Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/36PRmC1GP3ueaeEjlYANeJ3LXbA.roa
File: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (raw, json)
Hash identifier: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=
Subject key identifier: DF:A3:D1:98:2D:46:3F:7B:9E:69:E1:23:95:80:0D:78:9D:CB:5D:B0
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A103DBFAD0A46A39890B79BB30A550CB77
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/36PRmC1GP3ueaeEjlYANeJ3LXbA.roa
Signing time: Sat 03 Oct 2026 22:21:50 +0000
ROA not before: Sat 03 Oct 2026 22:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51791
IP address blocks: 153.56.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:db:fa:d0:a4:6a:39:89:0b:79:bb:30:a5:50:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Oct 3 22:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfa3d1982d463f7b9e69e12395800d789dcb5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:ab:40:71:7c:27:b5:29:e3:c9:10:c0:f1:
43:5e:b1:f1:25:05:b7:1d:bf:8d:3e:13:0e:4a:54:
80:26:b7:8e:4e:cb:d7:eb:fb:15:81:6b:18:71:c2:
97:e5:7d:ec:02:89:80:7c:50:cf:62:c4:b3:60:56:
54:34:da:d3:0a:98:9a:a1:05:ad:d0:b8:18:24:98:
ab:9d:52:bb:6c:f3:68:6b:8b:5d:4e:92:0b:a9:90:
96:c0:81:ea:81:25:d3:8d:12:35:79:60:aa:a5:e3:
55:fc:ae:f1:01:a1:7c:46:25:00:2b:b7:fa:92:5a:
b9:2a:2a:4b:31:0a:da:a3:2b:05:39:5e:82:1c:75:
ff:81:26:ff:7c:a1:dc:cc:7d:0d:9e:de:6d:1a:34:
33:9d:fd:57:3e:69:bb:6f:de:12:6e:6a:8c:89:21:
1f:32:ab:40:1b:30:13:60:a2:d4:08:03:a9:fb:78:
b6:6c:96:a3:e8:d6:d4:f4:fc:c9:4b:86:bb:ba:82:
91:81:f3:62:38:f2:e7:51:b8:10:4f:9b:bf:b9:d3:
58:2a:c1:9e:3d:47:f4:c2:a4:36:26:ce:34:d3:82:
a1:c5:5a:43:04:01:8d:5b:c3:e8:d0:22:76:ee:3f:
95:37:1e:da:54:58:d0:4f:9c:79:1b:be:65:a3:00:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A3:D1:98:2D:46:3F:7B:9E:69:E1:23:95:80:0D:78:9D:CB:5D:B0
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/36PRmC1GP3ueaeEjlYANeJ3LXbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.248.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0a:61:40:f3:1d:62:1c:da:a7:a4:16:a9:cb:d2:80:fc:3d:
0f:54:09:bc:48:9e:ce:45:34:7a:f7:2a:d8:bc:26:97:a8:20:
f4:61:ba:dc:f0:c9:3a:22:79:d1:b8:0b:f2:fd:0e:c9:94:77:
61:b4:92:e6:53:a1:cf:f7:34:5f:33:3f:ff:e8:5b:b3:69:fc:
f6:60:0a:79:8d:cb:df:fc:fb:5b:78:9a:f5:b3:05:9d:fe:0d:
1d:d0:01:ae:b0:0e:49:fe:dd:e1:8e:d4:3d:dc:62:40:a8:0c:
1b:4e:22:47:96:7c:b8:88:4e:8d:32:0e:92:90:bd:60:57:13:
60:68:0c:63:12:86:8c:08:9d:6f:ae:3d:d3:f1:e1:d2:c9:3c:
31:e6:76:3a:3b:c3:2b:97:b0:a2:9e:3e:99:85:2b:6a:bc:85:
bc:b1:11:2d:af:57:63:b3:ea:99:17:93:83:b5:68:7f:6e:89:
f0:ac:0b:b6:df:67:5d:8b:48:ba:e8:94:8b:9a:b6:97:57:9b:
78:b3:10:d5:83:0d:f1:93:fe:01:5b:f5:ac:4b:eb:7a:f9:a6:
e3:8e:d5:84:25:92:f0:df:44:4b:9f:78:54:3b:9b:67:de:91:
b8:f1:58:d1:12:27:62:d7:0c:b1:71:81:f1:52:74:a6:53:b0:
bb:63:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:49 2026 by rpki-client