Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: D6hwJ+kUK/feyfELbnXdxxX28PvBxsV6FlsPHClrjXM=
Subject key identifier: 47:92:5C:2D:C8:66:6F:5A:F9:1D:61:0F:3F:86:08:69:A3:D0:60:1B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07F27FD838FD57C84D6659B664180CF5DA3AD743
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
Signing time: Tue 21 Jul 2026 11:55:59 +0000
ROA not before: Tue 21 Jul 2026 11:50:59 +0000
ROA not after: Tue 20 Jul 2027 11:55:59 +0000
asID: 3257
IP address blocks: 78.105.178.0/24 maxlen: 24
78.105.186.0/24 maxlen: 24
78.105.199.0/24 maxlen: 24
78.105.222.0/24 maxlen: 24
78.105.246.0/24 maxlen: 24
188.220.43.0/24 maxlen: 24
188.221.45.0/24 maxlen: 24
188.221.73.0/24 maxlen: 24
188.221.78.0/24 maxlen: 24
188.221.87.0/24 maxlen: 24
188.221.238.0/24 maxlen: 24
188.221.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f2:7f:d8:38:fd:57:c8:4d:66:59:b6:64:18:0c:f5:da:3a:d7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 21 11:50:59 2026 GMT
Not After : Jul 20 11:55:59 2027 GMT
Subject: CN=47925C2DC8666F5AF91D610F3F860869A3D0601B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:10:37:bd:70:ca:49:1d:90:a2:37:50:6c:
8c:9c:34:63:75:31:0f:f2:4b:2d:08:19:3d:0d:60:
8e:18:13:2b:85:de:aa:f3:93:10:c5:84:aa:0b:fc:
d5:d5:21:45:66:55:74:5d:ed:5c:42:77:12:10:4d:
db:19:70:3c:bb:94:26:7f:b9:54:07:48:ad:01:9a:
e8:1c:2e:77:1a:8e:54:b3:e8:f0:17:5b:57:f1:cb:
4e:5c:71:c1:cb:ed:e0:6c:54:22:1d:f0:d4:b7:9e:
d5:e0:aa:ba:96:b9:eb:f1:27:71:8c:d9:18:f5:41:
a9:21:92:f7:72:79:f0:91:cd:c1:63:0c:a4:59:63:
2a:80:9d:08:84:15:29:ee:c5:bb:df:27:c3:80:ef:
b9:9d:24:0a:67:28:8a:df:64:aa:a4:69:17:c9:19:
63:ab:06:e3:68:2c:2e:5e:c7:2a:53:58:5e:d6:08:
c6:2c:9d:17:6c:f7:f6:66:7f:84:a6:cd:5e:d5:b3:
14:4e:35:ba:b4:4e:8c:6f:57:bd:29:7f:08:2b:14:
41:14:6f:a2:c7:5c:0d:32:d5:76:69:f7:6d:72:1b:
a9:e1:a1:6e:42:ba:32:52:7b:b2:54:20:fa:c2:3b:
36:2c:97:a0:4a:f8:3e:09:45:44:aa:d2:00:7d:da:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:5C:2D:C8:66:6F:5A:F9:1D:61:0F:3F:86:08:69:A3:D0:60:1B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.178.0/24
78.105.186.0/24
78.105.199.0/24
78.105.222.0/24
78.105.246.0/24
188.220.43.0/24
188.221.45.0/24
188.221.73.0/24
188.221.78.0/24
188.221.87.0/24
188.221.238.0/24
188.221.250.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a2:9e:25:ec:3f:29:62:c1:3a:56:bc:5b:b0:b3:0f:2c:bc:
05:2b:b9:94:db:76:3d:28:1e:a5:e5:44:6a:7e:e5:6f:48:8b:
70:d8:87:54:d6:dd:f2:05:ee:62:0a:4a:2c:ac:56:65:26:30:
ff:e5:bc:3e:41:b5:dd:89:ac:0f:47:cd:14:1f:85:24:56:c0:
fb:3c:e9:e3:00:e9:1d:b3:f9:24:1f:0a:4c:b4:5b:62:65:50:
6e:2e:5f:29:c0:4f:93:1b:5c:83:c8:65:3d:1c:d1:bf:34:60:
13:f5:a6:5e:0b:07:6a:12:87:77:fa:ea:85:ff:fa:2e:13:b9:
71:d6:64:20:2b:76:0a:d4:8e:75:60:fe:57:a8:9c:1c:a1:63:
48:73:32:25:1e:80:41:a5:5c:14:13:e0:28:0d:08:2a:8c:e3:
d4:6d:4b:6f:15:45:be:57:52:a1:70:ce:87:bf:17:53:10:08:
53:a2:71:3b:0d:70:e3:fc:d5:64:79:d7:7e:df:58:ec:24:9c:
3a:9d:54:30:75:38:71:5c:7d:ff:de:3a:b3:e0:10:87:9d:3f:
1a:e3:cd:c7:c1:fa:8b:8f:cc:26:18:a8:a2:98:75:1a:4a:b0:
f7:f5:a2:2b:a9:6c:d2:6f:c8:c8:ac:11:d2:b0:ca:3f:9e:44:
3e:fb:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:29 2026 by rpki-client