Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: kHlMsy219WhpFZvWE939NGfGZsdYiz1GUIabZZJalDg=
Subject key identifier: 75:7D:4F:AC:BA:86:B9:7F:1A:FC:01:88:7C:00:C1:B8:58:70:82:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 290615246438FBC10669216868979162F42FFD36
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7018.roa
Signing time: Fri 24 Jul 2026 15:34:23 +0000
ROA not before: Fri 24 Jul 2026 15:29:23 +0000
ROA not after: Fri 23 Jul 2027 15:34:23 +0000
asID: 7018
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.37.0/24 maxlen: 24
96.62.45.0/24 maxlen: 24
96.62.47.0/24 maxlen: 24
96.62.48.0/23 maxlen: 24
96.62.50.0/23 maxlen: 24
96.62.52.0/23 maxlen: 24
96.62.54.0/24 maxlen: 24
96.62.55.0/24 maxlen: 24
96.62.56.0/24 maxlen: 24
96.62.57.0/24 maxlen: 24
96.62.58.0/24 maxlen: 24
96.62.60.0/23 maxlen: 24
96.62.62.0/23 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.79.0/24 maxlen: 24
96.62.80.0/23 maxlen: 24
96.62.82.0/23 maxlen: 24
96.62.85.0/24 maxlen: 24
96.62.86.0/23 maxlen: 24
96.62.88.0/24 maxlen: 24
96.62.90.0/23 maxlen: 24
96.62.92.0/23 maxlen: 24
96.62.94.0/23 maxlen: 24
96.62.98.0/23 maxlen: 24
96.62.135.0/24 maxlen: 24
96.62.149.0/24 maxlen: 24
96.62.150.0/24 maxlen: 24
96.62.151.0/24 maxlen: 24
140.233.192.0/18 maxlen: 24
148.135.216.0/23 maxlen: 23
148.135.218.0/23 maxlen: 23
148.135.224.0/23 maxlen: 23
148.135.226.0/23 maxlen: 23
148.135.232.0/23 maxlen: 23
148.135.234.0/23 maxlen: 23
148.135.240.0/23 maxlen: 23
148.135.242.0/23 maxlen: 23
148.135.248.0/23 maxlen: 23
148.135.250.0/23 maxlen: 23
150.241.146.0/23 maxlen: 24
150.241.148.0/23 maxlen: 24
150.241.150.0/23 maxlen: 24
150.241.152.0/23 maxlen: 24
150.241.154.0/23 maxlen: 24
150.241.156.0/23 maxlen: 24
150.241.158.0/23 maxlen: 24
150.241.160.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
150.241.164.0/23 maxlen: 24
150.241.166.0/23 maxlen: 24
150.241.168.0/23 maxlen: 24
150.241.170.0/23 maxlen: 24
150.241.172.0/23 maxlen: 24
150.241.176.0/23 maxlen: 24
150.241.178.0/23 maxlen: 24
150.241.180.0/23 maxlen: 24
150.241.182.0/23 maxlen: 24
150.241.184.0/23 maxlen: 24
150.241.186.0/23 maxlen: 24
150.241.188.0/23 maxlen: 24
150.241.190.0/23 maxlen: 24
150.241.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:06:15:24:64:38:fb:c1:06:69:21:68:68:97:91:62:f4:2f:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 15:29:23 2026 GMT
Not After : Jul 23 15:34:23 2027 GMT
Subject: CN=757D4FACBA86B97F1AFC01887C00C1B85870828F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:d0:1a:98:f5:38:6d:59:3c:04:fa:8b:83:
7c:58:b7:61:2d:2a:bb:38:9b:26:94:d7:75:4e:dd:
d0:eb:ae:cb:35:c5:ec:c9:c1:46:d0:e2:d9:fc:8a:
86:01:5f:6b:52:a1:f5:fc:c6:7a:a2:6d:e8:45:b1:
2d:28:21:38:99:ed:2e:31:d5:10:f7:83:f3:67:5c:
5b:f8:76:e4:52:b3:cd:47:46:a0:99:7a:04:0e:30:
93:fe:6b:b0:d6:6c:b5:f9:58:b3:40:6d:43:fe:29:
7b:22:a4:64:c1:35:f1:a6:df:20:38:cc:79:ce:f9:
3b:10:e4:7e:b9:1f:48:b9:de:df:2c:8b:0f:67:9d:
94:f8:68:f1:3f:f1:ab:3d:e4:e3:4a:da:02:69:62:
c5:9c:04:40:db:d0:92:46:59:7a:6b:70:94:b3:3c:
40:5a:cc:54:d5:ff:5e:86:d3:5a:a9:22:d5:a8:27:
2c:51:95:4c:54:eb:4b:85:29:a0:c2:d1:fc:7b:1d:
63:ab:a8:bd:31:e8:1c:44:fc:04:11:1e:f3:ac:a8:
32:9e:74:37:df:1f:02:99:fe:31:06:8a:7a:86:26:
ea:95:88:3b:77:5b:86:57:8a:4e:60:4f:35:9c:7f:
6f:9a:fb:0f:19:5e:91:22:02:36:50:ca:f5:33:20:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:4F:AC:BA:86:B9:7F:1A:FC:01:88:7C:00:C1:B8:58:70:82:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.33.0-96.62.37.255
96.62.45.0/24
96.62.47.0-96.62.58.255
96.62.60.0-96.62.67.255
96.62.79.0-96.62.83.255
96.62.85.0-96.62.88.255
96.62.90.0-96.62.95.255
96.62.98.0/23
96.62.135.0/24
96.62.149.0-96.62.151.255
140.233.192.0/18
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
150.241.146.0-150.241.173.255
150.241.176.0/20
150.241.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0e:09:98:08:89:0b:22:5f:7b:c7:4e:3a:93:af:5e:a8:e6:
f4:53:e3:fd:95:fd:2d:c7:be:2a:4c:71:41:f3:81:ea:56:10:
b5:05:b4:49:e6:aa:4a:de:e2:7d:5c:e0:3e:e8:79:e8:f5:37:
98:39:d2:ac:4f:30:ce:07:fa:2a:bf:03:8f:4b:f5:f0:59:37:
65:15:27:20:ea:2c:9d:43:e5:dc:9e:b8:19:c6:f7:cb:73:aa:
e1:cf:c8:29:71:e2:39:4d:2c:4f:a6:f2:ae:51:ce:1a:a1:fb:
f6:82:3d:5d:1b:b2:d7:56:06:78:69:3d:2a:d4:64:af:56:83:
38:fc:96:58:01:1f:03:54:3d:27:c8:20:5f:6a:77:52:df:88:
a1:17:21:ba:16:e2:f1:1f:dc:f8:db:cd:5c:32:f2:3c:d0:cd:
79:09:6c:7d:6d:f2:73:04:7a:ca:fb:06:2a:fe:cb:c5:93:8a:
ec:bf:58:7b:f6:52:9c:5c:af:e2:95:29:f9:c6:c5:45:25:74:
67:82:01:d3:b9:1a:54:05:37:17:60:3e:47:97:7a:11:e3:29:
33:ea:81:64:bf:f5:dc:6b:fd:0f:35:2a:0f:3e:58:9a:4c:d5:
07:7d:9b:2d:72:e6:3d:61:b6:14:8d:20:a3:1e:77:5e:2e:04:
12:2e:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:41 2026 by rpki-client