Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: mlRL/hA2JsHcX3yFthv581xshfLPclXh4CpyNb6Gy2Y=
Subject key identifier: 10:75:50:49:E9:99:E2:F9:F2:6F:4A:22:87:3F:77:EF:63:C3:BB:5C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1FAB40C02F766EBB60920D3A3645D916FBF6EB71
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36530.roa
Signing time: Wed 30 Jul 2025 05:03:43 +0000
ROA not before: Wed 30 Jul 2025 04:58:43 +0000
ROA not after: Wed 29 Jul 2026 05:03:43 +0000
asID: 36530
IP address blocks: 96.62.115.0/24 maxlen: 24
96.62.152.0/24 maxlen: 24
143.14.1.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
155.117.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ab:40:c0:2f:76:6e:bb:60:92:0d:3a:36:45:d9:16:fb:f6:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 04:58:43 2025 GMT
Not After : Jul 29 05:03:43 2026 GMT
Subject: CN=10755049E999E2F9F26F4A22873F77EF63C3BB5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:50:e1:d3:f5:5e:a3:d3:b8:60:e4:6f:ad:
21:63:25:67:e8:2a:a1:b8:e4:41:90:0a:e0:02:eb:
c8:71:0d:d4:e6:77:71:6d:45:aa:4e:1d:20:d7:26:
9e:cf:9c:c7:ea:cf:71:72:8f:92:92:8a:b1:82:31:
a5:2d:da:e3:ea:f8:95:a1:d3:93:03:b5:9d:31:43:
dc:75:82:94:2f:1c:90:a7:d7:37:f9:8a:98:ac:0e:
71:4d:87:7e:c8:9f:3f:4c:92:89:79:40:c1:76:94:
bb:d2:4a:ee:14:b6:8e:25:4b:34:cf:87:ea:c3:1b:
86:e8:eb:47:04:3b:f1:13:ad:1a:54:69:bf:9c:5a:
cf:90:84:37:5a:28:65:de:07:11:66:6e:25:3d:1e:
ee:c6:0b:95:c0:94:80:9d:da:d4:30:11:18:1a:5d:
5e:63:91:66:ac:2f:ec:fc:38:36:dd:88:d6:ae:20:
5d:3c:a7:36:19:56:1a:55:63:e9:8d:56:6d:f6:74:
e0:a6:c9:c7:92:9f:4f:0a:c9:06:e2:d7:7b:05:3c:
af:fd:3c:5a:40:69:26:47:f7:ba:a4:0a:a5:98:88:
74:fe:e1:8b:0c:58:58:45:e7:a2:46:47:ef:66:72:
3c:24:61:38:5a:e3:62:25:01:29:ca:88:9a:00:ca:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:50:49:E9:99:E2:F9:F2:6F:4A:22:87:3F:77:EF:63:C3:BB:5C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
96.62.152.0/24
143.14.1.0/24
148.135.181.0/24
155.117.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7b:5f:8f:a5:76:e9:7d:d2:04:a6:b2:30:1a:39:de:49:9b:
08:a3:0a:b5:ed:a0:ae:ec:d9:97:40:66:70:02:24:27:8a:00:
28:c1:60:49:50:f9:0f:7c:89:a7:9d:14:02:93:4b:44:5f:5d:
7a:c4:cc:25:ee:d3:5d:d1:5b:17:05:ab:73:c8:2f:d4:ca:90:
66:23:1b:40:a0:d4:24:f7:a0:67:21:ad:82:6f:b0:9f:ba:5f:
38:2f:d8:ac:04:5a:02:75:ac:31:f6:65:16:6c:01:10:9e:15:
c3:6d:78:12:53:5f:95:8e:47:97:87:44:31:0e:a2:96:fe:2f:
f8:18:b7:3d:32:bf:27:00:33:f9:20:1f:be:24:80:a1:3e:e0:
17:f1:94:2f:bb:2b:58:ec:39:b1:81:c4:88:13:56:89:34:92:
30:d3:cb:36:22:89:22:0a:f4:b1:7b:bd:ee:60:18:bd:12:df:
89:f1:22:43:cc:01:8a:a4:62:a6:d5:f9:75:c8:02:d2:85:ee:
13:93:88:13:f3:42:11:a0:1c:7d:0c:f9:15:20:73:45:c6:40:
6f:1d:06:d3:46:a7:d6:c0:aa:cb:d7:dc:b8:40:71:23:01:20:
e9:02:aa:34:c6:3c:66:47:e2:39:3d:bc:06:eb:51:7f:95:f9:
85:e0:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:40 2025 by rpki-client