Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: HYSzB/OjQBRCZ314J4JxJ/RRWtXPH11mraUF1usO1XY=
Subject key identifier: C0:C3:79:28:8D:16:E6:9F:0B:E9:F9:4C:96:8F:42:2A:F4:B2:EA:D3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 09530046ECFAE6EBC79198AF0648D2E57EFD5525
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
Signing time: Mon 27 Apr 2026 18:53:07 +0000
ROA not before: Mon 27 Apr 2026 18:48:07 +0000
ROA not after: Mon 26 Apr 2027 18:53:07 +0000
asID: 3257
IP address blocks: 46.202.54.0/24 maxlen: 24
46.202.56.0/24 maxlen: 24
95.134.30.0/24 maxlen: 24
95.134.236.0/22 maxlen: 22
178.92.131.0/24 maxlen: 24
178.92.133.0/24 maxlen: 24
178.92.148.0/24 maxlen: 24
178.92.155.0/24 maxlen: 24
178.93.244.0/24 maxlen: 24
178.94.128.0/21 maxlen: 21
178.95.116.0/22 maxlen: 24
178.95.159.0/24 maxlen: 24
178.95.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:53:00:46:ec:fa:e6:eb:c7:91:98:af:06:48:d2:e5:7e:fd:55:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 27 18:48:07 2026 GMT
Not After : Apr 26 18:53:07 2027 GMT
Subject: CN=C0C379288D16E69F0BE9F94C968F422AF4B2EAD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:85:f9:7d:39:66:8c:09:f0:56:22:3a:d8:
14:e4:ff:fa:63:33:ec:dc:be:3e:1f:f7:17:72:dd:
61:49:6d:4e:0b:a1:6c:92:3d:9c:82:74:d0:19:17:
3b:e7:3b:17:84:8c:f8:1c:72:23:89:59:c3:54:93:
06:5d:99:54:75:5f:de:c8:b7:cf:44:1e:c2:88:d3:
63:7b:ab:d7:03:ac:c8:b5:bd:61:32:a6:f3:7a:a9:
4c:36:5c:c8:47:73:cd:00:48:01:4d:d1:af:47:3a:
eb:4d:32:de:70:eb:cc:23:3b:b4:5a:f5:c9:77:1a:
80:6e:02:12:a7:22:40:4b:93:f7:79:a5:37:0a:e7:
7d:31:26:64:d7:02:70:6e:8e:dd:3e:12:c7:b8:33:
85:0d:2a:ff:cf:2d:1a:a3:36:82:e6:f2:ef:b2:9e:
5f:cd:b0:e3:4f:03:6c:ec:92:02:cb:e0:e7:f4:70:
92:d7:ae:ec:7e:31:8e:b8:a2:b8:36:ee:b4:fe:20:
e4:ed:f4:58:ce:5b:ae:1a:31:72:d1:83:30:62:cc:
c0:02:cb:23:60:ef:5f:3c:39:77:fa:84:70:a1:a0:
bb:22:5f:02:fb:74:94:aa:86:14:62:e3:19:0d:85:
53:7b:8b:4e:5a:e0:45:0f:38:82:a5:c8:2c:25:6d:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:79:28:8D:16:E6:9F:0B:E9:F9:4C:96:8F:42:2A:F4:B2:EA:D3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.54.0/24
46.202.56.0/24
95.134.30.0/24
95.134.236.0/22
178.92.131.0/24
178.92.133.0/24
178.92.148.0/24
178.92.155.0/24
178.93.244.0/24
178.94.128.0/21
178.95.116.0/22
178.95.159.0/24
178.95.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0d:f4:c7:b6:3d:3c:13:77:f1:ab:01:9a:0c:d0:f6:d4:82:
f8:4e:53:5b:55:86:fb:ec:d6:95:83:fd:95:5b:1c:7e:cb:4b:
54:f7:46:00:96:f3:70:a8:62:fd:39:25:f3:ce:af:e1:e6:8f:
c3:1f:4e:fb:59:2e:14:21:09:a9:5d:8e:6b:92:a0:42:c6:25:
33:f8:d0:82:6c:a1:da:26:71:f8:b9:9f:4f:54:1d:58:12:c4:
c7:da:50:b3:6c:82:cf:ed:8f:de:c4:d4:a6:37:e2:67:b3:66:
1e:d2:d0:f6:28:1d:48:04:e1:92:f9:da:c0:56:40:93:fa:95:
8c:b7:9e:bb:a4:49:af:18:f3:14:1e:b7:ec:51:7d:24:86:e9:
c5:85:98:ba:af:c0:2e:1a:cb:40:65:a7:93:83:69:78:1d:3b:
78:fa:09:65:c5:fa:e6:1a:cd:c8:80:03:b6:46:2e:68:60:2c:
f8:0f:ec:5a:54:db:14:d5:61:4d:53:e8:91:29:f5:19:99:bd:
3d:8a:10:61:55:0f:19:89:e9:8a:cf:5c:c0:12:3b:98:e2:62:
69:32:09:f5:d6:7a:33:11:0e:a7:a5:a0:e9:b6:ec:e4:55:69:
ec:b5:f7:a6:0c:68:98:f1:5d:bd:db:d6:93:2b:3b:22:86:42:
87:6e:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:37:55 2026 by rpki-client