Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
File: AS18427.roa (raw, json)
Hash identifier: mS8KNpuK8JU1fBn+IBB72Nae5CvY8LGiD7PAUkuGT5g=
Subject key identifier: 27:6D:1C:36:79:B9:DF:BB:BE:7B:E6:30:79:0D:75:0E:67:34:76:D5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0BC180B1032BF9B5F5DD10BC1AD6143F49DCEC5B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
Signing time: Mon 05 Oct 2026 09:49:35 +0000
ROA not before: Mon 05 Oct 2026 09:44:35 +0000
ROA not after: Mon 04 Oct 2027 09:49:35 +0000
asID: 18427
IP address blocks: 96.62.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c1:80:b1:03:2b:f9:b5:f5:dd:10:bc:1a:d6:14:3f:49:dc:ec:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 5 09:44:35 2026 GMT
Not After : Oct 4 09:49:35 2027 GMT
Subject: CN=276D1C3679B9DFBBBE7BE630790D750E673476D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:f7:75:e5:2c:59:04:d9:97:0f:57:cb:e9:
32:62:ed:d9:93:bc:b9:3b:93:06:63:3e:6f:97:2b:
a4:32:ba:ae:ee:c1:75:bd:86:ff:1f:9c:af:18:35:
32:70:bb:8c:38:aa:1d:c6:6e:ad:fc:2c:26:12:1e:
05:e3:9c:7f:32:5e:a6:3e:c4:68:f5:45:e2:21:95:
c1:13:70:25:0f:1c:25:7d:09:be:c5:32:25:4d:42:
91:9e:3f:31:84:11:e5:b9:91:8a:32:04:eb:0e:60:
9d:61:85:55:de:22:2a:c7:f5:d1:30:ed:2f:3f:ab:
78:e2:b8:c1:ab:21:c5:51:5c:19:36:91:98:f2:0f:
cf:5c:51:cf:26:0d:8b:65:da:b0:39:ff:80:87:7b:
b5:98:13:7e:5b:7e:8c:b8:41:f7:88:ed:96:7e:4f:
b6:ab:c1:c7:55:20:32:ee:2e:b4:cc:f8:bc:75:22:
f5:58:30:e8:80:6d:5a:c0:2a:de:a6:cd:5a:d6:10:
af:12:85:60:0c:11:8f:28:df:c4:0c:d0:24:6a:f0:
29:dc:54:f1:e1:55:14:4b:d5:be:ad:60:54:e4:c3:
21:89:62:cf:02:da:c2:49:84:9c:c2:46:92:58:43:
18:e0:7d:41:3e:15:ff:17:8b:a4:2e:0c:7f:b5:0c:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:1C:36:79:B9:DF:BB:BE:7B:E6:30:79:0D:75:0E:67:34:76:D5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.221.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fe:6b:01:1a:af:d4:09:49:d9:f9:e1:1c:97:a4:64:8b:89:
ab:79:1e:ee:4f:5e:50:9d:c6:af:4a:6c:16:39:39:46:0f:0b:
cc:fa:62:06:4c:3d:de:42:14:62:b9:9e:88:f1:bf:19:65:db:
99:46:c5:98:b7:60:ed:33:32:12:24:bd:1f:a1:86:ea:1f:32:
93:34:b3:5f:21:12:da:ab:ca:52:a5:cf:18:40:bb:cf:6e:d3:
b3:89:78:e5:73:63:39:56:6b:90:7a:60:de:63:da:f1:26:4b:
ee:64:b0:1c:4e:0a:89:03:d4:cf:0b:98:07:af:63:da:8b:ef:
a7:fb:09:22:ae:01:77:3a:34:4c:46:d9:07:65:34:29:5a:a8:
9c:a9:a0:38:aa:13:85:de:8b:4c:40:00:3c:e9:e4:78:d1:da:
5c:85:2a:17:f1:3f:e4:0a:a0:7a:f1:c4:09:f9:6a:f2:cd:2e:
bc:d9:ee:73:dc:3a:3c:15:b7:4d:ff:87:2b:90:2f:0e:25:10:
49:24:21:52:a5:24:ac:94:19:6d:4d:b9:dd:97:57:c3:a3:45:
f2:d9:df:5c:24:b6:99:0d:47:3e:e7:c1:2b:67:51:28:3a:8e:
5f:cf:3a:f1:dd:52:2c:19:b4:f7:7b:05:fc:57:b8:93:a7:04:
44:e8:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:18 2026 by rpki-client