Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: JEwJf3IPN2WDZxaABE/ylxE9I0lwFx4Z44hZd8ndT0o=
Subject key identifier: AE:B2:F4:1E:C9:3C:4B:12:FD:09:3D:FD:08:DC:E9:14:BA:2B:AA:71
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2E81D7F513C405FBB8DEE195C4B7847474B44292
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
Signing time: Wed 23 Sep 2026 00:08:00 +0000
ROA not before: Wed 23 Sep 2026 00:03:00 +0000
ROA not after: Wed 22 Sep 2027 00:08:00 +0000
asID: 9318
IP address blocks: 51.146.234.0/24 maxlen: 24
51.146.238.0/24 maxlen: 24
51.241.162.0/24 maxlen: 24
51.241.163.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:81:d7:f5:13:c4:05:fb:b8:de:e1:95:c4:b7:84:74:74:b4:42:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 00:03:00 2026 GMT
Not After : Sep 22 00:08:00 2027 GMT
Subject: CN=AEB2F41EC93C4B12FD093DFD08DCE914BA2BAA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:f4:03:58:10:57:f2:b5:cb:76:75:09:17:
ae:4d:33:f0:b8:63:08:e4:4e:75:33:d0:8c:75:60:
fb:cd:41:f3:7a:ac:e7:d5:eb:08:44:d4:6a:b7:4d:
4e:60:f6:14:84:67:d9:d0:ca:cb:9f:ca:c8:98:b8:
2c:7b:62:e8:46:ee:27:7b:78:16:6a:fa:69:9c:35:
34:90:05:ca:fa:cb:d0:c2:67:d0:74:c1:ab:1b:ab:
31:67:50:d5:6f:c7:2d:65:2c:7e:e2:de:31:60:d1:
7e:d4:8c:94:12:48:41:2f:40:04:a7:29:c6:51:a2:
d2:ad:95:da:ce:d5:14:89:db:53:34:30:36:9d:aa:
87:dd:61:84:0a:ba:69:52:86:92:fd:5d:41:bd:47:
f5:07:51:a7:2b:8d:8c:35:df:57:76:79:86:0d:9f:
68:cd:9f:90:05:05:ce:c6:d7:3b:a5:3f:ff:8a:32:
37:d2:a2:f4:e2:87:ee:39:1c:91:a5:89:99:96:f3:
90:c7:1b:41:c4:ec:29:de:0d:29:da:6c:98:a3:2c:
a6:c5:9e:b1:a5:41:83:3b:f5:df:4b:98:3c:a2:66:
30:63:c8:ec:c3:d3:0a:30:d6:02:4a:42:3f:56:93:
e2:d8:53:ef:54:20:2f:6a:25:19:80:53:88:f7:ae:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:F4:1E:C9:3C:4B:12:FD:09:3D:FD:08:DC:E9:14:BA:2B:AA:71
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.234.0/24
51.146.238.0/24
51.241.162.0/23
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:47:09:74:61:1a:f4:03:e4:56:84:e2:ec:29:b9:df:b0:92:
4d:0d:27:9a:99:40:51:a7:23:ce:8c:28:c5:64:6b:2f:34:bc:
0c:2c:bc:71:96:19:4b:84:fd:55:3e:3e:9b:50:76:e7:af:06:
a9:7b:1e:a0:0e:14:37:2c:7e:e5:5d:19:73:72:54:ce:92:63:
08:4e:7c:5a:a8:cc:c4:b6:fa:ac:0e:80:d6:38:e9:0a:4c:83:
1a:12:63:5a:da:7c:9c:31:84:61:3d:92:ce:7f:91:68:6d:b6:
2e:71:08:0d:69:c6:1f:e1:7a:e6:d1:6f:a2:11:4d:be:06:f8:
b8:02:e2:c3:bc:16:f4:12:50:16:c1:06:78:3f:e7:ba:0c:16:
ca:54:84:eb:e4:7c:9c:34:18:35:5b:98:1f:4d:f9:5d:98:f9:
a4:55:36:c0:5f:d6:76:a9:57:40:9d:df:95:ed:2b:e9:4d:84:
6f:df:f5:98:b5:77:33:59:17:38:0b:8f:29:48:4a:30:d2:c1:
0e:0d:db:ca:d7:51:86:c9:7c:52:64:29:26:a4:66:28:9b:5d:
9e:85:5e:3a:c7:f8:24:62:a8:9f:d7:7a:fe:31:dc:f8:2c:fa:
b9:bd:66:53:d5:f3:8e:12:ee:fe:70:4c:09:22:71:8e:fb:8b:
72:bf:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:52:15 2026 by rpki-client