Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
File: AS18186.roa (raw, json)
Hash identifier: OrTaaPWUSiLlByFF9D6qI6XfyjbiI3jAaYxw1C1QiX0=
Subject key identifier: 1A:10:3E:40:E1:66:DD:BB:A0:31:A9:CE:35:01:A5:28:60:7F:1C:DB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 46A21AD09CB174994531150576280C19A27D8EB7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
Signing time: Tue 05 Aug 2025 07:50:22 +0000
ROA not before: Tue 05 Aug 2025 07:45:22 +0000
ROA not after: Tue 04 Aug 2026 07:50:22 +0000
asID: 18186
IP address blocks: 96.62.222.0/24 maxlen: 24
140.233.171.0/24 maxlen: 24
143.14.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a2:1a:d0:9c:b1:74:99:45:31:15:05:76:28:0c:19:a2:7d:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 5 07:45:22 2025 GMT
Not After : Aug 4 07:50:22 2026 GMT
Subject: CN=1A103E40E166DDBBA031A9CE3501A528607F1CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e4:61:83:25:d3:19:0a:5c:90:19:8b:17:
56:e5:68:ce:f3:e1:ce:1d:8b:eb:eb:14:f1:f2:e0:
af:75:4b:82:20:be:27:ff:39:b7:12:18:9d:e1:2e:
c1:35:16:49:25:8d:f9:b3:29:91:eb:62:1c:88:f2:
ce:8e:a4:c3:5b:29:b2:f8:4f:61:e5:74:ab:54:50:
3f:f3:86:01:aa:e0:e5:e8:09:af:79:41:d1:54:07:
22:27:9c:f6:13:7c:48:ed:c3:7e:dd:4c:a2:3d:4b:
7e:59:ea:d4:b9:5e:0f:9e:ac:08:49:c6:ba:06:48:
ed:69:8b:cd:09:ab:8e:f5:35:aa:69:a4:1a:e6:b3:
5e:74:c8:6b:77:5e:a5:8a:fb:8f:15:1a:e2:41:41:
50:07:b2:dc:e2:34:fd:64:06:d7:8d:d1:e8:5e:64:
e7:f5:8f:71:6e:4f:e7:a0:cf:a2:22:49:99:c7:31:
f3:e9:23:bb:82:e5:97:b3:dc:cb:9c:f5:74:af:3f:
84:80:7b:82:80:20:6d:e5:3a:d1:35:65:b7:8f:f6:
80:bf:cc:9f:f1:a7:b8:5a:e2:50:86:d8:69:ea:50:
69:6d:be:1b:89:43:b4:18:55:af:b9:1f:46:2e:58:
84:49:f9:17:b4:41:d4:65:c1:2c:df:2f:97:04:33:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:10:3E:40:E1:66:DD:BB:A0:31:A9:CE:35:01:A5:28:60:7F:1C:DB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.222.0/24
140.233.171.0/24
143.14.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0a:e3:07:0d:6b:c6:b0:10:09:01:90:e8:a8:8a:18:d3:51:
e6:4f:16:75:db:ae:61:a6:e6:f6:83:3e:ca:b2:d4:e2:7c:7a:
5b:a9:c8:5f:e4:f0:d4:62:c0:59:aa:30:30:d6:8a:5a:69:1c:
74:64:e3:18:2d:00:95:7c:e4:ea:ab:d8:9b:3b:fe:15:5f:f5:
71:75:4a:b9:b7:e6:fa:ce:81:78:c5:1f:b5:64:e8:44:14:15:
49:d0:05:dd:3a:f5:5c:3d:fc:91:9a:53:5f:65:df:28:03:09:
10:72:cd:7b:ef:03:c5:1f:df:89:4b:7f:0c:16:0c:d0:05:d7:
af:a4:1a:9d:f0:29:33:f1:16:f7:65:b0:09:48:15:89:3b:25:
b6:cc:f8:1f:cb:90:93:40:42:90:46:45:79:0c:26:e0:5e:d8:
cb:9e:58:94:c9:be:3f:b9:c9:a5:df:77:1a:10:39:8b:47:4f:
e7:25:39:fd:1d:77:0a:62:4d:07:a3:68:86:dd:88:54:bd:22:
87:f9:87:e6:7c:7f:66:f9:a7:66:70:a6:25:1a:59:70:b1:30:
f5:9a:1c:36:aa:ce:cf:db:66:d4:78:80:16:80:da:88:0a:a5:
68:6d:c2:7b:58:1e:bd:51:2d:b7:32:39:87:5e:66:0b:cc:de:
48:af:af:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:33 2025 by rpki-client