Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: UsNb/3s3vlLXAWUdVOO+gsdmsf0+0umxdvCdiGowgCA=
Subject key identifier: 81:D8:ED:16:AD:4B:83:25:76:74:D9:E0:98:6E:F5:0F:D7:2C:7B:DF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3A56FB4ABFF1612EF575DB017C538DC95E77BE3F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
Signing time: Thu 11 Jun 2026 07:47:32 +0000
ROA not before: Thu 11 Jun 2026 07:42:32 +0000
ROA not after: Thu 10 Jun 2027 07:47:32 +0000
asID: 3257
IP address blocks: 143.14.37.0/24 maxlen: 24
143.14.127.0/24 maxlen: 24
155.117.162.0/24 maxlen: 24
162.141.49.0/24 maxlen: 24
162.141.64.0/24 maxlen: 24
162.141.95.0/24 maxlen: 24
162.141.122.0/24 maxlen: 24
162.141.165.0/24 maxlen: 24
167.148.1.0/24 maxlen: 24
167.148.4.0/24 maxlen: 24
167.148.5.0/24 maxlen: 24
167.148.10.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.14.0/24 maxlen: 24
167.148.29.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.35.0/24 maxlen: 24
167.148.70.0/24 maxlen: 24
167.148.100.0/24 maxlen: 24
167.148.102.0/24 maxlen: 24
167.148.106.0/24 maxlen: 24
167.148.116.0/24 maxlen: 24
167.148.127.0/24 maxlen: 24
167.148.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:56:fb:4a:bf:f1:61:2e:f5:75:db:01:7c:53:8d:c9:5e:77:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 11 07:42:32 2026 GMT
Not After : Jun 10 07:47:32 2027 GMT
Subject: CN=81D8ED16AD4B83257674D9E0986EF50FD72C7BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:62:b3:2a:76:ed:b1:53:56:76:f7:19:ef:
43:3e:fd:23:97:48:99:c9:5c:20:b6:be:25:b3:bc:
f1:65:27:b8:9b:73:6d:5b:9e:6d:b5:bd:71:e0:30:
df:f5:94:49:dc:b4:98:74:7f:8c:c2:e5:51:2f:4e:
57:c6:d9:76:f7:ca:6c:02:63:e0:b4:15:e9:e1:8e:
25:31:30:c1:1d:b0:ad:80:d3:9b:9a:22:c4:ce:15:
06:54:12:da:17:c6:03:55:bb:14:40:d9:7b:0c:e8:
b8:a7:da:94:d3:4a:e6:d7:16:fd:7a:5e:e9:4e:5f:
48:a7:f1:ed:54:f8:64:79:c9:1b:b0:f0:3e:2d:db:
07:c2:ed:87:8a:fe:26:ca:c9:d8:01:66:00:a6:81:
b9:d3:0c:7c:af:e0:90:c5:4e:64:a4:ba:ba:64:c9:
4d:70:5c:db:35:95:b9:72:d7:94:43:e3:4c:2d:53:
42:23:f8:fe:b7:16:6d:46:a6:94:44:db:8d:95:93:
32:f0:d8:c2:97:bd:33:a5:99:0a:40:de:1a:73:35:
ed:5c:1a:45:af:ed:0b:07:8c:d2:8c:1f:21:9c:b4:
ab:60:00:44:a1:27:ab:4f:56:41:be:a5:d9:92:41:
e7:d8:35:4d:4b:63:98:ec:26:9c:f5:cf:07:12:0a:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:ED:16:AD:4B:83:25:76:74:D9:E0:98:6E:F5:0F:D7:2C:7B:DF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.37.0/24
143.14.127.0/24
155.117.162.0/24
162.141.49.0/24
162.141.64.0/24
162.141.95.0/24
162.141.122.0/24
162.141.165.0/24
167.148.1.0/24
167.148.4.0/23
167.148.10.0/24
167.148.12.0/24
167.148.14.0/24
167.148.29.0-167.148.30.255
167.148.35.0/24
167.148.70.0/24
167.148.100.0/24
167.148.102.0/24
167.148.106.0/24
167.148.116.0/24
167.148.127.0/24
167.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8e:cb:76:79:83:10:51:3f:d5:18:b6:d0:55:e5:e7:86:b2:
dc:c2:1b:cf:63:3f:e4:35:a7:32:52:7d:de:08:24:ad:87:a9:
29:b7:40:94:fe:2d:6c:c2:e9:99:a4:fd:46:3c:a7:65:e9:46:
96:2f:13:29:d7:b9:87:c1:e9:65:ab:b5:1c:57:cb:a4:2b:51:
c8:fd:75:7f:6d:ad:1d:51:56:7b:60:b6:1c:10:cc:83:22:e4:
d1:a7:5e:db:7f:00:13:95:63:05:5c:f5:c9:68:fd:dc:32:17:
21:50:25:0c:65:0e:8e:35:15:db:3e:27:f5:be:1e:5d:02:8c:
b8:ca:0a:10:8e:15:bd:06:9f:f8:8d:b0:94:6e:0e:6f:81:e3:
a0:21:64:7c:fa:cc:7a:97:48:20:03:4d:77:29:f2:b6:bf:26:
a9:6b:04:53:70:87:e3:6d:1b:46:db:ce:06:1d:a7:39:7a:2e:
26:d4:ee:41:70:bf:e2:d4:db:7d:65:bb:4d:4b:8b:e4:b3:d1:
79:78:3f:09:28:57:56:4e:6b:7d:c4:51:68:96:a4:80:c3:e6:
3e:fd:5a:08:e4:e5:ea:d1:7f:76:2b:85:0e:b5:65:e1:0e:09:
66:ca:70:0d:01:d5:55:6b:48:80:1c:32:f7:2d:b3:3d:1a:41:
76:93:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:45:29 2026 by rpki-client