F9B4CC2D9B88586955F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:f6:ca:37:d6:5c:1e:b3:56:1d:91:f4:ae:
33:c7:00:b0:e6:42:db:5a:08:83:6f:ef:fa:c7:d9:
89:92:13:db:49:1c:7b:a6:4e:08:aa:bf:0c:7e:6c:
96:3f:1d:17:01:49:15:15:4f:9c:78:b1:3c:3d:e9:
da:28:91:a2:c2:01:a6:76:a0:e5:2e:36:0a:5b:d0:
53:af:63:da:01:67:45:6d:95:09:4e:2c:b5:ed:aa:
ff:ad:c2:f5:c3:a5:d4:35:f3:02:3e:d7:5c:9b:00:
98:ef:44:ff:51:4f:fc:1b:a8:ab:d1:00:f1:bd:45:
81:08:7b:eb:6e:66:74:d6:25:02:bd:de:85:cc:a7:
04:05:22:af:e7:29:09:8c:21:d4:6b:fa:ab:04:32:
e0:14:df:55:9e:2e:0f:63:44:ea:39:ec:df:c5:8e:
86:54:a9:95:fd:79:f5:4b:84:c2:d2:50:41:79:14:
16:d7:79:9c:96:8b:fe:ef:f6:04:40:f0:a5:ad:97:
70:19:f4:b5:b6:1f:ae:7d:30:a4:57:10:38:34:1d:
be:9e:d2:bc:3a:02:d8:a0:43:ec:2c:aa:ae:be:e7:
4f:7b:2a:6a:96:34:7d:ce:77:25:43:73:e9:75:42:
35:c7:1b:b7:36:5a:fc:e9:4a:ec:bc:8e:48:e0:98:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:78:36:40:B4:27:53:8D:08:8F:9B:4C:C2:D9:B8:85:86:95:5F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.207.0/24
84.75.39.0/24
84.75.43.0/24
84.75.49.0/24
84.75.54.0/24
84.75.60.0/24
84.75.66.0/24
84.75.79.0/24
84.75.160.0/24
Signature Algorithm: sha256WithRSAEncryption
33:67:ee:2c:4b:9c:d4:4a:e7:69:b4:28:76:fa:b4:3d:90:4d:
7d:0b:61:db:eb:98:c6:eb:52:08:c9:0d:42:78:30:a7:a1:b5:
b1:04:ab:68:ad:6f:27:94:a3:59:51:c5:9f:a8:ab:b5:b8:a7:
9b:60:02:8d:bc:19:6f:56:85:40:9d:4d:9c:38:31:3f:a7:09:
cd:9d:88:4c:a0:6e:ae:fa:2d:7f:92:40:cd:61:46:8b:21:c0:
65:e8:ba:58:64:b9:1c:7e:b7:2e:50:25:f5:d7:78:93:61:60:
8f:53:84:c6:51:35:41:a3:2f:8f:a1:49:e3:48:9d:ec:f9:c6:
6a:3a:b1:da:34:7b:1f:39:cb:bc:79:cd:78:ad:32:02:0b:3b:
bc:97:b2:c0:be:a4:90:bc:8d:e6:95:58:9d:97:83:9a:c3:24:
03:f1:3d:52:d2:5d:61:45:33:74:3d:2e:7f:65:2a:7a:95:43:
23:d4:b3:74:df:ca:22:7d:44:f0:82:0c:8f:74:31:fa:ad:7f:
4f:cc:dc:64:90:f9:a5:4a:24:09:e1:92:1e:c3:90:85:b3:b6:
31:30:29:ea:53:5b:d1:c6:3b:6d:e3:0b:74:77:10:e3:46:e9:
52:9f:0e:ee:56:a5:58:ee:31:75:27:c9:e8:f2:af:ed:b3:a7:
18:e6:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:55 2026 by rpki-client