Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: Cx0l/dMR8vnlx9r+xVl1bI5Cn58mMvGPJfYzPiji88U=
Subject key identifier: 9D:46:30:16:F6:E8:D1:31:46:AB:39:E8:AC:58:D7:53:A8:AA:FC:45
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 515A8EC5A68FA30F4D92349103D01C20859882BA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
Signing time: Thu 12 Nov 2026 12:48:36 +0000
ROA not before: Thu 12 Nov 2026 12:43:36 +0000
ROA not after: Thu 11 Nov 2027 12:48:36 +0000
asID: 3257
IP address blocks: 96.62.207.0/24 maxlen: 24
143.14.37.0/24 maxlen: 24
143.14.127.0/24 maxlen: 24
155.117.162.0/24 maxlen: 24
162.141.49.0/24 maxlen: 24
162.141.64.0/24 maxlen: 24
162.141.95.0/24 maxlen: 24
162.141.122.0/24 maxlen: 24
162.141.165.0/24 maxlen: 24
167.148.1.0/24 maxlen: 24
167.148.4.0/24 maxlen: 24
167.148.5.0/24 maxlen: 24
167.148.10.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.14.0/24 maxlen: 24
167.148.29.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.35.0/24 maxlen: 24
167.148.70.0/24 maxlen: 24
167.148.100.0/24 maxlen: 24
167.148.102.0/24 maxlen: 24
167.148.106.0/24 maxlen: 24
167.148.116.0/24 maxlen: 24
167.148.127.0/24 maxlen: 24
167.148.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5a:8e:c5:a6:8f:a3:0f:4d:92:34:91:03:d0:1c:20:85:98:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 12 12:43:36 2026 GMT
Not After : Nov 11 12:48:36 2027 GMT
Subject: CN=9D463016F6E8D13146AB39E8AC58D753A8AAFC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:27:8e:c9:de:bd:f1:aa:b9:ed:0b:3e:ca:
fa:b3:5c:fa:82:fc:dc:d7:75:90:b5:9a:f8:c6:93:
0f:04:fd:a1:5a:12:90:9a:4b:de:fa:15:01:64:6c:
bf:ed:7c:b8:8e:f0:30:90:9d:0d:00:2c:33:6e:d9:
72:d2:2b:a5:39:36:3e:e0:4e:9b:a0:57:51:02:e9:
fe:80:c4:63:97:28:47:4b:32:ee:79:4d:76:de:1b:
67:46:43:fb:d1:ec:89:e8:9c:e2:8f:31:a6:92:ad:
34:75:22:25:92:13:b5:2c:cc:34:1b:71:a0:63:0d:
7e:e2:ce:5a:ab:b3:c6:9f:07:29:3e:64:20:1d:96:
6e:e9:f5:b2:46:59:29:2f:5f:2c:53:9c:bb:1a:91:
06:bd:04:e6:bb:a3:eb:6c:c5:ca:54:27:99:04:12:
db:e7:2f:f4:10:3c:f4:c4:4f:d6:ba:29:2e:fd:6b:
82:0a:cf:39:b2:7f:1d:12:aa:1b:21:76:3c:f7:a5:
04:ed:2d:bc:c4:33:b7:63:be:ca:a5:b1:7a:20:e3:
06:bb:4f:87:64:aa:c2:2d:22:bf:01:04:dd:12:ff:
e9:ce:10:94:4c:0b:8b:7c:55:5d:c7:4d:95:6f:f4:
e7:b5:7c:f9:a0:df:33:17:09:35:d2:8f:88:31:1f:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:30:16:F6:E8:D1:31:46:AB:39:E8:AC:58:D7:53:A8:AA:FC:45
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.207.0/24
143.14.37.0/24
143.14.127.0/24
155.117.162.0/24
162.141.49.0/24
162.141.64.0/24
162.141.95.0/24
162.141.122.0/24
162.141.165.0/24
167.148.1.0/24
167.148.4.0/23
167.148.10.0/24
167.148.12.0/24
167.148.14.0/24
167.148.29.0-167.148.30.255
167.148.35.0/24
167.148.70.0/24
167.148.100.0/24
167.148.102.0/24
167.148.106.0/24
167.148.116.0/24
167.148.127.0/24
167.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
49:68:ae:3a:f8:9a:4b:19:b5:10:2f:c5:6b:c8:a8:7a:68:62:
b9:4c:5b:06:dd:7d:19:f7:5f:66:84:cd:8f:64:36:b2:04:2f:
ad:b5:f3:58:b7:65:63:5f:f3:6a:c9:8c:2e:36:63:f1:d6:c8:
02:be:03:c7:d2:4e:56:7f:aa:19:29:77:d7:33:7e:7c:e1:e8:
2f:01:08:4b:e1:5b:47:4f:9b:54:33:72:8e:f0:06:33:78:75:
f8:60:fa:c5:d2:20:44:e9:c3:9d:05:49:40:99:9a:63:e2:11:
2f:f0:b9:ef:00:77:46:93:c9:f4:57:06:83:3f:fc:9a:20:12:
7a:34:f2:0a:e7:5b:cb:3b:7e:35:36:df:9d:73:95:ef:56:c0:
33:b6:36:af:b0:13:cd:22:87:99:ae:b9:8f:07:65:f3:4f:33:
57:2c:8b:c2:24:90:ac:40:fd:d0:20:a6:b2:03:41:fb:b9:41:
27:6d:0f:74:84:fb:26:bf:b7:1b:28:b8:ce:3b:e1:72:51:20:
0b:3e:1c:f8:22:ba:17:85:34:02:6f:3a:db:a4:b6:f2:ef:eb:
32:d7:1e:13:0b:7a:f0:16:14:59:31:57:a4:4c:c1:84:7a:66:
f4:de:e8:bd:0c:9f:4c:3d:71:51:ea:1d:b8:d4:4c:ed:f9:92:
7d:02:2f:ec
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUUVqOxaaPow9NkjSRA9AcIIWYgrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMTIxMjQzMzZaFw0yNzExMTExMjQ4MzZaMDMxMTAvBgNV
BAMTKDlENDYzMDE2RjZFOEQxMzE0NkFCMzlFOEFDNThENzUzQThBQUZDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCCeOyd698aq57Qs+yvqzXPqC
/NzXdZC1mvjGkw8E/aFaEpCaS976FQFkbL/tfLiO8DCQnQ0ALDNu2XLSK6U5Nj7g
TpugV1EC6f6AxGOXKEdLMu55TXbeG2dGQ/vR7InonOKPMaaSrTR1IiWSE7UszDQb
caBjDX7izlqrs8afByk+ZCAdlm7p9bJGWSkvXyxTnLsakQa9BOa7o+tsxcpUJ5kE
EtvnL/QQPPTET9a6KS79a4IKzzmyfx0Sqhshdjz3pQTtLbzEM7djvsqlsXog4wa7
T4dkqsItIr8BBN0S/+nOEJRMC4t8VV3HTZVv9Oe1fPmg3zMXCTXSj4gxH5pvAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUnUYwFvbo0TFGqznorFjXU6iq/EUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzI1Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBrwYIKwYBBQUHAQcBAf8EgZ8wgZwwgZkEAgABMIGSAwQA
YD7PAwQAjw4lAwQAjw5/AwQAm3WiAwQAoo0xAwQAoo1AAwQAoo1fAwQAoo16AwQA
oo2lAwQAp5QBAwQBp5QEAwQAp5QKAwQAp5QMAwQAp5QOMAwDBACnlB0DBACnlB4D
BACnlCMDBACnlEYDBACnlGQDBACnlGYDBACnlGoDBACnlHQDBACnlH8DBACnlL8w
DQYJKoZIhvcNAQELBQADggEBAElorjr4mksZtRAvxWvIqHpoYrlMWwbdfRn3X2aE
zY9kNrIEL62181i3ZWNf82rJjC42Y/HWyAK+A8fSTlZ/qhkpd9czfnzh6C8BCEvh
W0dPm1Qzco7wBjN4dfhg+sXSIETpw50FSUCZmmPiES/wue8Ad0aTyfRXBoM//Jog
Eno08grnW8s7fjU2351zle9WwDO2Nq+wE80ih5muuY8HZfNPM1csi8IkkKxA/dAg
prIDQfu5QSdtD3SE+ya/txsouM474XJRIAs+HPgiuheFNAJvOtuktvLv6zLXHhML
evAWFFkxV6RMwYR6ZvTe6L0Mn0w9cVHqHbjUTO35kn0CL+w=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:07:33 2026 by rpki-client