Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26636.roa
File: AS26636.roa (raw, json)
Hash identifier: SbhDECq/+nTDPHs+1BUnV19pBkO1VDNu4eOmfX1LRpw=
Subject key identifier: 4D:B8:8A:CE:CA:04:98:3F:7E:79:73:F2:9B:DA:73:F9:7A:33:DD:07
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 158411CDB6FF147B923D6D0D874F56A4543CE4D2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26636.roa
Signing time: Sat 29 Aug 2026 03:55:57 +0000
ROA not before: Sat 29 Aug 2026 03:50:57 +0000
ROA not after: Sat 28 Aug 2027 03:55:57 +0000
asID: 26636
IP address blocks: 2a14:7582:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:11:cd:b6:ff:14:7b:92:3d:6d:0d:87:4f:56:a4:54:3c:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 29 03:50:57 2026 GMT
Not After : Aug 28 03:55:57 2027 GMT
Subject: CN=4DB88ACECA04983F7E7973F29BDA73F97A33DD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:4b:c8:f9:6b:be:a1:eb:b7:26:af:e2:40:
78:64:f0:de:a1:38:a0:27:2c:64:63:34:50:db:26:
68:86:62:a6:80:cf:4f:24:e3:e2:fa:48:94:bd:03:
3c:df:d5:e7:f1:8e:03:ac:65:b3:68:65:eb:29:78:
d2:2a:0e:10:15:34:1b:68:0e:1f:f9:ca:d2:14:77:
dd:a4:43:8b:30:1c:7d:1c:44:16:d2:85:05:ef:13:
26:5f:d3:6b:90:63:96:7b:71:99:e2:3c:1d:88:d4:
eb:0f:b0:a6:c0:57:8f:c3:42:35:ee:4d:23:bb:e4:
61:c4:e5:7f:4e:ea:08:b6:03:77:ef:48:4e:65:2a:
2b:16:e0:9d:14:24:14:5a:7e:8a:ac:c9:93:e0:2a:
96:1c:37:1c:e9:30:30:54:f4:ff:c2:96:29:fe:c1:
8a:50:f9:ef:f3:d2:65:5d:37:4c:c5:56:df:89:a3:
63:8d:77:ee:27:67:c3:f7:ca:e9:7e:63:84:0c:3a:
ec:fc:44:11:27:e2:0e:69:d7:47:10:6f:d2:e8:9b:
ac:46:da:b8:ec:86:1f:a3:80:de:b5:85:0e:1a:c6:
22:38:79:a6:58:93:6b:89:f9:53:d5:fc:10:2e:a4:
e3:fc:82:bd:64:9f:57:fb:2b:b4:70:1e:10:7f:6a:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B8:8A:CE:CA:04:98:3F:7E:79:73:F2:9B:DA:73:F9:7A:33:DD:07
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:8000::/36
Signature Algorithm: sha256WithRSAEncryption
73:73:46:0a:28:e0:e8:70:a1:55:c7:f1:bf:6e:1d:6a:5d:06:
f7:29:76:ad:eb:14:40:36:fb:a2:6e:57:f1:ef:bd:ff:9e:45:
4b:57:6e:ea:31:5c:20:1c:98:55:27:2f:ff:98:fa:6b:25:17:
32:16:31:dd:e6:62:76:8a:ba:e9:53:e1:8d:c9:45:12:08:0c:
3f:ba:53:8d:8c:24:9f:1d:7b:71:a2:ed:48:c2:9d:34:23:83:
fd:15:30:a2:cd:33:d3:7b:6a:f0:51:a8:b3:37:b5:8b:a6:4a:
f4:f7:0a:9d:f8:dd:fd:e8:fc:38:93:ba:6c:07:ff:05:fd:64:
93:ff:4b:90:fb:49:7d:27:d6:a5:3f:2e:5b:06:10:c1:0b:bd:
72:00:a0:7a:1f:d8:c7:75:19:1b:92:e5:a4:ae:12:da:b3:42:
c3:28:4b:5a:0c:87:91:3e:71:d4:bc:13:d9:ea:03:de:ac:91:
d0:7b:67:79:aa:63:01:0f:15:ba:c8:b6:ee:18:54:f2:6b:b9:
da:71:7d:b0:b4:1e:45:41:fd:5c:21:12:73:87:3d:2d:f0:58:
72:df:8c:e2:32:1d:4b:6e:e8:b1:ef:cd:31:3b:2e:5a:09:f6:
fb:47:f7:b1:da:73:2a:6a:a7:b2:52:96:d8:2e:d8:8c:3e:14:
23:ac:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:22 2026 by rpki-client