Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18450.roa
File: AS18450.roa (raw, json)
Hash identifier: MfO2vCVSFQEXzt4ivW7ehX9sxG23T7RMjYuiq3nHgOE=
Subject key identifier: 48:43:90:A1:81:A8:D6:C0:DB:58:73:B4:C3:14:7F:2F:5D:2A:2D:79
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2D0CD8B7590C8C1BD3063CB6A69B33FCB31FB427
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18450.roa
Signing time: Wed 20 Aug 2025 06:35:55 +0000
ROA not before: Wed 20 Aug 2025 06:30:55 +0000
ROA not after: Wed 19 Aug 2026 06:35:55 +0000
asID: 18450
IP address blocks: 140.150.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0c:d8:b7:59:0c:8c:1b:d3:06:3c:b6:a6:9b:33:fc:b3:1f:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 20 06:30:55 2025 GMT
Not After : Aug 19 06:35:55 2026 GMT
Subject: CN=484390A181A8D6C0DB5873B4C3147F2F5D2A2D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:d2:f7:ce:93:45:cf:88:b9:e9:84:09:01:
9a:f8:90:ce:b9:bf:c6:9d:da:ec:cf:09:59:0d:ff:
25:fc:d9:58:03:91:7a:70:7d:14:47:d6:bf:e7:1a:
e8:23:76:8a:8c:74:e8:17:f1:bb:4f:e3:da:f3:64:
8a:e1:4f:7c:75:d0:11:8e:6d:95:14:da:4a:cb:f7:
ef:71:8c:60:6a:7e:2c:cd:1a:28:33:7a:1e:08:17:
42:28:b4:f0:12:d5:a7:cf:92:3e:0a:a4:21:53:3f:
ff:b5:2c:85:6e:db:33:d5:c4:97:b5:bf:4e:09:9f:
ad:e1:f4:22:ed:f9:12:a5:ca:94:b7:b1:67:31:37:
58:ff:47:0b:2d:4d:8f:a3:18:75:c9:99:cc:86:a3:
9b:47:39:39:59:c2:62:dd:89:b5:10:73:9c:92:a2:
c8:44:9a:b5:9d:13:fd:6d:a8:3c:35:7f:f1:3d:18:
27:a8:72:cb:d9:f1:35:22:14:78:7c:97:64:f3:e7:
96:1a:7f:0c:e4:ff:c6:d7:74:b5:88:2f:6f:b4:76:
17:80:e1:ae:7a:2a:fd:23:62:ba:d9:a0:d9:4a:8b:
56:83:c0:fd:73:b3:b7:f2:22:b5:29:e5:9a:a3:a5:
d7:19:26:c5:21:92:7d:df:35:5f:02:8f:31:6b:46:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:90:A1:81:A8:D6:C0:DB:58:73:B4:C3:14:7F:2F:5D:2A:2D:79
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.238.0/23
Signature Algorithm: sha256WithRSAEncryption
59:92:f8:1e:25:58:d9:13:98:78:ef:4c:cc:10:ed:67:8b:bf:
e4:a8:e1:c5:c5:85:ae:0e:b9:b1:8c:b6:a0:5b:1e:c0:62:c5:
a1:b7:85:52:d0:26:fe:cc:b6:55:6f:10:bb:fb:61:8b:0b:d3:
b0:12:a0:6b:a7:42:27:a8:0a:3b:11:d6:cd:cd:7f:a6:6d:9c:
0c:3f:2c:f5:23:83:1b:43:90:f2:eb:92:9f:69:35:df:8a:73:
67:60:76:55:2b:9a:22:ba:1c:08:a8:f1:a8:20:fc:9e:82:93:
a2:c5:b1:45:75:5b:6a:31:29:1a:55:a5:b9:af:b9:c9:ad:43:
a3:8f:c9:32:21:f4:5d:b3:de:6e:52:d2:b4:0a:da:44:4d:b6:
6a:6d:a0:61:53:73:9c:fd:eb:9d:66:b4:55:e0:73:5e:5b:4b:
fb:85:fc:88:d6:d8:ad:50:ed:26:9a:27:1b:5f:fc:80:63:f3:
f5:b0:84:4c:43:40:f7:fc:49:c4:df:fd:19:4c:28:91:53:6c:
77:ab:02:e7:82:b7:6c:36:3c:52:fd:a1:75:ca:39:fa:22:15:
94:e1:38:00:12:42:4f:f1:e3:51:81:e8:d0:df:60:cb:e5:26:
0c:98:c9:6c:99:46:a4:73:c1:e6:f7:48:ed:bd:c0:a4:74:f2:
b6:4f:2c:b2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULQzYt1kMjBvTBjy2ppsz/LMftCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA4MjAwNjMwNTVaFw0yNjA4MTkwNjM1NTVaMDMxMTAvBgNV
BAMTKDQ4NDM5MEExODFBOEQ2QzBEQjU4NzNCNEMzMTQ3RjJGNUQyQTJENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLztL3zpNFz4i56YQJAZr4kM65
v8ad2uzPCVkN/yX82VgDkXpwfRRH1r/nGugjdoqMdOgX8btP49rzZIrhT3x10BGO
bZUU2krL9+9xjGBqfizNGigzeh4IF0IotPAS1afPkj4KpCFTP/+1LIVu2zPVxJe1
v04Jn63h9CLt+RKlypS3sWcxN1j/RwstTY+jGHXJmcyGo5tHOTlZwmLdibUQc5yS
oshEmrWdE/1tqDw1f/E9GCeocsvZ8TUiFHh8l2Tz55Yafwzk/8bXdLWIL2+0dheA
4a56Kv0jYrrZoNlKi1aDwP1zs7fyIrUp5ZqjpdcZJsUhkn3fNV8CjzFrRlahAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUSEOQoYGo1sDbWHO0wxR/L10qLXkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTg0NTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGMlu4w
DQYJKoZIhvcNAQELBQADggEBAFmS+B4lWNkTmHjvTMwQ7WeLv+So4cXFha4OubGM
tqBbHsBixaG3hVLQJv7MtlVvELv7YYsL07ASoGunQieoCjsR1s3Nf6ZtnAw/LPUj
gxtDkPLrkp9pNd+Kc2dgdlUrmiK6HAio8agg/J6Ck6LFsUV1W2oxKRpVpbmvucmt
Q6OPyTIh9F2z3m5S0rQK2kRNtmptoGFTc5z9651mtFXgc15bS/uF/IjW2K1Q7Saa
Jxtf/IBj8/WwhExDQPf8ScTf/RlMKJFTbHerAueCt2w2PFL9oXXKOfoiFZThOAAS
Qk/x41GB6NDfYMvlJgyYyWyZRqRzweb3SO29wKR08rZPLLI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:50 2025 by rpki-client