Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: Syd4Qvno9solulIVNpTXtI2dXuRYBAmHyXwle3PoH68=
Subject key identifier: 82:43:60:AB:A6:3D:6A:E0:21:E7:8E:ED:75:6B:D4:B0:DE:78:D9:4F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7DEA833CF4FCABDAF83B88A2F07F6C527B23976C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Wed 25 Feb 2026 08:29:23 +0000
ROA not before: Wed 25 Feb 2026 08:24:23 +0000
ROA not after: Wed 24 Feb 2027 08:29:23 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
95.134.30.0/24 maxlen: 24
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
178.95.116.0/22 maxlen: 24
178.95.159.0/24 maxlen: 24
178.95.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:83:3c:f4:fc:ab:da:f8:3b:88:a2:f0:7f:6c:52:7b:23:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 25 08:24:23 2026 GMT
Not After : Feb 24 08:29:23 2027 GMT
Subject: CN=824360ABA63D6AE021E78EED756BD4B0DE78D94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:db:04:8a:b7:a9:f7:3c:54:9c:08:0b:e0:
97:41:32:65:67:11:f4:75:f0:9f:84:5a:e5:d5:80:
04:57:50:89:ec:e0:cc:58:43:23:fb:95:ac:45:71:
60:f8:e4:28:8b:37:6c:6e:12:6e:a2:27:5b:c1:04:
ef:da:58:15:6d:03:af:cf:58:72:bf:21:0e:04:b2:
e2:2e:27:cd:a0:32:f0:72:52:fe:c4:8a:fb:5a:7e:
51:59:7a:e9:9d:ab:b6:b7:cc:f8:5a:ba:e7:b3:38:
3d:53:87:8d:f2:db:b3:2e:43:28:54:0d:15:42:1d:
3a:c4:ff:cb:a3:5a:be:ec:97:11:fb:37:55:1b:93:
bf:c1:4f:9c:ab:74:a4:50:d6:64:2b:61:37:45:26:
ae:41:03:1a:ac:e9:38:f6:13:8f:0d:ca:0a:d5:52:
fb:20:4a:a0:68:28:20:66:5a:cf:1e:fa:92:fa:0d:
f2:57:7d:93:3b:e7:8e:1c:8e:5c:25:85:d0:80:ce:
9f:9e:ab:f1:2f:14:79:ca:b2:f4:e5:f9:ca:cf:a9:
72:a6:61:11:aa:ca:98:43:d7:da:3e:db:f4:83:c8:
1c:87:dd:b2:15:8c:bd:24:de:ca:f0:98:b5:a7:ab:
e3:cf:9c:ba:7f:e7:84:ae:d3:c1:34:4d:be:df:fa:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:60:AB:A6:3D:6A:E0:21:E7:8E:ED:75:6B:D4:B0:DE:78:D9:4F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
95.134.30.0/24
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
178.95.116.0/22
178.95.159.0/24
178.95.240.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d1:b8:de:ce:fd:cd:c6:16:f6:5a:ea:67:79:a8:75:bc:80:
2f:29:06:27:66:49:9a:70:a5:ce:b0:6b:a5:cc:e6:c7:fa:85:
34:ba:82:de:9a:f7:62:5d:c8:e9:36:5d:c9:16:07:06:a2:b2:
6e:c2:95:16:c2:88:99:96:87:b2:c7:26:02:e3:c3:01:43:47:
a2:27:82:24:d2:a4:79:9e:71:41:a2:ef:1b:c6:bb:a1:da:8b:
68:c6:d7:e6:62:d4:0d:9a:c6:16:db:0b:4e:0a:f4:dd:8f:3a:
db:27:e1:74:dd:cd:62:dc:88:3d:e0:8a:b9:ce:bc:bc:ee:00:
e7:28:3e:5a:7c:77:ac:b6:99:9b:12:72:49:25:71:0a:d9:41:
45:97:9a:a2:db:d7:e0:84:53:02:78:ae:c7:b3:8e:61:42:34:
84:3a:70:3a:08:aa:d2:d5:87:38:97:f2:73:6a:21:f9:be:d9:
99:4b:2c:c3:81:e9:63:be:54:d2:74:a7:23:4f:70:db:51:6d:
1b:54:a4:ef:02:f6:92:8c:bd:5e:92:eb:cc:92:0d:75:af:f9:
14:bf:13:60:cc:8a:86:83:e3:d1:0c:3c:7f:30:f7:26:13:44:
7b:9e:8a:07:c1:a2:f8:fd:67:3b:73:5d:59:da:9c:d0:d2:60:
00:19:b0:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:56 2026 by rpki-client