Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: oWBl6elfQNnQakAo8Qog+kJapcnmW7zPk0fIARLFqvI=
Subject key identifier: 78:E9:0B:A3:53:59:10:86:29:48:0B:64:01:6C:F8:8D:64:AC:89:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1E1E47741FD891E198608F617296D02FB405191B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
Signing time: Sat 02 May 2026 03:17:12 +0000
ROA not before: Sat 02 May 2026 03:12:12 +0000
ROA not after: Sat 01 May 2027 03:17:12 +0000
asID: 36530
IP address blocks: 46.203.203.0/24 maxlen: 24
92.113.124.0/23 maxlen: 24
92.113.142.0/23 maxlen: 24
178.94.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1e:47:74:1f:d8:91:e1:98:60:8f:61:72:96:d0:2f:b4:05:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 2 03:12:12 2026 GMT
Not After : May 1 03:17:12 2027 GMT
Subject: CN=78E90BA35359108629480B64016CF88D64AC8957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:84:75:6d:fc:b4:a7:b5:9b:0d:11:0b:78:
01:95:3c:0b:17:4d:c1:0e:73:f6:f4:32:fe:b8:33:
7f:8c:32:e9:8a:4a:cc:3a:e4:3d:ef:d7:4c:ab:6f:
d5:61:cc:9e:77:25:42:d0:c3:59:7c:df:43:27:73:
50:45:85:17:57:a4:20:c2:5a:d5:b6:79:1d:cd:aa:
e1:88:be:f7:d7:f6:0d:02:86:0c:0d:11:dd:de:ae:
c1:0d:b1:9f:c4:de:85:2b:a7:92:60:ec:90:d3:7e:
ea:fc:f6:b5:6e:01:d8:85:fa:29:33:7c:c3:96:f4:
09:a1:11:7a:5b:56:84:05:b0:45:e4:f7:a8:f1:58:
cb:a4:14:b5:4b:16:2a:66:76:60:58:4c:67:03:b1:
86:d2:76:0a:7a:26:9d:b9:7f:3f:f5:9e:bb:bf:df:
5a:1f:88:c4:85:ee:08:ac:2b:ab:fd:1f:98:65:9c:
81:16:6a:2d:4d:57:9c:8c:19:90:27:89:78:24:fe:
cf:df:d2:26:91:5e:de:9f:82:8e:c9:8e:02:2a:7a:
42:76:1a:8b:83:5a:88:c4:6b:2b:af:4f:f2:19:6c:
75:8e:81:d4:75:30:a7:6a:5d:7e:69:16:c6:ee:51:
c2:bb:a5:0a:a7:8e:3d:9f:2d:4d:bb:d3:b4:e9:b7:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:0B:A3:53:59:10:86:29:48:0B:64:01:6C:F8:8D:64:AC:89:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.203.0/24
92.113.124.0/23
92.113.142.0/23
178.94.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3d:da:22:58:67:b4:a1:6c:08:8b:5f:95:7f:11:d5:45:a3:
a7:f4:8a:08:77:94:41:e3:21:f1:a2:24:16:4a:45:1b:72:d4:
0b:a9:04:c1:60:45:f4:54:3d:e2:d7:aa:47:58:d3:b0:d3:26:
80:2a:e4:f1:8e:1f:7d:fe:00:b8:db:76:1d:b1:e1:f8:9c:60:
46:20:73:c5:2c:2c:cd:a3:4c:ff:2f:51:3e:7f:c9:a6:c7:55:
7c:3c:e0:d1:38:98:eb:68:6c:d8:fc:a2:98:63:48:d3:ff:d8:
eb:96:ed:14:1e:91:f9:e5:62:45:44:cb:29:32:5b:82:0f:3a:
35:33:7d:62:ef:a8:27:d6:f3:b4:e1:f3:a2:6d:e3:83:79:44:
95:72:fc:b7:51:f5:27:4b:1f:fa:44:26:2f:58:87:4a:bd:e9:
7b:c0:64:71:7b:bd:fa:97:b6:0e:1a:0b:8d:8e:4f:2e:5a:47:
dd:44:a4:ae:e4:97:fb:b1:7f:da:43:78:ba:89:c3:f3:00:26:
64:72:87:bc:3b:b2:fe:43:ac:43:f6:f1:1e:bb:03:ac:aa:f2:
03:8a:f3:3c:28:a5:69:a4:d2:61:89:b7:4a:5f:3b:8a:8c:4b:
47:b3:52:c8:75:c6:1e:10:50:b8:ac:35:81:c2:21:e2:3f:84:
e4:f7:c9:fb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUHh5HdB/YkeGYYI9hcpbQL7QFGRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA1MDIwMzEyMTJaFw0yNzA1MDEwMzE3MTJaMDMxMTAvBgNV
BAMTKDc4RTkwQkEzNTM1OTEwODYyOTQ4MEI2NDAxNkNGODhENjRBQzg5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQIR1bfy0p7WbDRELeAGVPAsX
TcEOc/b0Mv64M3+MMumKSsw65D3v10yrb9VhzJ53JULQw1l830Mnc1BFhRdXpCDC
WtW2eR3NquGIvvfX9g0ChgwNEd3ersENsZ/E3oUrp5Jg7JDTfur89rVuAdiF+ikz
fMOW9AmhEXpbVoQFsEXk96jxWMukFLVLFipmdmBYTGcDsYbSdgp6Jp25fz/1nru/
31ofiMSF7gisK6v9H5hlnIEWai1NV5yMGZAniXgk/s/f0iaRXt6fgo7JjgIqekJ2
GouDWojEayuvT/IZbHWOgdR1MKdqXX5pFsbuUcK7pQqnjj2fLU2707Tpt3CXAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUeOkLo1NZEIYpSAtkAWz4jWSsiVcwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAAuy8sD
BAFccXwDBAFccY4DBACyXgswDQYJKoZIhvcNAQELBQADggEBAF492iJYZ7ShbAiL
X5V/EdVFo6f0igh3lEHjIfGiJBZKRRty1AupBMFgRfRUPeLXqkdY07DTJoAq5PGO
H33+ALjbdh2x4ficYEYgc8UsLM2jTP8vUT5/yabHVXw84NE4mOtobNj8ophjSNP/
2OuW7RQekfnlYkVEyykyW4IPOjUzfWLvqCfW87Th86Jt44N5RJVy/LdR9SdLH/pE
Ji9Yh0q96XvAZHF7vfqXtg4aC42OTy5aR91EpK7kl/uxf9pDeLqJw/MAJmRyh7w7
sv5DrEP28R67A6yq8gOK8zwopWmk0mGJt0pfO4qMS0ezUsh1xh4QULisNYHCIeI/
hOT3yfs=
-----END CERTIFICATE-----
Generated at Wed May 13 01:05:50 2026 by rpki-client