Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36231.roa
File: AS36231.roa (raw, json)
Hash identifier: thh96v13wmrR0QB9mpcYgoXXirFqT2q3kEyN1GOEoig=
Subject key identifier: C3:80:07:6D:79:D4:F3:C0:A8:E2:1B:D1:E8:1F:DE:A0:29:C5:67:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 63340ED82A55FA83A3458083CDA0F06998D6C5C9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36231.roa
Signing time: Tue 11 Aug 2026 05:38:45 +0000
ROA not before: Tue 11 Aug 2026 05:33:45 +0000
ROA not after: Tue 10 Aug 2027 05:38:45 +0000
asID: 36231
IP address blocks: 2a13:9500:1bb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:34:0e:d8:2a:55:fa:83:a3:45:80:83:cd:a0:f0:69:98:d6:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 11 05:33:45 2026 GMT
Not After : Aug 10 05:38:45 2027 GMT
Subject: CN=C380076D79D4F3C0A8E21BD1E81FDEA029C56788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a5:d7:8c:3a:10:2d:dc:b2:69:90:1f:24:b8:
b9:6c:96:91:2e:fa:a4:c5:4e:44:84:32:e0:37:32:
e8:44:c1:69:0f:08:5e:8a:d9:bb:48:fa:f4:7e:cf:
53:b7:97:0f:55:91:2c:d8:05:06:4e:a4:cb:24:09:
c6:72:e5:6e:ed:75:bf:1c:a1:10:b7:4a:27:8f:6e:
27:e2:65:d5:d1:d1:9f:04:e3:e0:37:73:14:94:38:
7c:19:33:bd:ed:05:1b:16:18:81:20:45:00:ca:90:
dc:3f:5a:91:f0:a2:d6:29:dc:70:3b:12:66:69:53:
a2:9a:9d:8a:fa:e5:e8:22:30:fd:f5:71:61:90:12:
40:24:b4:7a:d1:81:d9:9a:d7:85:a9:e4:e3:58:75:
9b:ce:9c:c7:a4:1d:4e:44:e6:9c:1f:fd:8e:9f:a7:
ec:1c:5a:4f:5e:d8:e6:59:74:80:ab:46:0d:97:5b:
eb:78:e1:52:84:f4:c9:63:0b:1f:02:0b:73:a1:dd:
ce:4b:07:8c:0f:06:c9:46:a5:68:10:36:a9:a4:e1:
12:e0:01:09:dc:e3:c2:e0:0b:94:47:ff:a8:fe:60:
ae:0f:91:51:45:fb:d9:57:a1:46:7d:95:31:af:4d:
d9:84:ce:d0:58:45:d4:bb:d1:7d:53:09:e0:44:55:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:07:6D:79:D4:F3:C0:A8:E2:1B:D1:E8:1F:DE:A0:29:C5:67:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1bb::/48
Signature Algorithm: sha256WithRSAEncryption
73:ab:72:99:73:86:a0:45:1b:c3:7f:81:57:40:e5:7a:51:ea:
87:6c:b6:f4:41:62:da:e9:54:3e:4f:51:c8:02:1c:ac:f4:83:
64:88:c6:d1:30:a5:10:57:f4:16:06:3c:ad:c4:5a:70:32:90:
9b:97:94:d4:ae:cd:58:44:cd:22:79:9c:74:96:61:60:da:9d:
42:61:82:3f:3c:5f:e5:63:08:6e:da:ee:4f:5e:60:83:c0:92:
48:e2:de:af:b6:22:54:e9:57:1c:ae:b5:90:11:a9:4a:b2:34:
12:9c:ff:3e:86:21:30:b7:43:30:53:77:55:75:89:f9:15:7c:
5d:73:40:5b:f9:ea:e8:33:bd:31:44:3d:04:70:0c:22:ca:3a:
69:94:6c:83:08:12:f6:f7:12:07:48:26:75:f4:65:c1:dd:c1:
b4:27:3c:e3:a4:39:fb:7d:f4:d2:5b:3c:23:ae:77:77:a9:04:
d6:6c:f2:2f:81:f3:52:35:e2:ce:d8:07:1c:d3:7c:89:bb:61:
45:4f:00:01:e4:d2:2f:8e:7b:eb:7f:be:44:35:11:3a:e7:f4:
9b:61:50:64:fe:12:38:07:a3:c7:18:35:5d:41:29:be:f4:e9:
f9:23:b3:75:ae:2d:3d:0a:1d:bd:1b:be:f9:87:d0:2b:e6:81:
31:d8:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:15:56 2026 by rpki-client