Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa
File: AS36002.roa (raw, json)
Hash identifier: GZtOamaT7g8XDVuv5exMYBJOlnkQhPlNHvwWkT2jcJs=
Subject key identifier: B1:C6:84:C1:16:58:14:CD:21:A4:17:EF:F0:8C:88:4C:C5:E3:81:C1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 78B638E7BF709A7AF1CBE3F8ECD9CB4B159122AF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa
Signing time: Thu 12 Nov 2026 05:49:41 +0000
ROA not before: Thu 12 Nov 2026 05:44:41 +0000
ROA not after: Thu 11 Nov 2027 05:49:41 +0000
asID: 36002
IP address blocks: 141.11.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b6:38:e7:bf:70:9a:7a:f1:cb:e3:f8:ec:d9:cb:4b:15:91:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 12 05:44:41 2026 GMT
Not After : Nov 11 05:49:41 2027 GMT
Subject: CN=B1C684C1165814CD21A417EFF08C884CC5E381C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:63:3a:6b:33:4e:c8:d5:5e:f5:64:92:29:
13:e6:45:98:1b:8d:63:c9:76:b6:25:aa:e3:f9:15:
f5:7b:0e:1f:12:4b:8e:c3:56:3b:3c:8a:c0:bd:82:
d6:f2:0b:85:a8:7f:a2:50:8c:70:c8:74:2c:7f:34:
00:38:1c:35:7c:c2:cc:b4:8e:43:24:14:45:97:ac:
72:f2:ee:25:ac:83:c0:15:e7:29:50:23:10:ae:e7:
de:03:e5:c0:13:82:f1:5c:7b:66:0a:88:16:7c:a4:
0b:4a:df:52:07:3b:82:3b:13:d8:64:d3:b1:77:bc:
d8:e6:e3:04:29:ee:da:90:70:44:30:f9:91:3c:38:
b0:29:39:d4:08:a9:93:fd:92:2f:00:b4:dc:28:80:
50:42:ee:b2:60:f1:cb:90:4e:cf:61:22:db:07:34:
91:1b:dd:6a:26:12:6d:89:85:12:84:cf:ca:dc:bf:
a4:f2:e2:c3:58:06:e2:61:89:be:b7:cd:a3:12:c8:
b2:0e:0f:75:57:36:08:26:2c:8c:a1:37:ca:ab:29:
2b:89:c2:67:ba:7b:ae:18:97:59:f3:eb:35:cd:65:
dd:f3:6f:89:29:b7:8f:59:98:22:95:5d:71:15:c7:
b1:af:1d:23:11:85:af:b5:fe:3a:14:08:b8:58:08:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:84:C1:16:58:14:CD:21:A4:17:EF:F0:8C:88:4C:C5:E3:81:C1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.77.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ad:17:84:2d:7b:08:76:5d:f7:a4:0e:86:7c:7e:78:d6:53:
b1:5a:61:cd:74:fb:1a:43:26:ca:ed:7c:db:65:ba:d3:b8:d6:
82:ce:5f:93:39:8f:6d:71:7e:df:55:2f:27:22:97:b2:87:66:
b6:f3:db:66:28:24:ba:98:1e:f4:c1:fc:75:a4:d0:b5:34:b0:
da:21:50:29:e7:68:44:3a:f4:fd:ef:ee:e1:c1:37:5f:a8:ef:
78:3b:ff:2b:32:f1:75:99:af:4a:2d:10:ba:a7:d8:5f:e2:dd:
7a:2d:a8:cf:4f:7d:87:25:ac:23:b0:c6:82:07:d4:c2:c0:0b:
8e:eb:b1:52:29:ef:2e:93:e4:dd:13:d8:f0:93:d0:37:80:66:
00:52:ba:d1:52:68:05:ed:62:da:ee:86:e0:14:f8:78:51:1f:
63:d6:94:31:20:8e:ad:ac:4f:05:99:3d:6c:eb:23:75:9f:12:
c4:1f:50:37:fb:fb:d1:5a:6e:ca:50:f8:b3:d8:40:b9:65:e2:
fc:54:83:81:e8:85:ef:3e:d2:0e:64:e5:ce:0c:ea:ae:15:cf:
28:d1:04:1f:3e:a8:d8:11:54:59:44:ff:ae:d8:56:c0:19:e4:
37:00:3c:c9:fe:0e:51:85:49:ae:3b:51:cd:f4:cf:6c:90:2a:
41:b4:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:33 2026 by rpki-client