Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: VY0t9NXVzGCSCgH80tGYdkuYdLDrQQ0U49slJ+Ii1IQ=
Subject key identifier: E0:10:27:0E:63:5F:DC:AA:5E:8C:F7:81:A6:BE:8E:DB:EB:7F:86:67
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 55464766A48F7F94D4CD5CB98D4F0763A798D0B8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Mon 16 Jun 2025 10:35:19 +0000
ROA not before: Mon 16 Jun 2025 10:30:19 +0000
ROA not after: Mon 15 Jun 2026 10:35:19 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:46:47:66:a4:8f:7f:94:d4:cd:5c:b9:8d:4f:07:63:a7:98:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 16 10:30:19 2025 GMT
Not After : Jun 15 10:35:19 2026 GMT
Subject: CN=E010270E635FDCAA5E8CF781A6BE8EDBEB7F8667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:c5:a1:d2:48:4a:a9:88:2e:05:fa:de:85:
52:27:52:f8:f1:65:06:f7:fd:45:b4:ec:99:13:5d:
9e:e2:f3:32:16:92:eb:47:13:19:7e:04:de:66:51:
6b:36:c3:64:52:a5:ea:fd:de:b7:32:a3:86:22:47:
6b:5f:9b:18:26:34:e2:37:5d:10:a0:a9:68:26:bf:
2f:36:e9:0b:bc:4e:1e:24:e6:7d:ee:f7:91:01:a4:
40:eb:74:0c:1d:03:00:62:0a:5b:60:85:33:48:1b:
9c:1b:a0:76:d6:45:67:72:3a:3f:a0:b7:ea:4e:20:
5d:92:86:e9:3e:12:2b:c6:63:ce:54:48:35:a8:9b:
c2:88:7f:7b:4b:6e:05:62:51:60:df:dd:31:b2:2c:
a5:35:14:d1:1c:05:f1:f6:51:c4:84:75:02:6b:3c:
7c:f8:2d:1b:ae:a6:5b:80:11:52:df:4c:88:92:93:
11:1f:fe:c3:58:81:85:79:a1:a8:1c:68:81:9d:4a:
cd:98:9f:6b:b1:04:12:7f:7b:88:58:07:ad:59:15:
c9:9e:d8:ba:b6:c5:a8:29:9f:3d:b2:d4:9b:68:01:
88:c3:06:73:58:9c:68:6e:ff:9c:2d:66:2e:47:80:
e1:47:7f:db:98:ff:0c:fd:c5:03:ce:f5:c9:6b:b7:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:27:0E:63:5F:DC:AA:5E:8C:F7:81:A6:BE:8E:DB:EB:7F:86:67
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:38:20:9f:f7:3a:08:cf:be:91:b5:fc:18:0b:67:84:26:7e:
c2:79:2a:13:2d:a2:77:3d:13:08:d6:44:b3:cd:8e:5a:ae:63:
d2:8d:68:74:5e:51:ee:67:e3:2c:90:91:5a:4e:aa:66:b2:76:
e0:9b:3b:08:93:62:63:0d:7b:63:8e:47:41:da:e9:32:2e:83:
55:2c:d2:67:84:70:c5:ca:31:75:0e:f5:e5:74:c0:75:f7:fe:
3e:ed:6c:19:90:c5:dd:4b:b3:b9:04:7f:16:ce:01:4a:8b:af:
79:a4:cc:5e:0b:b6:d3:5c:00:90:9c:81:30:58:7a:2c:03:1c:
63:03:ac:22:f9:35:d0:3b:56:8a:72:b2:f5:b6:6c:5a:d2:8b:
a7:72:62:a2:70:0d:b5:1b:52:f6:da:2d:fc:c5:29:2d:1a:3d:
d5:17:05:9d:58:79:5f:00:cb:a0:c3:9e:43:fd:10:1c:b1:9d:
15:5b:0b:35:a8:3e:30:f5:3a:28:76:87:ec:7d:1a:47:9f:4a:
7c:53:da:e6:f0:41:90:e9:ed:45:d7:99:f1:90:4d:aa:50:4d:
6f:32:94:c4:3e:11:f2:05:e9:e5:eb:b7:8d:fe:af:4c:b0:fd:
8b:5f:ff:9b:b7:a2:99:2e:52:08:7d:9b:3d:28:df:08:74:f1:
bd:11:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:53:58 2025 by rpki-client