Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36803.roa
File: AS36803.roa (raw, json)
Hash identifier: gkhbBRm7Hw2ECsS8uK1afYTaOEcqU0HBbEZoFhAOyOk=
Subject key identifier: 35:12:0E:71:3D:48:86:DD:50:B7:AC:F1:74:B0:A9:A8:27:AA:DD:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 33F18D60497737597179E28569FF941B8848FEF9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36803.roa
Signing time: Sat 13 Sep 2025 22:05:22 +0000
ROA not before: Sat 13 Sep 2025 22:00:22 +0000
ROA not after: Sat 12 Sep 2026 22:05:22 +0000
asID: 36803
IP address blocks: 82.27.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f1:8d:60:49:77:37:59:71:79:e2:85:69:ff:94:1b:88:48:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 13 22:00:22 2025 GMT
Not After : Sep 12 22:05:22 2026 GMT
Subject: CN=35120E713D4886DD50B7ACF174B0A9A827AADD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:23:0f:59:62:6e:18:70:ad:8a:e6:ab:da:
2b:3c:98:69:ec:6f:fa:aa:b2:5a:52:4b:3b:52:54:
31:14:fa:12:f6:34:9f:9c:c8:59:c5:56:a3:1d:a2:
a8:9a:25:a0:2e:13:b5:9d:2d:80:15:13:d9:6f:68:
4a:33:9c:c4:61:73:8f:96:80:cd:57:1f:f4:f2:c0:
a5:58:66:3c:da:02:a7:8a:8e:a7:e2:34:ea:ab:45:
67:bd:fa:46:92:39:53:22:45:f5:d2:8f:79:37:ca:
93:16:5b:b3:3a:48:b2:bd:d2:f1:32:54:34:b1:a6:
6a:45:a2:fb:69:56:29:a7:be:a4:e6:c5:fc:f0:b8:
76:77:fc:4b:cd:a4:d1:23:07:5f:66:93:f0:02:36:
4d:bb:ea:f0:54:c1:e4:39:3e:d7:92:66:7c:94:2d:
0a:23:45:8f:b4:4f:b3:33:ff:06:e9:b6:50:b7:23:
16:74:28:2c:3f:5a:43:53:89:b4:5c:03:83:4d:5b:
04:3b:a5:2f:f0:0f:04:db:b8:5b:0e:3e:fb:db:07:
d0:2c:05:89:7c:50:f0:76:f1:87:29:2d:0b:9b:be:
6a:94:56:49:73:2c:e1:98:c4:85:b9:f1:3a:4c:ef:
e5:d3:78:0d:bc:3a:8f:e6:8a:1b:ff:10:2e:6e:10:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:0E:71:3D:48:86:DD:50:B7:AC:F1:74:B0:A9:A8:27:AA:DD:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:15:77:5a:73:0c:c1:50:d7:a4:11:5c:e7:b6:ed:97:bf:a1:
13:a1:bf:4f:50:81:cf:f5:e3:28:1e:a8:39:58:09:2a:c1:91:
c5:7b:86:a0:e0:7f:ad:c1:55:ee:dd:b9:e2:38:dc:57:47:c4:
ac:16:f2:f1:1a:da:1b:ae:34:60:12:24:27:85:9a:96:84:32:
02:f5:76:70:c2:63:7c:69:23:36:b2:ce:2b:c7:f3:fc:1a:3e:
4e:83:55:38:93:0b:aa:21:3c:dc:7d:25:46:3d:ee:43:58:2e:
c7:e8:13:8c:87:a0:37:de:2a:41:ee:92:4e:ed:ef:11:5c:9d:
c8:e9:46:e1:e0:ed:9d:b5:de:cd:85:cc:05:9c:94:c6:25:0f:
e0:84:ec:3d:de:fb:21:82:0b:41:ef:f7:ad:22:4b:4e:f9:7c:
3e:a5:df:64:02:27:e6:ef:99:98:bc:56:fa:10:ab:58:70:ac:
c9:68:cd:60:8a:e3:3e:b3:b7:cf:17:1d:c7:7d:87:e5:54:f3:
e4:b2:49:4a:8f:e0:55:4c:54:ea:5a:81:fc:a5:5f:64:7e:1b:
8a:bb:4a:52:41:eb:4e:be:bd:26:4c:30:1a:dc:45:76:e3:bf:
8c:68:54:93:dd:ff:65:f9:b8:fb:8e:c5:7e:0b:6d:95:35:02:
a4:73:cd:39
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUM/GNYEl3N1lxeeKFaf+UG4hI/vkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA5MTMyMjAwMjJaFw0yNjA5MTIyMjA1MjJaMDMxMTAvBgNV
BAMTKDM1MTIwRTcxM0Q0ODg2REQ1MEI3QUNGMTc0QjBBOUE4MjdBQUREN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnSMPWWJuGHCtiuar2is8mGns
b/qqslpSSztSVDEU+hL2NJ+cyFnFVqMdoqiaJaAuE7WdLYAVE9lvaEoznMRhc4+W
gM1XH/TywKVYZjzaAqeKjqfiNOqrRWe9+kaSOVMiRfXSj3k3ypMWW7M6SLK90vEy
VDSxpmpFovtpVimnvqTmxfzwuHZ3/EvNpNEjB19mk/ACNk276vBUweQ5PteSZnyU
LQojRY+0T7Mz/wbptlC3IxZ0KCw/WkNTibRcA4NNWwQ7pS/wDwTbuFsOPvvbB9As
BYl8UPB28YcpLQubvmqUVklzLOGYxIW58TpM7+XTeA28Oo/mihv/EC5uED23AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUNRIOcT1Iht1Qt6zxdLCpqCeq3X8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzY4MDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGwMw
DQYJKoZIhvcNAQELBQADggEBABAVd1pzDMFQ16QRXOe27Ze/oROhv09Qgc/14yge
qDlYCSrBkcV7hqDgf63BVe7dueI43FdHxKwW8vEa2huuNGASJCeFmpaEMgL1dnDC
Y3xpIzayzivH8/waPk6DVTiTC6ohPNx9JUY97kNYLsfoE4yHoDfeKkHukk7t7xFc
ncjpRuHg7Z213s2FzAWclMYlD+CE7D3e+yGCC0Hv960iS075fD6l32QCJ+bvmZi8
VvoQq1hwrMlozWCK4z6zt88XHcd9h+VU8+SySUqP4FVMVOpagfylX2R+G4q7SlJB
606+vSZMMBrcRXbjv4xoVJPd/2X5uPuOxX4LbZU1AqRzzTk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:30 2025 by rpki-client