Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa
File: AS36352.roa (raw, json)
Hash identifier: kNOvNn0YE5/EdVxro/C0FQE0Fxh1e3mBXFZSpXXsUdE=
Subject key identifier: F5:47:EA:DD:D3:58:A9:2E:8C:57:84:51:20:C9:79:11:2C:1E:5C:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 24428723F7DF19F3426C0EC53E3691F449D8E4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa
Signing time: Tue 22 Sep 2026 00:01:40 +0000
ROA not before: Mon 21 Sep 2026 23:56:40 +0000
ROA not after: Tue 21 Sep 2027 00:01:40 +0000
asID: 36352
IP address blocks: 162.141.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:42:87:23:f7:df:19:f3:42:6c:0e:c5:3e:36:91:f4:49:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 23:56:40 2026 GMT
Not After : Sep 21 00:01:40 2027 GMT
Subject: CN=F547EADDD358A92E8C57845120C979112C1E5C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:b1:d7:62:03:bb:db:31:79:4e:76:4d:17:
04:82:fb:a1:85:39:5c:06:79:34:95:c2:cf:11:22:
fd:78:9d:f3:60:1c:88:f4:25:72:dd:4d:0f:a9:53:
9d:e9:a1:5c:6b:c3:c0:a8:ab:b4:6c:89:00:74:c5:
07:89:28:c9:b5:ca:ae:be:c3:db:22:e5:ec:e2:2c:
ff:dc:17:ea:aa:4c:e1:0e:22:08:84:58:c5:c1:f5:
9e:1c:f2:b5:18:4c:91:7c:c8:0d:15:78:ed:be:b4:
8a:33:e2:aa:c1:70:df:7f:45:87:72:33:b3:2c:f3:
9d:1d:4b:5c:16:3c:49:de:a0:ad:da:94:a2:e4:85:
0a:80:24:74:7b:58:67:33:84:ad:17:13:61:ec:e8:
38:82:71:fc:65:3a:7c:40:40:81:f2:83:c7:a4:78:
de:d1:5a:e4:a1:73:7e:fa:79:05:68:67:e6:34:94:
96:e7:ad:58:73:42:1b:b1:50:bd:cc:8a:33:70:40:
ee:09:97:dc:fc:c2:c0:13:a6:f5:6f:e6:57:d0:8e:
51:72:55:fd:0c:40:8b:3a:a6:3a:44:48:de:50:50:
ca:03:25:8e:7b:f7:2d:1c:02:20:33:7c:51:25:97:
27:a2:ba:e2:50:50:f7:a2:74:67:e2:97:aa:99:3a:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:EA:DD:D3:58:A9:2E:8C:57:84:51:20:C9:79:11:2C:1E:5C:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4d:2a:e2:5b:fe:d6:e2:06:9d:f3:d1:17:89:d1:ae:a0:35:
64:b7:b6:d7:57:e0:c4:14:b5:b6:99:f6:2a:7a:c9:53:ad:bb:
65:19:cf:81:cb:0f:52:b3:38:05:43:e2:5b:af:8d:b4:3e:78:
81:0c:c3:e3:fe:a0:d9:73:25:d5:ae:87:92:98:db:be:38:16:
a5:b6:85:59:cb:79:c2:d4:58:6e:0f:36:2b:1e:51:20:68:a9:
8b:db:de:12:76:8d:0e:ca:fc:d9:3f:25:22:1d:91:36:51:83:
40:65:64:50:21:82:2c:d6:9a:66:d7:f3:25:d6:5e:67:b1:75:
22:29:4d:c5:5f:56:0d:53:3d:05:d6:92:a9:38:22:06:12:24:
1c:ff:3d:06:3e:ed:a2:c7:2c:27:6c:bf:1c:28:3d:c4:f3:f3:
53:fd:ee:f3:20:4c:be:f8:a1:f2:fe:8d:78:33:5b:c0:4f:56:
a8:7f:17:d7:2c:43:87:b7:d4:74:5c:f7:77:43:aa:18:7f:a3:
52:bd:17:c0:d3:1e:0e:a3:7c:91:1b:45:eb:5d:0a:d4:c1:b6:
1c:7e:82:35:fb:e8:48:0a:60:c4:40:e3:cf:da:1d:d3:44:02:
30:4b:52:e2:03:c1:06:2b:a6:bf:7a:37:db:bb:11:7a:2f:78:
cf:41:10:10
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgITJEKHI/ffGfNCbA7FPjaR9EnY5DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0ZmMzMzZiZjlmM2RlNWNlNDE0MTRiZDE5NzE5NDVmNGIy
NDZiZmNjMB4XDTI2MDkyMTIzNTY0MFoXDTI3MDkyMTAwMDE0MFowMzExMC8GA1UE
AxMoRjU0N0VBREREMzU4QTkyRThDNTc4NDUxMjBDOTc5MTEyQzFFNUM3QTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8ZsddiA7vbMXlOdk0XBIL7oYU5
XAZ5NJXCzxEi/Xid82AciPQlct1ND6lTnemhXGvDwKirtGyJAHTFB4koybXKrr7D
2yLl7OIs/9wX6qpM4Q4iCIRYxcH1nhzytRhMkXzIDRV47b60ijPiqsFw339Fh3Iz
syzznR1LXBY8Sd6grdqUouSFCoAkdHtYZzOErRcTYezoOIJx/GU6fEBAgfKDx6R4
3tFa5KFzfvp5BWhn5jSUluetWHNCG7FQvcyKM3BA7gmX3PzCwBOm9W/mV9COUXJV
/QxAizqmOkRI3lBQygMljnv3LRwCIDN8USWXJ6K64lBQ96J0Z+KXqpk6Yg0CAwEA
AaOCAgkwggIFMB0GA1UdDgQWBBT1R+rd01ipLoxXhFEgyXkRLB5cejAfBgNVHSME
GDAWgBRPwza/nz3lzkFBS9GXGUX0ska/zDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS8wOWJlM2FhZS1hZWExLTQxZGMtYjFiOS05NWFjNTkxODI0
NGQvMC80RkMzMzZCRjlGM0RFNUNFNDE0MTRCRDE5NzE5NDVGNEIyNDZCRkNDLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVDhNMnY1ODk1YzVCUVV2Umx4bEY5TEpH
djh3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00
MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvQVMzNjM1Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKNETAN
BgkqhkiG9w0BAQsFAAOCAQEAb00q4lv+1uIGnfPRF4nRrqA1ZLe211fgxBS1tpn2
KnrJU627ZRnPgcsPUrM4BUPiW6+NtD54gQzD4/6g2XMl1a6HkpjbvjgWpbaFWct5
wtRYbg82Kx5RIGipi9veEnaNDsr82T8lIh2RNlGDQGVkUCGCLNaaZtfzJdZeZ7F1
IilNxV9WDVM9BdaSqTgiBhIkHP89Bj7toscsJ2y/HCg9xPPzU/3u8yBMvvih8v6N
eDNbwE9WqH8X1yxDh7fUdFz3d0OqGH+jUr0XwNMeDqN8kRtF610K1MG2HH6CNfvo
SApgxEDjz9od00QCMEtS4gPBBiumv3o327sRei94z0EQEA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:10:24 2026 by rpki-client