Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: yncUt/xUXa7f1rlOK0uQyN29CZZWZxZ+U1YA6RUk0/Q=
Subject key identifier: 65:E7:61:D6:59:16:FE:5A:3E:73:F3:F8:AE:EC:4D:AF:22:88:C6:99
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6D673775983D70BE19100BF64D291FE3FB3CD98E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
Signing time: Fri 23 May 2025 17:32:04 +0000
ROA not before: Fri 23 May 2025 17:27:04 +0000
ROA not after: Fri 22 May 2026 17:32:04 +0000
asID: 36530
IP address blocks: 46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
92.113.106.0/23 maxlen: 24
92.113.112.0/23 maxlen: 24
92.113.124.0/23 maxlen: 24
92.113.136.0/23 maxlen: 24
92.113.142.0/23 maxlen: 24
95.134.140.0/24 maxlen: 24
95.134.141.0/24 maxlen: 24
95.134.142.0/24 maxlen: 24
95.135.83.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:67:37:75:98:3d:70:be:19:10:0b:f6:4d:29:1f:e3:fb:3c:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 23 17:27:04 2025 GMT
Not After : May 22 17:32:04 2026 GMT
Subject: CN=65E761D65916FE5A3E73F3F8AEEC4DAF2288C699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:55:67:0a:47:33:77:af:d9:ec:93:e0:a7:
01:cd:34:0d:97:02:51:e7:4d:a5:d2:ab:b9:9a:b0:
ec:84:24:34:60:d3:89:a2:7b:7c:75:f6:b1:97:fa:
91:28:dc:2e:64:73:f7:6f:c0:9d:bf:13:28:d5:5e:
0e:29:ed:b6:c4:6a:ec:57:f3:99:72:c2:77:49:28:
d0:6f:50:f7:4c:5c:bf:08:1e:15:de:f2:b4:9c:f9:
8f:72:20:95:98:62:26:43:91:ec:03:0c:03:03:bf:
c1:d4:bb:37:12:f3:9b:04:0d:94:da:8c:b3:24:d6:
bc:b8:80:98:7f:cc:1b:99:88:25:25:80:d2:5b:27:
7c:f3:fe:a6:b5:92:f5:d6:57:c5:0b:a2:c5:2d:fc:
32:5a:58:12:31:c9:a7:20:31:bd:32:30:f6:7d:c4:
46:06:0c:57:24:5f:ed:c3:c5:d9:d2:1b:19:52:46:
72:d7:4b:be:c8:69:8d:e6:13:50:cd:c9:7f:f9:e8:
76:44:1c:79:22:8d:74:9a:05:1a:89:71:8a:f9:78:
6d:26:9e:d2:78:a0:e0:18:f6:f2:11:44:b1:64:fa:
83:93:4b:47:d2:bc:25:1e:0d:40:02:ae:82:db:49:
49:6a:7a:d7:7c:1f:13:b4:33:21:54:b3:a4:d8:dc:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:61:D6:59:16:FE:5A:3E:73:F3:F8:AE:EC:4D:AF:22:88:C6:99
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.98.0/24
46.203.203.0/24
92.113.106.0/23
92.113.112.0/23
92.113.124.0/23
92.113.136.0/23
92.113.142.0/23
95.134.140.0-95.134.142.255
95.135.83.0/24
95.135.109.0/24
95.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:57:b9:7d:d9:95:a0:f4:44:d3:02:38:07:40:35:9c:2b:d9:
7e:fc:0d:bd:cb:46:26:7b:00:4b:6a:f6:89:85:4c:95:4e:bc:
63:9e:4f:19:9e:a4:0e:af:b1:18:d0:b4:6d:4e:20:52:8e:47:
c1:79:00:f0:be:80:df:74:55:ac:b7:ee:78:e5:25:9f:57:fb:
1c:8c:1b:3f:67:85:85:b5:85:b1:de:0c:1e:8c:3e:b4:73:bc:
8c:b2:82:91:41:15:a0:d6:45:92:d1:10:ff:bf:46:55:ae:ec:
cf:2f:aa:3e:2b:00:7a:7f:6e:a7:45:9b:88:96:ee:5a:5b:9f:
6b:40:fc:bb:6f:45:09:58:a2:0f:2b:fc:62:22:bb:98:ea:a5:
21:e8:0b:9d:84:78:19:00:ad:61:20:33:28:e8:d8:2e:76:c0:
18:df:be:c5:0a:01:86:b8:34:9e:04:aa:4c:57:8c:01:eb:9f:
37:40:43:0f:3c:84:1b:da:9c:12:85:9f:3c:18:8a:2d:77:dd:
91:63:98:f2:e1:d2:9f:74:db:a2:93:cf:60:b0:37:f5:0b:d2:
b6:a5:e0:31:44:a2:bf:6c:b8:ba:5e:28:b0:86:ce:9f:39:e3:
87:c9:ec:3d:41:a7:ad:0d:79:31:fb:43:cd:41:44:b1:d7:1f:
d7:4c:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:27 2025 by rpki-client