Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: pBVvapI0Jf3VS//YeWmNWrY+CWKI4QbeXMNuAGQ3hX8=
Subject key identifier: 8C:CB:59:FE:F6:4A:DE:92:3C:80:01:4B:68:9B:18:90:85:88:EB:CE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 533F157055223B09517DE9AAE9E73FF8CEBFBE9A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
Signing time: Thu 29 Oct 2026 13:37:49 +0000
ROA not before: Thu 29 Oct 2026 13:32:49 +0000
ROA not after: Thu 28 Oct 2027 13:37:49 +0000
asID: 3257
IP address blocks: 78.105.178.0/24 maxlen: 24
78.105.186.0/24 maxlen: 24
78.105.199.0/24 maxlen: 24
78.105.222.0/24 maxlen: 24
78.105.246.0/24 maxlen: 24
188.220.43.0/24 maxlen: 24
188.220.85.0/24 maxlen: 24
188.221.45.0/24 maxlen: 24
188.221.73.0/24 maxlen: 24
188.221.78.0/24 maxlen: 24
188.221.87.0/24 maxlen: 24
188.221.105.0/24 maxlen: 24
188.221.146.0/24 maxlen: 24
188.221.238.0/24 maxlen: 24
188.221.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3f:15:70:55:22:3b:09:51:7d:e9:aa:e9:e7:3f:f8:ce:bf:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 13:32:49 2026 GMT
Not After : Oct 28 13:37:49 2027 GMT
Subject: CN=8CCB59FEF64ADE923C80014B689B18908588EBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:0b:69:ee:80:cf:8a:04:65:eb:1b:20:3a:
46:33:55:2c:1b:6e:4f:17:8e:16:da:2f:c6:cc:1e:
d3:02:db:26:9c:b8:17:d1:eb:13:81:b6:8b:35:80:
f7:d4:34:4e:80:50:c6:2f:7a:1c:1c:22:1b:b3:89:
62:27:d3:4c:63:71:57:47:f4:5f:11:6b:92:35:c7:
46:17:93:dd:56:86:41:cb:e0:05:42:4c:ed:ba:c6:
de:1b:ff:74:c1:4f:8f:e6:40:87:a4:fd:ca:61:62:
e2:1a:58:3a:eb:7b:b5:ab:0f:63:9c:3d:b1:d3:01:
f4:77:f0:ae:b8:91:3c:fd:42:fb:c1:bb:df:ac:62:
f4:8d:b2:33:25:84:b3:20:1f:04:d2:ed:d2:ef:3b:
15:67:b8:9b:2e:97:bb:47:e3:1d:96:76:05:05:0b:
d9:85:e4:86:67:ec:b4:38:ab:74:69:f4:62:f6:d8:
78:75:88:8f:b8:2d:66:a3:c0:1f:fc:b2:ff:7f:78:
d0:ce:a7:ec:29:ec:f5:8c:69:6f:72:25:ec:c0:a5:
9e:9f:c1:0d:29:10:22:eb:c3:d8:04:3e:60:d8:14:
db:90:03:98:4b:2c:8c:6a:c7:8b:d8:44:5a:f1:2f:
76:67:e6:42:d1:af:9a:f7:96:48:cd:d5:4c:29:1b:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:59:FE:F6:4A:DE:92:3C:80:01:4B:68:9B:18:90:85:88:EB:CE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.178.0/24
78.105.186.0/24
78.105.199.0/24
78.105.222.0/24
78.105.246.0/24
188.220.43.0/24
188.220.85.0/24
188.221.45.0/24
188.221.73.0/24
188.221.78.0/24
188.221.87.0/24
188.221.105.0/24
188.221.146.0/24
188.221.238.0/24
188.221.250.0/24
Signature Algorithm: sha256WithRSAEncryption
99:92:f5:93:1c:e0:8c:9f:a8:3b:0a:41:bf:92:b8:d5:9a:d1:
1d:9f:eb:19:56:be:0d:39:aa:29:e2:ae:ae:57:db:d4:01:9a:
d1:d7:d7:f3:1c:e2:a1:6a:9f:90:b0:dd:7d:f5:d5:61:d4:44:
3d:a5:d5:91:a4:b4:45:b5:1e:38:64:ae:95:53:02:43:8f:fb:
6c:6d:b6:61:ab:76:1c:3c:ab:98:55:7f:cc:b3:0a:ef:66:85:
85:c3:8d:43:39:8e:5d:19:59:b1:d1:25:68:ce:f9:b1:47:ff:
28:55:a4:72:ea:8d:a8:ef:61:af:d7:07:91:65:0f:51:01:a7:
96:2c:2c:87:dd:b4:19:53:00:53:8d:de:ee:98:02:5e:c1:7d:
c9:b4:e0:b3:51:40:2d:9a:cc:d1:b1:22:09:04:ee:e3:aa:f5:
81:7b:93:41:8e:81:6e:1b:b2:e6:85:68:21:1c:35:74:c1:4f:
0f:a0:e2:68:f4:e3:51:55:52:f6:fb:54:d6:8f:b2:7a:ef:ec:
c0:04:36:3a:79:8a:f9:d7:3c:a8:22:1c:48:55:fd:39:91:ce:
f6:b5:e9:60:b8:8c:53:a5:62:84:fb:b5:45:b7:e2:7a:85:30:
64:a3:67:00:29:cb:00:38:8a:0f:3d:fa:2d:18:5c:6d:5a:32:
40:ce:53:5d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUUz8VcFUiOwlRfemq6ec/+M6/vpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMjkxMzMyNDlaFw0yNzEwMjgxMzM3NDlaMDMxMTAvBgNV
BAMTKDhDQ0I1OUZFRjY0QURFOTIzQzgwMDE0QjY4OUIxODkwODU4OEVCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tgtp7oDPigRl6xsgOkYzVSwb
bk8XjhbaL8bMHtMC2yacuBfR6xOBtos1gPfUNE6AUMYvehwcIhuziWIn00xjcVdH
9F8Ra5I1x0YXk91WhkHL4AVCTO26xt4b/3TBT4/mQIek/cphYuIaWDrre7WrD2Oc
PbHTAfR38K64kTz9QvvBu9+sYvSNsjMlhLMgHwTS7dLvOxVnuJsul7tH4x2WdgUF
C9mF5IZn7LQ4q3Rp9GL22Hh1iI+4LWajwB/8sv9/eNDOp+wp7PWMaW9yJezApZ6f
wQ0pECLrw9gEPmDYFNuQA5hLLIxqx4vYRFrxL3Zn5kLRr5r3lkjN1UwpGz0/AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUjMtZ/vZK3pI8gAFLaJsYkIWI684wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzI1Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBzBggrBgEFBQcBBwEB/wRkMGIwYAQCAAEwWgMEAE5psgME
AE5pugMEAE5pxwMEAE5p3gMEAE5p9gMEALzcKwMEALzcVQMEALzdLQMEALzdSQME
ALzdTgMEALzdVwMEALzdaQMEALzdkgMEALzd7gMEALzd+jANBgkqhkiG9w0BAQsF
AAOCAQEAmZL1kxzgjJ+oOwpBv5K41ZrRHZ/rGVa+DTmqKeKurlfb1AGa0dfX8xzi
oWqfkLDdffXVYdREPaXVkaS0RbUeOGSulVMCQ4/7bG22Yat2HDyrmFV/zLMK72aF
hcONQzmOXRlZsdElaM75sUf/KFWkcuqNqO9hr9cHkWUPUQGnliwsh920GVMAU43e
7pgCXsF9ybTgs1FALZrM0bEiCQTu46r1gXuTQY6Bbhuy5oVoIRw1dMFPD6DiaPTj
UVVS9vtU1o+yeu/swAQ2OnmK+dc8qCIcSFX9OZHO9rXpYLiMU6VihPu1RbfieoUw
ZKNnACnLADiKDz36LRhcbVoyQM5TXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:08:01 2026 by rpki-client