Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: 9hfMUrO/Mn004UknowRrRC0kyc8Em/F8qZRrvQkBMqY=
Subject key identifier: 89:1E:BD:12:5E:E2:AC:DB:7B:D4:83:35:0D:92:93:05:63:8C:3F:12
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4412CAE1C10AFB5A47B9E88966CB07B950EC1263
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Tue 11 Aug 2026 13:32:44 +0000
ROA not before: Tue 11 Aug 2026 13:27:44 +0000
ROA not after: Tue 10 Aug 2027 13:32:44 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
178.95.116.0/22 maxlen: 24
178.95.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:12:ca:e1:c1:0a:fb:5a:47:b9:e8:89:66:cb:07:b9:50:ec:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 11 13:27:44 2026 GMT
Not After : Aug 10 13:32:44 2027 GMT
Subject: CN=891EBD125EE2ACDB7BD483350D929305638C3F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:de:a5:71:59:47:7d:bf:ab:39:3b:5b:51:
c2:70:cc:68:16:8e:6d:67:0f:f9:4a:2c:f5:59:b9:
85:42:a7:95:ae:7b:ce:45:ff:a3:c9:67:b6:8a:ac:
43:e5:d2:8e:63:f1:4e:33:69:6c:f4:7b:53:60:0e:
88:31:a9:6e:27:31:97:28:84:f2:44:ea:01:28:9f:
d7:11:00:4e:de:46:76:2b:b4:e7:c5:ec:4a:53:c9:
d2:20:c1:33:0b:9d:d3:09:54:42:93:74:b0:4e:d8:
b0:a7:2a:ef:17:e5:a5:b1:6b:0d:c5:ff:24:97:8e:
13:58:9a:36:48:a9:ec:a7:96:f9:23:9b:8d:a2:6a:
10:2b:4f:e5:bc:0c:d0:49:ef:de:26:22:1d:de:de:
91:7e:b9:9b:45:77:fe:34:47:4e:44:3a:e2:15:dd:
d5:16:37:43:15:82:d1:3a:87:12:71:61:e8:04:94:
37:9c:ae:37:5d:8c:66:6e:d0:71:76:aa:a5:90:ff:
8f:9a:fe:70:7d:15:68:73:47:f9:7c:c8:01:a8:fb:
56:97:fc:24:24:ac:33:c2:89:a3:cc:c1:e6:e3:1a:
9a:fc:5d:1a:e4:e1:c5:8e:8b:36:bb:be:89:cd:04:
b9:fe:da:da:9a:a8:14:5d:ff:48:bf:3d:33:ee:98:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:BD:12:5E:E2:AC:DB:7B:D4:83:35:0D:92:93:05:63:8C:3F:12
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
178.95.116.0/22
178.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fb:17:bd:b6:5b:2a:b0:b8:1f:e9:02:df:a4:5b:b2:01:86:
cb:14:0e:a2:02:92:a9:fd:4e:fc:c8:78:61:00:47:c7:85:a0:
8f:38:3e:a3:ff:d3:41:dd:f5:ae:03:e0:b8:20:fd:9b:4c:86:
84:37:ee:45:71:59:09:c8:d0:4d:35:38:44:73:a0:58:ca:b5:
ff:4b:09:b6:e5:f5:8f:b7:c9:fc:b5:7c:b7:38:fd:11:d2:9e:
65:f6:4c:5e:e0:7b:27:8f:2c:d9:e2:11:51:67:47:69:95:6c:
84:49:56:d7:ff:4c:79:bc:4b:ad:cc:c4:00:c8:2c:e9:be:72:
ce:14:76:d5:01:6b:d8:96:a3:45:d3:b7:59:9e:29:ca:73:fa:
24:95:37:8c:78:f6:b3:7f:d8:90:c5:ae:9b:ff:59:09:4c:a2:
e7:5e:02:57:f8:d1:72:3f:bc:82:d3:3a:b7:52:54:2a:9a:3e:
34:8c:7d:ec:5f:0a:cb:d2:fb:0c:c2:40:70:d5:cd:31:6a:e7:
29:a8:23:82:af:11:39:74:2c:7f:8d:06:aa:47:5c:36:83:a8:
4d:dc:ed:05:4b:30:66:32:e8:03:99:50:e3:5e:01:ef:99:2c:
5b:ed:af:8f:b5:94:11:c6:ab:b1:aa:aa:41:d2:5f:e2:a6:33:
f4:6f:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:16:05 2026 by rpki-client