Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: 2tTwFEJN8H2BW2KYeVoho63U4Abq5CrunzKSuCr44WE=
Subject key identifier: FA:19:84:87:7C:38:A0:34:6C:5F:AA:06:7E:38:42:4B:8B:81:6C:91
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4933387477B9B8B38695364BB850D6227A7E3BA5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Sat 20 Sep 2025 00:05:56 +0000
ROA not before: Sat 20 Sep 2025 00:00:56 +0000
ROA not after: Sat 19 Sep 2026 00:05:56 +0000
asID: 18811
IP address blocks: 178.92.16.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:33:38:74:77:b9:b8:b3:86:95:36:4b:b8:50:d6:22:7a:7e:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 00:00:56 2025 GMT
Not After : Sep 19 00:05:56 2026 GMT
Subject: CN=FA1984877C38A0346C5FAA067E38424B8B816C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:ea:a0:69:2c:a5:db:d3:32:ff:8e:f2:0b:
c9:d7:3c:fe:1a:2a:29:91:5c:eb:a0:0f:a9:e2:6d:
c3:2b:cd:5c:0a:96:80:d9:4e:26:5a:a7:b7:1b:0d:
e3:4c:9c:d4:40:b5:aa:6e:18:69:ac:d7:19:18:e9:
b5:ef:ac:01:62:53:cf:c4:fb:33:bb:a3:c9:21:79:
31:f5:ef:f6:da:42:9c:14:ff:08:45:4e:c8:30:dc:
d7:db:04:f1:18:29:cc:13:ea:46:79:81:2b:fd:4f:
88:2d:71:7c:92:25:63:d9:56:3d:e0:92:d2:5d:9d:
64:90:c1:fe:6c:aa:20:f1:9d:35:72:b1:cd:11:92:
9e:b6:11:f2:50:f1:e9:ad:a7:64:51:f3:44:c4:95:
33:7e:a1:49:12:13:9b:19:27:33:35:ef:dd:4b:53:
6b:25:1f:31:ff:3d:56:fb:50:d4:11:31:6e:2e:b1:
11:04:81:35:c2:08:a1:fb:e4:7f:56:e1:bc:1e:c7:
0d:1d:c7:d9:9d:90:ad:cd:71:80:3e:68:f1:f0:5c:
fd:7e:a2:33:93:fb:f8:2d:3f:4a:aa:8b:cb:7b:bf:
75:64:61:aa:46:2b:8f:1c:71:de:8d:94:6a:22:48:
c0:f1:4f:99:6a:46:1e:1a:f0:53:81:d6:20:ed:ad:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:84:87:7C:38:A0:34:6C:5F:AA:06:7E:38:42:4B:8B:81:6C:91
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.16.0/22
178.92.36.0/22
178.93.0.0/22
178.95.0.0/22
Signature Algorithm: sha256WithRSAEncryption
74:e6:c8:7f:a8:da:66:65:38:e0:6c:d2:08:db:a9:7a:78:eb:
6c:29:be:13:59:6f:da:d0:b6:17:ca:66:1f:05:14:a5:ff:4c:
e8:44:13:9b:e0:55:f5:08:c3:17:c7:92:bb:0d:f3:56:f0:e8:
c5:98:9c:d9:2a:5c:ed:7a:32:5b:aa:ee:58:8e:38:98:bb:d5:
b0:3f:a3:d6:b7:da:d7:e7:79:59:06:e7:3c:b1:74:44:ec:73:
c7:d1:72:9c:78:79:e9:e9:b3:ff:ba:0f:dc:50:f8:95:8d:59:
2a:11:bf:a9:f4:97:f3:9d:22:1f:e0:a6:8c:9c:51:1a:07:4f:
97:5b:8e:7d:b3:88:5c:f5:0d:e5:5d:2b:48:99:f5:d8:10:7e:
59:c8:a0:b3:3a:bc:64:1d:fb:e9:cc:0a:a5:1e:81:ec:2d:4f:
ba:74:68:45:c8:13:cd:ea:ea:d7:6d:f7:66:b1:de:d1:d7:cf:
07:b0:47:a0:73:20:fb:6d:68:6d:ea:80:9a:19:f1:9e:15:25:
e7:55:30:88:d7:b3:a1:a6:e6:95:7b:6a:bb:87:9e:58:70:97:
28:15:97:11:ef:62:42:0a:6e:20:10:f5:a4:b3:d8:84:c5:d7:
d2:06:78:95:14:0d:87:b3:e2:ef:d5:83:7d:a4:7d:f4:b1:d8:
93:92:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:39:35 2025 by rpki-client