Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: VBnxRSW9TPoTxQFLqv42vgeG6jiN0YfzCZLcJToHzcM=
Subject key identifier: 0E:79:A2:1C:A5:27:C9:7E:B8:41:B1:BC:CD:4D:2A:00:C2:DB:C1:01
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4BEDC73B3270AC4C560B7BC69BAD78E17906A97E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
Signing time: Thu 07 May 2026 10:03:12 +0000
ROA not before: Thu 07 May 2026 09:58:12 +0000
ROA not after: Thu 06 May 2027 10:03:12 +0000
asID: 9318
IP address blocks: 78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ed:c7:3b:32:70:ac:4c:56:0b:7b:c6:9b:ad:78:e1:79:06:a9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 7 09:58:12 2026 GMT
Not After : May 6 10:03:12 2027 GMT
Subject: CN=0E79A21CA527C97EB841B1BCCD4D2A00C2DBC101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:77:38:b0:84:20:71:58:2a:7f:5a:e6:14:
21:bc:77:07:08:e4:1b:01:7e:71:03:07:8d:c9:ee:
e5:5b:5b:22:36:17:5e:af:a1:8e:ee:15:6d:28:bb:
31:d2:e8:24:ea:0b:c9:cc:3f:07:17:e4:a4:bd:72:
43:64:c9:39:90:77:37:68:aa:62:1e:8d:12:4e:68:
9e:89:5d:0f:84:6d:60:42:f0:59:9e:9d:7a:de:12:
21:9e:d7:ab:a8:da:a2:c0:ef:30:76:38:99:32:f5:
25:4e:a4:48:9f:9c:fc:3c:37:a0:b5:76:46:f7:28:
78:10:cb:5a:18:b6:51:d1:da:cd:51:b0:20:9d:9d:
dd:b2:46:ee:15:c1:84:ee:7a:ac:ae:5c:a0:ac:6f:
e9:11:0a:8b:34:bd:11:30:49:f5:10:99:de:b8:63:
c0:fb:7f:f0:f9:f5:60:85:b4:d4:8f:56:20:84:49:
0a:c5:e1:ce:a3:3f:4d:73:b6:e4:13:c1:d5:3d:3f:
68:83:16:39:07:79:c7:07:8c:f2:4a:6e:9e:d0:a8:
98:1f:8b:b7:d0:82:7f:b0:1d:c9:be:4a:fa:fe:92:
41:4f:74:a2:6a:a3:57:1f:db:4a:40:dd:a3:b5:ad:
34:48:20:ba:21:74:e4:df:55:b6:84:94:7a:ba:08:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:A2:1C:A5:27:C9:7E:B8:41:B1:BC:CD:4D:2A:00:C2:DB:C1:01
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
41:aa:53:c0:0a:21:22:23:b1:a7:3c:fd:f8:b6:0c:19:33:a5:
f9:f6:a6:ce:da:fa:6e:45:d6:53:6d:70:7a:f1:10:6f:f4:7a:
9a:66:11:7c:09:ab:6b:62:86:ea:25:d7:aa:8b:67:d0:02:7e:
ec:80:4d:9b:17:fa:ce:04:e0:75:6e:dd:ef:d5:0b:58:d1:44:
b0:1f:b9:d2:38:75:2c:0b:b4:0c:14:2d:ea:db:b8:cd:a9:33:
ce:05:a2:03:9b:3b:8b:fc:ed:3a:36:b4:f1:28:c6:c6:ec:66:
4b:83:88:38:d7:76:56:43:4a:b1:d3:eb:ee:18:6d:ee:60:f7:
41:5b:6b:75:b8:ef:6c:c1:07:06:0d:3e:90:b3:f1:77:8a:a5:
93:e4:e8:4f:cd:39:81:08:c9:1c:47:ba:7f:d0:e2:49:74:d6:
d0:df:59:a2:ff:76:b6:6d:b6:a2:2c:8b:66:a5:67:52:63:85:
96:62:0b:b7:ae:60:14:e2:8e:6c:44:3e:1d:21:df:e1:0b:b8:
0e:1c:2c:89:e4:db:5d:d4:36:93:f7:21:2d:74:c0:5d:6a:53:
64:3b:b2:fb:48:6e:61:8f:10:47:ae:a9:ca:7a:98:b1:75:79:
0f:7e:dc:ab:35:d7:c3:d8:0b:d9:31:80:0e:8f:2d:63:b5:60:
94:dd:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:57 2026 by rpki-client