Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: XC+B++OLqw9vFx8/03JA5sH1t80/w9BZu5+5YTLlbAs=
Subject key identifier: 0E:94:34:04:FD:09:24:1F:14:EF:B4:ED:E8:5F:41:FF:80:42:A7:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 183AC4CCC314A37241859120087AE9EC640ECC35
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
Signing time: Wed 23 Jul 2025 00:00:38 +0000
ROA not before: Tue 22 Jul 2025 23:55:38 +0000
ROA not after: Wed 22 Jul 2026 00:00:38 +0000
asID: 36530
IP address blocks: 82.21.200.0/23 maxlen: 24
82.24.127.0/24 maxlen: 24
82.24.189.0/24 maxlen: 24
82.26.72.0/23 maxlen: 24
82.26.78.0/23 maxlen: 24
82.26.91.0/24 maxlen: 24
82.26.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3a:c4:cc:c3:14:a3:72:41:85:91:20:08:7a:e9:ec:64:0e:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 22 23:55:38 2025 GMT
Not After : Jul 22 00:00:38 2026 GMT
Subject: CN=0E943404FD09241F14EFB4EDE85F41FF8042A701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:e5:a7:66:09:dc:95:4e:ec:ec:56:28:b1:
f6:93:89:7c:02:41:60:0a:fa:a3:52:3d:9d:2e:73:
8b:43:2b:45:b4:f9:6d:2b:73:92:64:a3:db:eb:34:
17:9c:df:9e:fc:33:cc:c6:52:db:5d:40:d5:19:f5:
0f:bc:00:f0:2d:a0:17:5f:54:44:d3:34:fa:ae:9e:
54:42:bb:52:45:59:ab:1e:b5:bf:59:3a:41:bd:6d:
f3:3c:79:f9:86:a8:73:21:d8:ca:ec:5d:38:f9:99:
48:c2:28:98:f3:1f:dd:a5:27:d6:ac:70:05:cf:83:
8e:0c:04:f4:75:44:da:05:9a:56:dd:4a:6e:70:34:
a1:62:bd:29:18:1f:1b:8f:ce:96:bf:ee:82:b1:61:
70:7c:a3:23:e6:5b:2f:cb:23:f6:ae:99:d8:02:ed:
9e:59:2f:df:6a:2b:5c:eb:45:ac:c9:16:27:70:68:
d5:e4:e6:f8:ca:07:43:51:55:5a:aa:0f:bf:25:c3:
18:12:f1:c4:15:2b:0e:66:9f:de:22:37:ae:da:ce:
c4:23:86:f7:7f:75:de:8b:70:c0:85:a4:19:e8:f5:
87:10:39:ec:db:60:8c:cc:2e:e2:f2:0c:bc:e9:2a:
26:5d:ab:0c:23:92:5f:c0:a0:4e:eb:c4:60:e2:6b:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:34:04:FD:09:24:1F:14:EF:B4:ED:E8:5F:41:FF:80:42:A7:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.200.0/23
82.24.127.0/24
82.24.189.0/24
82.26.72.0/23
82.26.78.0/23
82.26.91.0/24
82.26.93.0/24
Signature Algorithm: sha256WithRSAEncryption
17:94:34:4c:c9:3f:d0:ad:c1:91:78:bd:04:5b:d0:92:54:4b:
40:35:42:3d:fa:92:a0:61:a0:33:26:bf:4e:ed:4b:25:d2:2c:
76:b2:70:9d:a6:1c:77:ee:80:57:9e:32:14:e5:dc:be:4c:c1:
06:49:07:15:a0:7b:8b:37:8a:b5:87:cc:10:54:64:dc:92:77:
d0:4a:19:50:fb:b6:b6:0f:9d:f8:69:0d:82:91:64:67:c3:d1:
66:bd:53:fa:d9:90:8a:6f:e8:e7:a5:94:c7:78:ef:81:b5:bf:
2c:5d:50:4c:bb:49:4d:0d:fc:02:1e:4d:d9:2b:e3:fc:ec:26:
54:60:29:ea:bb:23:fb:5c:35:ff:4d:7a:18:cb:04:cf:87:31:
5b:e7:15:b6:fa:8c:fe:34:ab:0e:18:8f:2e:22:e4:de:bb:c1:
d6:ad:eb:12:52:63:9a:76:a9:8a:be:8f:21:45:b9:0c:4d:80:
b3:73:e8:d2:1d:6c:c6:3e:a2:fc:13:d6:97:47:86:cf:85:b8:
8e:b0:f2:34:0a:e1:27:30:ab:63:3d:2b:13:4d:65:e8:15:b6:
e6:8b:b4:31:10:72:a2:24:07:83:ed:9d:3a:9b:d8:56:df:36:
e7:05:24:c2:fe:74:ae:00:05:a6:8d:0c:3b:0b:1a:2e:8a:78:
c1:a1:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:22 2025 by rpki-client