Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: eahBL8Vyzgxyn/9ZbgjOp1ASBy9s2KriBJ7RVBG1buY=
Subject key identifier: 0E:FC:D8:41:CB:0F:BF:26:53:A1:B8:1C:5F:BB:4F:D2:B2:55:D4:28
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A465AD1769453427992741E70D40C4C84645909
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
Signing time: Sat 19 Sep 2026 00:01:39 +0000
ROA not before: Fri 18 Sep 2026 23:56:39 +0000
ROA not after: Sat 18 Sep 2027 00:01:39 +0000
asID: 36530
IP address blocks: 82.26.72.0/23 maxlen: 24
82.47.26.0/24 maxlen: 24
82.47.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:46:5a:d1:76:94:53:42:79:92:74:1e:70:d4:0c:4c:84:64:59:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 23:56:39 2026 GMT
Not After : Sep 18 00:01:39 2027 GMT
Subject: CN=0EFCD841CB0FBF2653A1B81C5FBB4FD2B255D428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:d6:cf:78:0c:dc:a7:a2:8b:87:c9:82:90:
19:3e:e3:c1:aa:5b:16:63:eb:d8:fe:af:f3:2f:f0:
98:b3:3c:24:6d:de:b7:63:ec:5a:7a:7e:63:4b:c9:
84:22:68:ab:ba:67:0d:14:27:44:ea:21:7c:e8:94:
ce:59:b9:20:e7:ae:96:b7:31:e4:52:32:c4:08:ff:
a3:83:28:af:97:a2:04:ae:6c:68:c4:e3:f9:c3:94:
a7:22:9b:aa:cc:1e:90:09:89:ca:ab:80:a4:8d:ab:
39:0e:c5:de:59:07:ce:57:c3:7b:af:97:0b:c0:9d:
c7:0e:7a:38:a3:8e:97:29:2d:e8:df:6f:df:66:a7:
44:f1:2a:d5:50:f9:6c:0a:63:14:9a:63:ad:a2:e1:
28:67:b6:33:df:a7:26:79:32:8b:74:9a:a4:2f:35:
96:8b:41:c4:7b:ff:2b:10:4e:da:ee:00:bf:f2:33:
88:e1:74:04:27:5f:1d:a6:90:f3:e7:f7:d9:29:e3:
c7:9c:35:f5:36:d1:76:50:0e:60:b5:2c:c7:e7:51:
43:ec:95:19:90:c9:7c:47:c6:84:e1:4d:0d:d8:6b:
21:f6:e6:1c:5f:bb:be:da:3a:0f:2f:bb:21:fe:30:
13:bd:9e:ae:48:e3:5e:70:a8:d4:0e:c0:1e:f8:8e:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:D8:41:CB:0F:BF:26:53:A1:B8:1C:5F:BB:4F:D2:B2:55:D4:28
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.72.0/23
82.47.26.0/24
82.47.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1e:d1:f1:95:2d:03:77:53:5a:6d:e4:04:14:8e:82:d0:56:
d9:33:4a:45:ec:d4:25:73:d3:60:cb:11:56:19:2b:7f:29:41:
5a:99:0e:0b:bb:eb:62:71:b5:47:b2:42:b8:fe:b1:48:a3:57:
b9:ac:bd:4e:0e:7e:3f:51:65:35:78:dc:66:03:ed:2f:00:33:
5f:eb:20:fe:aa:a2:95:a8:c9:ad:d7:0c:fc:c6:d4:ac:17:2e:
96:84:76:28:26:e4:f6:21:b5:b6:c5:22:b3:14:81:9f:86:79:
60:40:7c:4a:01:5b:72:60:5a:b1:7d:c3:ce:27:94:02:49:78:
e6:66:31:cf:ea:c9:6d:4f:49:45:e8:1a:16:95:74:d3:42:ff:
8e:ef:48:5c:5c:a7:75:16:d7:66:80:5c:00:f5:8d:e0:5c:08:
25:70:ad:9f:03:14:a9:e6:30:ae:e4:64:0d:42:c5:3e:34:a5:
e7:76:7b:10:db:fa:8d:b2:a5:50:d9:09:49:77:22:ef:a7:bf:
4a:63:4e:f2:ba:f7:4f:16:46:4b:63:31:5a:ec:7d:4b:1e:83:
03:36:fc:40:a7:fa:14:de:6c:6e:97:d2:d6:ab:82:f6:9c:33:
ed:07:4e:80:6f:5d:4e:33:d0:62:ec:f5:d7:b8:5d:83:6c:f4:
57:19:9c:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:18:43 2026 by rpki-client