Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3258.roa
File: AS3258.roa (raw, json)
Hash identifier: QnfhQfk2sZbemyQoXufyiun/0y3i0WCNj4xwTXI7p/4=
Subject key identifier: 9D:25:D6:FA:1C:E8:39:57:92:04:A2:EA:06:DD:99:7B:EB:28:E0:01
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1932B757C02467D88A23E5786854A37F57BAB736
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3258.roa
Signing time: Wed 29 Jul 2026 15:25:12 +0000
ROA not before: Wed 29 Jul 2026 15:20:12 +0000
ROA not after: Wed 28 Jul 2027 15:25:12 +0000
asID: 3258
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:32:b7:57:c0:24:67:d8:8a:23:e5:78:68:54:a3:7f:57:ba:b7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:12 2026 GMT
Not After : Jul 28 15:25:12 2027 GMT
Subject: CN=9D25D6FA1CE839579204A2EA06DD997BEB28E001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:82:ad:e2:41:9d:7e:c9:f8:f3:34:9c:4c:
23:6b:e9:40:58:7e:6e:69:32:bd:73:0a:77:24:2c:
60:81:6c:0c:ee:dd:6c:bb:db:08:40:39:df:2a:a6:
07:91:2a:19:01:46:93:06:8c:44:e3:60:6a:ce:85:
eb:d7:1a:70:25:95:27:67:5f:3e:ca:ce:dc:da:bd:
fe:81:29:32:20:81:1c:7d:d8:3a:20:5c:20:ca:a6:
06:15:11:e3:9b:9f:55:68:63:c6:ec:02:e8:43:63:
2f:46:66:15:e8:0c:b6:49:a5:0d:84:48:6f:1b:b4:
68:2c:e9:d2:c9:b4:d7:4a:be:8c:00:57:43:b1:f7:
db:5a:07:e5:a5:65:93:58:87:b7:42:97:39:53:2c:
a8:18:61:b6:43:e7:8b:ab:25:a1:17:39:35:c5:50:
1c:fc:fd:6e:04:b1:33:4e:fe:a5:3b:b7:3d:36:0d:
62:e2:d5:19:20:7a:b2:52:d4:2a:94:c0:8e:f7:ea:
ce:e6:6d:a6:72:b7:30:ff:bf:04:bf:df:86:19:fe:
d7:dd:92:0b:06:2d:e0:48:00:d4:62:6e:75:fa:9a:
7b:29:d9:ee:62:bd:5d:63:f2:6d:90:50:73:dd:27:
2f:8c:c0:c4:33:35:09:ff:43:10:a8:38:1d:ed:25:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:D6:FA:1C:E8:39:57:92:04:A2:EA:06:DD:99:7B:EB:28:E0:01
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:03:b9:5b:13:a3:63:70:42:6d:d2:98:7b:21:ba:45:bc:1b:
7b:4e:d3:10:b4:86:06:82:c7:7a:3a:ca:ab:9d:48:00:fc:f2:
f0:9a:b9:ff:a6:1b:68:41:7b:13:7c:73:52:29:13:72:80:e2:
4e:f4:8a:76:b3:5a:26:59:c3:f6:86:29:33:48:80:b3:7b:22:
aa:5f:d3:e5:2b:b1:8e:8c:a9:00:29:e9:0c:0f:ab:52:f6:1c:
09:63:9e:9b:4b:2a:7b:3b:66:54:28:bc:96:85:25:98:22:7f:
d2:1d:1b:86:a0:cb:33:1b:a0:3a:3b:b4:80:c4:d4:ad:88:bb:
c6:ad:17:18:c4:f9:0c:89:41:4d:c9:96:d8:0c:33:fb:f6:e1:
eb:10:f3:35:9b:17:65:a7:65:44:dd:83:1e:6f:00:51:11:0f:
9d:b2:e9:31:42:5b:6c:8e:51:ff:73:19:b6:7a:95:25:27:d9:
c5:ce:05:d3:a6:1d:3a:46:96:c9:77:93:b9:9f:a6:e3:29:c2:
21:e3:a9:57:f9:d1:e3:e1:b7:c3:7a:20:d6:f6:56:55:58:21:
83:0c:b4:ca:64:7b:b4:29:91:98:bf:da:04:f3:82:5e:fc:7b:
1a:b2:c9:c9:ac:86:70:0d:07:0b:48:8d:96:d7:76:23:c5:58:
92:08:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 09:30:20 2026 by rpki-client