Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: Cp7ZHRIumvOgPy82aBYVmrU4QHmQqlryR+/Q5Bj/sV4=
Subject key identifier: AB:8C:F8:CD:55:60:FD:E3:30:DC:E2:9D:4B:2D:F3:62:C6:5C:75:E5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 400EF3779947E13760A034054904B6FB6A6893C7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
Signing time: Wed 01 Apr 2026 00:26:40 +0000
ROA not before: Wed 01 Apr 2026 00:21:40 +0000
ROA not after: Wed 31 Mar 2027 00:26:40 +0000
asID: 3257
IP address blocks: 5.252.77.0/24 maxlen: 24
5.253.202.0/24 maxlen: 24
45.93.47.0/24 maxlen: 24
45.95.23.0/24 maxlen: 24
45.137.30.0/24 maxlen: 24
149.62.43.0/24 maxlen: 24
179.61.163.0/24 maxlen: 24
181.214.8.0/24 maxlen: 24
181.214.186.0/24 maxlen: 24
181.214.206.0/24 maxlen: 24
191.96.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0e:f3:77:99:47:e1:37:60:a0:34:05:49:04:b6:fb:6a:68:93:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 1 00:21:40 2026 GMT
Not After : Mar 31 00:26:40 2027 GMT
Subject: CN=AB8CF8CD5560FDE330DCE29D4B2DF362C65C75E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:9a:18:48:2e:72:dc:51:de:22:39:32:15:
c9:15:50:e3:3d:7e:21:14:34:3a:ff:d3:75:ff:5e:
02:1c:ea:c8:25:88:20:11:d7:58:54:cf:65:86:5a:
e4:44:d0:28:a9:24:83:61:5e:cd:28:d1:a2:a8:e2:
7c:63:a2:ac:a7:33:91:68:d7:24:d2:2f:ed:41:30:
69:3e:b5:39:f7:f7:89:35:32:0f:15:3d:b3:f7:f2:
73:c4:20:56:70:59:81:56:0e:d1:f0:cd:34:5d:9e:
6f:77:97:86:68:fe:12:42:12:93:e6:81:9e:35:65:
a6:cf:51:92:1b:76:c2:0b:b3:52:ab:68:5d:06:39:
ef:fa:43:01:0f:25:49:87:58:fd:0c:9b:d6:11:e5:
76:73:cd:bf:57:59:68:69:2d:d8:f5:61:5d:77:03:
82:35:75:77:c7:ff:d0:5d:b6:3b:df:8e:b1:aa:78:
c7:b2:7e:bc:26:ec:9a:c9:9b:6b:0b:cf:41:43:23:
17:10:d4:c2:bb:7e:ba:8a:47:01:5f:1f:0f:73:67:
02:a6:89:17:5b:1a:08:5e:ce:c9:af:b9:5a:22:7f:
e4:34:26:28:d1:96:65:a9:af:30:be:4c:5b:a4:1a:
34:9b:42:27:4a:06:46:21:81:df:e9:f6:13:00:be:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8C:F8:CD:55:60:FD:E3:30:DC:E2:9D:4B:2D:F3:62:C6:5C:75:E5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.77.0/24
5.253.202.0/24
45.93.47.0/24
45.95.23.0/24
45.137.30.0/24
149.62.43.0/24
179.61.163.0/24
181.214.8.0/24
181.214.186.0/24
181.214.206.0/24
191.96.48.0/24
Signature Algorithm: sha256WithRSAEncryption
15:81:2d:e2:0e:09:98:2d:4c:a3:3b:54:91:97:73:be:b4:27:
c3:92:bf:57:47:7f:e5:6d:ef:12:da:cc:e8:b6:46:a3:13:25:
89:4b:49:91:0c:70:00:a9:8c:95:f6:49:78:76:a2:46:d3:47:
bd:c0:8b:46:f9:c0:31:63:fe:fc:7f:b1:1d:1d:0d:79:d4:d8:
f0:d0:30:17:1d:a4:39:5b:dc:c9:8d:65:f8:ed:59:37:63:44:
04:0d:02:b6:dd:c4:bd:14:6e:08:92:bf:4c:01:58:a0:9d:69:
d7:87:86:3f:be:02:3d:48:89:f5:99:8e:c0:2c:c3:95:ad:bd:
d8:3f:f9:09:71:c9:9e:62:3f:5d:01:8b:9d:06:d1:b3:86:f1:
65:8b:e6:80:d4:75:4c:25:11:b3:e7:54:62:f7:a5:f0:c4:56:
56:89:60:82:f2:81:89:0d:53:8d:65:d7:50:ff:4e:e7:a3:2e:
ae:ea:f7:48:61:93:2c:43:75:ee:52:10:67:10:f5:bd:ee:e0:
44:19:0f:2c:8a:51:0c:33:74:42:43:a9:2a:9b:2e:05:9b:e9:
5a:c1:ef:8d:b0:fb:dc:a2:9f:7d:19:2f:39:02:2d:4f:7f:7b:
cf:b2:77:b0:b0:ba:0f:b6:70:5c:5d:18:e4:41:5e:bd:33:43:
95:fb:8a:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:03 2026 by rpki-client