Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: 2YEle+x0DNWmD1cjcHKplI4gLv3467o47gnZ+ANJmCw=
Subject key identifier: 0E:F2:79:79:8D:52:BD:3F:E5:B7:9C:94:44:F8:9A:83:89:B1:52:BF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B9DE5ECB959AB1448B03245AE88BAE8E40AFCB5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
Signing time: Thu 06 Aug 2026 00:04:36 +0000
ROA not before: Wed 05 Aug 2026 23:59:36 +0000
ROA not after: Thu 05 Aug 2027 00:04:36 +0000
asID: 36530
IP address blocks: 82.26.72.0/23 maxlen: 24
82.39.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9d:e5:ec:b9:59:ab:14:48:b0:32:45:ae:88:ba:e8:e4:0a:fc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 5 23:59:36 2026 GMT
Not After : Aug 5 00:04:36 2027 GMT
Subject: CN=0EF279798D52BD3FE5B79C9444F89A8389B152BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:75:58:43:11:83:b8:00:d6:a6:d5:e5:76:
c1:4a:9f:fb:98:d1:92:4b:53:62:35:15:b6:26:41:
42:46:03:6b:7b:8f:58:39:51:91:ec:d1:90:fe:da:
f5:ba:dc:a3:66:ac:a7:e1:49:c5:59:75:7b:10:f6:
a7:8f:db:07:6b:53:b3:26:72:b0:62:fa:a5:e6:1c:
0d:67:63:40:2e:e8:22:30:7b:08:65:ba:b3:66:cd:
80:1b:d1:5e:33:c9:77:e5:71:3c:fd:ce:1d:b5:43:
ef:08:0a:47:36:1c:71:1e:ff:f1:8f:59:ec:cd:b3:
a8:04:39:c0:92:2f:9d:31:2f:6b:15:70:ba:33:78:
b5:94:cc:b3:dc:9b:53:81:2c:f3:23:fb:91:eb:71:
32:42:c4:2f:39:7f:30:08:fe:77:bf:71:1d:db:bb:
85:ae:24:a2:b9:4a:ed:ea:fb:7f:f7:e9:17:6d:2f:
ab:69:ae:f6:4e:bc:65:6b:d0:f1:34:2e:fe:4e:6b:
1b:1c:ff:80:01:0f:db:2d:cf:39:0f:34:9f:6b:db:
d0:fa:e1:f8:34:69:63:45:e2:83:78:9f:8b:01:6b:
32:1f:b7:29:aa:98:cc:17:ce:0a:11:e1:a4:98:97:
93:72:4c:b9:56:f7:ee:ba:0c:38:82:b4:d0:cf:fb:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:79:79:8D:52:BD:3F:E5:B7:9C:94:44:F8:9A:83:89:B1:52:BF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.72.0/23
82.39.210.0/24
Signature Algorithm: sha256WithRSAEncryption
38:92:ec:b6:59:50:d9:a6:2c:bc:e4:63:b6:1e:8e:a1:38:c3:
88:2f:ae:02:2f:ab:5e:e9:d4:54:cb:fe:f6:47:db:f6:52:f1:
e2:9e:c2:e6:91:6b:af:c7:45:d7:b7:53:75:3e:35:96:ab:f0:
a9:e6:3c:50:48:3b:5c:59:74:4b:a2:6d:dd:d2:03:81:f1:21:
5c:ab:0a:bb:7d:d5:dd:26:76:52:7d:e0:87:63:f1:c2:4a:5f:
88:3c:27:e5:9c:5a:73:45:46:eb:52:21:39:50:30:f2:ef:a1:
c6:35:9d:c1:ce:09:b0:bf:54:21:ba:7c:88:f0:75:f7:c1:67:
22:f2:21:60:01:5b:2a:33:ef:13:48:4e:ad:93:3e:ff:96:17:
57:4d:97:7a:1b:b7:21:6c:2b:64:0d:e3:76:3a:c6:df:da:bd:
89:f2:24:b2:b7:36:a0:6f:08:e9:65:34:6f:bf:2c:87:5e:f3:
c6:2d:d7:06:14:12:40:08:81:51:3f:5d:58:94:8f:0d:64:e3:
47:fe:bc:b2:59:a8:4e:87:61:3c:41:d7:a0:ff:7c:f2:70:09:
65:ce:be:a6:06:37:1f:00:26:f5:7b:a0:56:c6:33:2b:fb:30:
df:7b:9a:df:40:6f:af:29:5a:3d:ed:5c:2e:b8:8e:5c:9e:b3:
1a:6e:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:07 2026 by rpki-client