Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: /Ik3uiXOBzQ90cGs3rMFQdemK76Gy/cPGAkNRGsQ5zM=
Subject key identifier: E9:54:A7:1E:5F:85:D6:6D:61:25:3F:D3:79:D8:F4:AF:08:56:B7:0E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2070CC1EF0715AB8563F2CBD5541157082B3337B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
Signing time: Tue 01 Sep 2026 00:06:55 +0000
ROA not before: Tue 01 Sep 2026 00:01:55 +0000
ROA not after: Tue 31 Aug 2027 00:06:55 +0000
asID: 3257
IP address blocks: 5.252.77.0/24 maxlen: 24
5.253.202.0/24 maxlen: 24
45.137.30.0/24 maxlen: 24
149.62.43.0/24 maxlen: 24
179.61.163.0/24 maxlen: 24
181.214.8.0/24 maxlen: 24
181.214.186.0/24 maxlen: 24
181.214.206.0/24 maxlen: 24
191.96.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:70:cc:1e:f0:71:5a:b8:56:3f:2c:bd:55:41:15:70:82:b3:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 00:01:55 2026 GMT
Not After : Aug 31 00:06:55 2027 GMT
Subject: CN=E954A71E5F85D66D61253FD379D8F4AF0856B70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:fa:52:4b:52:8e:54:15:67:9c:de:ab:12:
8a:66:23:85:ce:40:91:51:7d:02:c5:7e:84:8a:e3:
83:6d:c4:f5:1c:64:6e:13:b3:08:dd:cb:17:26:a5:
28:eb:34:d1:2b:ae:ae:4e:e2:18:73:c8:a5:85:ee:
d3:fd:67:9b:49:8f:59:1a:5d:3a:e6:e4:fb:56:9c:
87:03:f8:a0:47:11:68:e4:c0:2d:08:a3:18:61:73:
9a:63:a7:d5:67:d2:fe:53:6f:47:e9:8c:89:7d:2f:
ae:95:9f:52:6a:11:c8:73:ea:b3:9b:57:bc:a0:10:
97:5f:7f:c6:16:c8:ab:9b:01:bb:bb:fc:f2:3c:e6:
e4:5d:f2:15:4c:52:46:3d:43:94:de:8d:15:4d:3b:
6e:e5:2c:7b:cd:60:c7:2c:4e:c3:c5:7a:d0:dc:28:
c8:73:f7:3e:57:ea:d3:76:1d:c2:25:4a:91:74:16:
c4:ab:47:c1:88:ca:3b:2e:82:05:ea:1d:03:7d:e9:
12:a8:cf:21:58:85:6e:6e:47:df:6b:bd:50:03:28:
20:69:44:5b:3b:f3:16:f7:9e:e5:0e:27:7b:50:7c:
f3:b9:3a:a1:e9:78:5c:95:cb:ac:17:45:5f:01:09:
8e:1b:26:07:af:ef:05:bb:54:c8:c2:5c:14:6e:b3:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:54:A7:1E:5F:85:D6:6D:61:25:3F:D3:79:D8:F4:AF:08:56:B7:0E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.77.0/24
5.253.202.0/24
45.137.30.0/24
149.62.43.0/24
179.61.163.0/24
181.214.8.0/24
181.214.186.0/24
181.214.206.0/24
191.96.48.0/24
Signature Algorithm: sha256WithRSAEncryption
20:17:b1:b2:8f:af:ca:48:81:dc:20:5f:6f:a7:ed:c1:a9:47:
f0:55:01:55:77:c9:e7:18:91:76:c5:42:fe:40:33:22:3f:70:
4d:16:6d:07:38:1a:49:3e:e6:44:a6:11:c2:b3:07:60:8a:b6:
32:9a:5e:f7:75:24:ae:91:2d:4f:b2:7d:28:7c:75:b1:bc:13:
f2:80:8d:0b:eb:8f:3d:03:aa:fe:b9:8e:b3:20:68:d2:86:6d:
b0:f9:94:d1:76:a8:32:42:4c:17:c0:0d:8b:83:21:0b:4a:b1:
78:54:54:3d:63:e5:2a:06:82:a8:e2:f1:9d:d1:36:05:86:d5:
a8:9d:c7:f8:cb:7f:c3:b8:6d:ee:27:ed:95:fe:a9:47:e0:fa:
68:72:3f:56:a9:d1:9a:d2:4f:6b:f5:e9:12:88:fc:3b:96:f9:
11:e2:f2:05:a1:3a:6d:e0:b0:99:92:4d:bb:a1:5f:b3:56:80:
dd:9e:80:46:a0:52:0e:c7:15:bf:96:83:b9:9c:85:56:5a:86:
17:d3:ed:84:9d:24:47:53:42:b7:34:23:f7:ad:55:35:30:37:
af:27:19:a4:6d:38:bf:ee:49:8e:7c:ae:74:c9:60:ca:28:a5:
bd:b2:20:f3:be:41:d1:ce:7b:5e:22:22:40:37:4b:e6:46:a3:
59:ab:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:18:37 2026 by rpki-client