Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: ymH53ZT9CB711SyMvhvXtVhevRQRFUFoQGwbRXqaAcE=
Subject key identifier: 01:6B:82:1E:51:05:99:91:72:50:6A:D9:3A:37:14:26:D3:CA:80:D1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CFE026C9EFB5944E4E824B9AAEC53B88DDAF19B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
Signing time: Thu 12 Mar 2026 08:43:47 +0000
ROA not before: Thu 12 Mar 2026 08:38:47 +0000
ROA not after: Thu 11 Mar 2027 08:43:47 +0000
asID: 9318
IP address blocks: 82.23.13.0/24 maxlen: 24
82.40.39.0/24 maxlen: 24
82.41.3.0/24 maxlen: 24
178.83.26.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
178.83.167.0/24 maxlen: 24
178.83.168.0/24 maxlen: 24
178.83.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:fe:02:6c:9e:fb:59:44:e4:e8:24:b9:aa:ec:53:b8:8d:da:f1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 12 08:38:47 2026 GMT
Not After : Mar 11 08:43:47 2027 GMT
Subject: CN=016B821E5105999172506AD93A371426D3CA80D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:b5:10:a6:a8:e7:42:0a:ac:60:a9:b3:5f:
f6:e5:82:6f:0d:78:ae:bb:f3:62:2c:7e:cd:d0:f8:
50:21:1d:c0:25:bd:df:a7:67:65:6f:cf:fd:51:72:
97:50:34:7b:2f:e0:8c:d7:fe:06:d9:fa:41:f8:9d:
82:a7:e8:5b:32:cd:f9:ac:e6:95:84:7d:fa:43:8e:
dc:7f:45:03:9a:18:36:51:c8:6d:10:80:e3:cd:58:
83:7f:fe:6d:43:72:f0:f9:f4:b5:fb:e4:6c:0e:5a:
21:9e:85:a0:9c:9d:b6:6f:15:86:0f:25:89:d5:1b:
10:29:a5:9b:14:bb:e7:d5:fd:e8:15:7d:ec:ad:bc:
9b:bc:78:0e:5f:0b:36:6a:7e:a9:ce:36:78:33:bf:
47:da:ee:3e:f6:64:95:cd:fe:73:d2:21:ce:23:e1:
19:f2:05:0b:32:bd:06:57:9b:10:49:0f:10:18:f8:
69:42:5c:fe:ae:a1:a5:f8:90:8e:17:8a:fa:d0:21:
58:02:df:50:bd:18:9f:3a:75:78:f5:fd:16:46:80:
73:07:c0:a2:85:65:d6:42:2d:53:61:37:e8:67:8e:
85:07:56:4e:64:55:b5:ff:e1:4b:47:50:df:7a:27:
b0:4d:03:a0:b7:d6:b0:37:9a:49:ec:90:1f:0e:37:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:82:1E:51:05:99:91:72:50:6A:D9:3A:37:14:26:D3:CA:80:D1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.13.0/24
82.40.39.0/24
82.41.3.0/24
178.83.26.0/24
178.83.165.0/24
178.83.167.0-178.83.169.255
Signature Algorithm: sha256WithRSAEncryption
52:6f:04:e3:0d:21:4d:17:7a:a4:74:2d:6e:6a:07:25:d5:2b:
c8:92:f0:a6:24:c3:eb:e1:fc:04:4f:de:72:9e:50:1d:7b:af:
75:88:6d:99:b1:dc:fc:30:9e:cb:cf:29:50:93:e6:cf:f6:a6:
ac:59:f0:77:33:7c:f0:75:12:a8:56:2b:07:3f:50:6f:ac:19:
30:7c:cf:36:b8:03:e8:d2:76:c1:7c:9c:7c:4f:22:48:6b:a1:
7f:c7:fa:c5:dc:8e:5c:77:27:0e:e4:67:46:68:5e:09:5b:17:
b0:84:0a:f2:c4:6a:ad:84:3f:5b:b2:a3:af:84:a9:4e:25:f2:
25:7e:20:5b:f0:f3:2c:da:71:0e:44:22:5f:b9:88:71:e9:89:
83:99:76:31:f4:42:55:f9:53:cd:a1:76:9c:c9:69:cd:12:95:
47:16:be:5b:fa:ee:d5:c3:65:1a:1a:d0:82:1e:1a:7f:72:fd:
c4:57:af:a0:3d:8f:e8:6f:21:e4:bf:2c:ad:9a:11:78:f7:30:
f9:d8:3e:f6:18:b8:9f:ae:d1:fa:e2:a0:9f:6f:6b:d9:cb:5c:
45:0b:21:4e:94:d1:f9:63:a7:af:cd:24:db:34:bc:2a:0c:95:
2f:1e:df:e9:43:f0:bd:07:b6:cb:08:fd:45:06:c8:d9:d5:9d:
35:9e:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:48 2026 by rpki-client