Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: 94I93tBh2ZSouoo99UTkk7PgSUWM9ZLSpUZewb3DuOc=
Subject key identifier: C5:C1:65:4C:2F:E8:31:15:E9:34:1B:23:EE:72:FF:3A:B5:64:CF:57
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 420DB99D6D40FFB45B63FAF2773F90CE3AF31FD1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
Signing time: Sat 07 Nov 2026 00:02:12 +0000
ROA not before: Fri 06 Nov 2026 23:57:12 +0000
ROA not after: Sat 06 Nov 2027 00:02:12 +0000
asID: 9318
IP address blocks: 51.146.234.0/24 maxlen: 24
51.241.162.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0d:b9:9d:6d:40:ff:b4:5b:63:fa:f2:77:3f:90:ce:3a:f3:1f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 6 23:57:12 2026 GMT
Not After : Nov 6 00:02:12 2027 GMT
Subject: CN=C5C1654C2FE83115E9341B23EE72FF3AB564CF57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:53:86:a8:4a:96:48:59:e6:13:5f:79:61:
d8:21:3f:ab:a4:22:13:09:60:6e:11:f1:22:a3:1c:
cc:a6:c4:c8:67:47:4f:ad:8c:3b:fa:ab:44:78:da:
b2:d2:a9:3a:b0:b5:e1:0d:4a:72:95:94:38:bb:be:
bb:bb:21:b8:08:0b:20:8a:01:99:57:e8:04:6f:84:
79:2a:41:23:8e:b1:91:9e:ec:11:9b:52:1a:90:5c:
0a:81:59:4d:fe:49:c7:15:a7:ce:5e:5c:2b:31:d8:
c9:c2:01:6e:2f:95:f1:8d:38:4a:bf:e8:c5:d1:25:
62:8c:2c:7a:55:8f:4c:d7:ef:6c:41:3a:c1:14:81:
17:ac:ba:3b:cf:d7:8c:3b:c5:15:8d:91:59:3c:bf:
77:3c:b8:45:11:59:7e:f4:aa:eb:ba:03:97:d9:f0:
30:55:85:6d:89:b7:bd:78:09:6f:21:97:d9:7d:49:
36:41:65:55:07:17:de:fe:dd:6c:fc:07:3b:b4:35:
42:a0:69:ac:cd:ec:3d:c1:52:ba:76:25:8d:7b:a5:
1f:90:c3:a5:7e:24:ab:4e:23:b0:d4:c9:ca:ba:5a:
13:80:39:fb:66:08:b3:1b:1a:1c:dc:a3:7f:9f:b2:
5a:88:40:8e:0c:55:38:17:e6:84:9b:5c:b8:0b:a2:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:65:4C:2F:E8:31:15:E9:34:1B:23:EE:72:FF:3A:B5:64:CF:57
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.234.0/24
51.241.162.0/24
78.105.221.0/24
78.105.233.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7c:ab:99:50:79:33:f3:44:5f:72:cf:8f:0b:71:84:c4:c5:
76:7d:91:2c:97:77:8d:a4:c0:e9:d3:e3:65:d1:08:90:f7:45:
06:4d:8f:04:e5:b6:6c:4a:d2:48:41:78:74:5c:19:12:5c:ab:
05:60:03:34:3b:c5:fd:8a:27:98:c7:4c:2b:d8:8d:a8:a9:2b:
94:9b:3f:58:a7:22:48:8e:01:2d:b6:dd:ca:9f:86:9e:b1:0e:
88:33:e8:f4:65:d6:ac:2c:57:f5:4a:47:cc:60:7a:28:0f:de:
23:88:5c:29:fc:59:77:2c:a6:c6:3d:86:ef:a1:92:12:67:94:
1b:fb:e0:89:65:1d:f5:05:92:43:60:03:3a:ae:91:2e:bb:45:
e8:e1:ad:34:92:19:c1:65:63:06:96:42:cd:e6:43:73:0d:48:
6f:1d:f0:d0:ce:ef:9b:bd:ab:8d:3f:62:37:4c:bb:7a:20:4f:
6e:1b:bd:16:92:31:12:86:4e:8a:cd:19:66:ec:4c:54:24:e1:
7f:7b:51:82:56:21:6b:0e:b3:69:3d:98:8e:83:3b:80:58:60:
36:7d:3a:49:17:7a:bb:00:21:1a:86:e9:1d:40:ef:88:63:7d:
dc:d3:59:d4:51:a5:57:00:75:9f:f4:db:fe:4c:be:24:56:b8:
1a:b8:cb:3d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUQg25nW1A/7RbY/rydz+QzjrzH9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMDYyMzU3MTJaFw0yNzExMDYwMDAyMTJaMDMxMTAvBgNV
BAMTKEM1QzE2NTRDMkZFODMxMTVFOTM0MUIyM0VFNzJGRjNBQjU2NENGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopFOGqEqWSFnmE195YdghP6uk
IhMJYG4R8SKjHMymxMhnR0+tjDv6q0R42rLSqTqwteENSnKVlDi7vru7IbgICyCK
AZlX6ARvhHkqQSOOsZGe7BGbUhqQXAqBWU3+SccVp85eXCsx2MnCAW4vlfGNOEq/
6MXRJWKMLHpVj0zX72xBOsEUgResujvP14w7xRWNkVk8v3c8uEURWX70quu6A5fZ
8DBVhW2Jt714CW8hl9l9STZBZVUHF97+3Wz8Bzu0NUKgaazN7D3BUrp2JY17pR+Q
w6V+JKtOI7DUycq6WhOAOftmCLMbGhzco3+fslqIQI4MVTgX5oSbXLgLonmHAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUxcFlTC/oMRXpNBsj7nL/OrVkz1cwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTOTMxOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEADOS6gME
ADPxogMEAE5p3QMEAE5p6TANBgkqhkiG9w0BAQsFAAOCAQEAVHyrmVB5M/NEX3LP
jwtxhMTFdn2RLJd3jaTA6dPjZdEIkPdFBk2PBOW2bErSSEF4dFwZElyrBWADNDvF
/YonmMdMK9iNqKkrlJs/WKciSI4BLbbdyp+GnrEOiDPo9GXWrCxX9UpHzGB6KA/e
I4hcKfxZdyymxj2G76GSEmeUG/vgiWUd9QWSQ2ADOq6RLrtF6OGtNJIZwWVjBpZC
zeZDcw1Ibx3w0M7vm72rjT9iN0y7eiBPbhu9FpIxEoZOis0ZZuxMVCThf3tRglYh
aw6zaT2YjoM7gFhgNn06SRd6uwAhGobpHUDviGN93NNZ1FGlVwB1n/Tb/ky+JFa4
GrjLPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:43:02 2026 by rpki-client