Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: NB1bbwXWVeXqgZgWc07ZN9eSYscYvbfSdFelLFjcw30=
Subject key identifier: 2B:E9:56:45:24:EE:C1:B2:B9:DC:20:FA:16:01:17:DC:78:D0:2D:09
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7437CC845C10938E92D4083EF1E856318B2E1671
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
Signing time: Tue 15 Sep 2026 13:54:08 +0000
ROA not before: Tue 15 Sep 2026 13:49:08 +0000
ROA not after: Tue 14 Sep 2027 13:54:08 +0000
asID: 3257
IP address blocks: 78.105.178.0/24 maxlen: 24
78.105.186.0/24 maxlen: 24
78.105.199.0/24 maxlen: 24
78.105.222.0/24 maxlen: 24
78.105.246.0/24 maxlen: 24
188.220.43.0/24 maxlen: 24
188.221.45.0/24 maxlen: 24
188.221.73.0/24 maxlen: 24
188.221.78.0/24 maxlen: 24
188.221.87.0/24 maxlen: 24
188.221.105.0/24 maxlen: 24
188.221.146.0/24 maxlen: 24
188.221.238.0/24 maxlen: 24
188.221.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:37:cc:84:5c:10:93:8e:92:d4:08:3e:f1:e8:56:31:8b:2e:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 15 13:49:08 2026 GMT
Not After : Sep 14 13:54:08 2027 GMT
Subject: CN=2BE9564524EEC1B2B9DC20FA160117DC78D02D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:d0:84:14:bf:ba:00:2e:02:55:1f:4e:e1:
dc:5e:38:3c:8d:dc:c3:54:b8:89:4d:16:17:26:13:
91:1a:e9:be:ea:48:9a:d6:a1:4f:36:62:60:49:4e:
74:db:db:8a:08:cf:4c:cb:b0:25:dc:2c:da:23:04:
df:8b:34:05:69:9c:09:58:56:41:48:a5:cf:39:fd:
5d:23:d5:ff:71:7b:d6:b2:b2:99:a8:39:fd:4e:c0:
0a:20:52:d0:24:1e:2c:68:d3:1a:85:fa:f8:13:62:
f6:dc:15:66:24:3a:b4:12:9a:8a:af:d7:ad:4c:52:
ff:d2:db:d8:a0:98:aa:bc:f6:83:43:fc:27:26:92:
76:2b:7d:53:77:0f:2f:58:d7:a6:7e:b7:1e:83:c1:
88:83:7a:4b:7c:96:f3:83:b9:ac:94:a7:43:c5:b0:
2b:01:85:e9:5c:69:0f:af:78:b4:78:77:a5:38:43:
2a:3c:f8:d5:6f:4c:cb:cd:99:a9:bd:eb:e8:09:75:
14:d8:f9:91:b8:d5:85:55:1c:05:0c:c3:da:de:2b:
34:c2:af:d2:f0:2e:45:a8:fe:a1:a1:05:1d:d3:85:
5c:0c:e5:75:a1:e9:2f:f5:62:91:0c:69:7a:6b:51:
c0:95:f3:62:74:7d:be:b3:c8:0a:a4:71:8f:a4:56:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:56:45:24:EE:C1:B2:B9:DC:20:FA:16:01:17:DC:78:D0:2D:09
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.178.0/24
78.105.186.0/24
78.105.199.0/24
78.105.222.0/24
78.105.246.0/24
188.220.43.0/24
188.221.45.0/24
188.221.73.0/24
188.221.78.0/24
188.221.87.0/24
188.221.105.0/24
188.221.146.0/24
188.221.238.0/24
188.221.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f7:18:4e:28:b4:f3:e9:d3:e5:f3:fe:a1:0d:e5:c9:a0:af:
c9:4f:7a:bf:f9:ce:b3:22:89:9f:25:de:65:f5:a1:ba:8d:2e:
50:a7:d6:10:b9:be:44:b9:7c:a2:13:c5:44:d1:24:dd:c8:49:
30:74:ef:98:91:b6:17:a6:62:a4:b0:60:e1:31:d7:6c:93:ee:
91:db:96:59:01:06:6f:bc:af:af:2d:99:19:5c:b1:88:fb:c9:
0d:0f:29:87:3a:da:62:ea:51:da:ea:3e:ac:01:9b:c8:34:a1:
6d:b2:20:ef:7b:be:43:ec:72:a6:78:3c:1b:4c:4a:8c:db:bf:
35:1e:c3:06:3e:38:ef:b1:bb:2e:ac:62:69:59:61:38:f6:96:
61:6c:32:25:13:57:f5:57:fd:17:67:b0:ec:f0:d5:5f:04:76:
ca:a1:ee:9a:ca:f4:95:6c:e5:4a:40:8d:29:52:93:64:12:a7:
b2:13:d7:cf:2c:5e:54:e1:42:3b:b0:d3:45:49:ce:72:50:c1:
2b:31:8b:60:cf:61:69:71:e3:2a:85:5c:aa:85:30:d4:50:33:
22:42:a5:88:59:e5:af:6f:ae:fa:3a:8a:10:83:e7:90:e7:75:
6d:ba:11:2b:0a:3e:7f:72:be:6e:64:a1:8d:3a:cc:cd:01:0d:
16:07:da:f9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUdDfMhFwQk46S1Ag+8ehWMYsuFnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTUxMzQ5MDhaFw0yNzA5MTQxMzU0MDhaMDMxMTAvBgNV
BAMTKDJCRTk1NjQ1MjRFRUMxQjJCOURDMjBGQTE2MDExN0RDNzhEMDJEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfdCEFL+6AC4CVR9O4dxeODyN
3MNUuIlNFhcmE5Ea6b7qSJrWoU82YmBJTnTb24oIz0zLsCXcLNojBN+LNAVpnAlY
VkFIpc85/V0j1f9xe9ayspmoOf1OwAogUtAkHixo0xqF+vgTYvbcFWYkOrQSmoqv
161MUv/S29igmKq89oND/CcmknYrfVN3Dy9Y16Z+tx6DwYiDekt8lvODuayUp0PF
sCsBhelcaQ+veLR4d6U4Qyo8+NVvTMvNmam96+gJdRTY+ZG41YVVHAUMw9reKzTC
r9LwLkWo/qGhBR3ThVwM5XWh6S/1YpEMaXprUcCV82J0fb6zyAqkcY+kVt4DAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUK+lWRSTuwbK53CD6FgEX3HjQLQkwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzI1Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wReMFwwWgQCAAEwVAMEAE5psgME
AE5pugMEAE5pxwMEAE5p3gMEAE5p9gMEALzcKwMEALzdLQMEALzdSQMEALzdTgME
ALzdVwMEALzdaQMEALzdkgMEALzd7gMEALzd+jANBgkqhkiG9w0BAQsFAAOCAQEA
evcYTii08+nT5fP+oQ3lyaCvyU96v/nOsyKJnyXeZfWhuo0uUKfWELm+RLl8ohPF
RNEk3chJMHTvmJG2F6ZipLBg4THXbJPukduWWQEGb7yvry2ZGVyxiPvJDQ8phzra
YupR2uo+rAGbyDShbbIg73u+Q+xypng8G0xKjNu/NR7DBj4477G7LqxiaVlhOPaW
YWwyJRNX9Vf9F2ew7PDVXwR2yqHumsr0lWzlSkCNKVKTZBKnshPXzyxeVOFCO7DT
RUnOclDBKzGLYM9haXHjKoVcqoUw1FAzIkKliFnlr2+u+jqKEIPnkOd1bboRKwo+
f3K+bmShjTrMzQENFgfa+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:59:30 2026 by rpki-client