Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: ldUmDGQ//FqqiW77zTR3q9n5g1S4mZHnEJH9TdX3u3M=
Subject key identifier: 19:79:56:22:9D:4D:2B:E4:E1:17:FE:5A:69:CC:91:8F:D8:A8:ED:19
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6EB4427ABFA9BA3AEA8AAA15BCEAB478455D8C2C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Wed 20 Aug 2025 00:00:11 +0000
ROA not before: Tue 19 Aug 2025 23:55:11 +0000
ROA not after: Wed 19 Aug 2026 00:00:11 +0000
asID: 18811
IP address blocks: 178.92.8.0/22 maxlen: 24
178.92.16.0/22 maxlen: 24
178.92.24.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.92.64.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.94.196.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b4:42:7a:bf:a9:ba:3a:ea:8a:aa:15:bc:ea:b4:78:45:5d:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 19 23:55:11 2025 GMT
Not After : Aug 19 00:00:11 2026 GMT
Subject: CN=197956229D4D2BE4E117FE5A69CC918FD8A8ED19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:53:fe:77:8b:3e:5a:fd:63:f9:6e:ba:cd:
09:22:3a:ef:bc:a0:0b:58:91:5b:f6:53:be:ac:72:
52:c4:f3:50:5c:b2:80:23:1f:08:3e:fc:82:4c:17:
e2:88:ed:19:0e:fc:ad:d7:81:49:49:f2:fa:a7:14:
36:e3:d6:2a:89:ba:ba:f0:4a:fa:67:f0:26:f3:3a:
d7:b7:aa:a2:61:79:52:bf:7b:6a:4f:e6:28:e6:a4:
72:d7:68:34:6f:9d:24:5f:f0:bf:df:92:73:ce:5e:
a9:71:92:53:64:ba:03:e6:43:ee:75:d2:ad:d3:5a:
95:48:37:72:e3:05:80:28:a0:71:02:8d:90:ce:62:
44:98:af:51:66:cc:6a:3c:78:75:85:a2:bf:3a:87:
f6:04:cd:6b:74:6a:e5:4f:46:7c:cd:82:0b:09:5d:
ef:96:22:a5:d8:d8:b0:89:3c:72:fd:84:4b:9f:69:
51:b1:0c:16:52:f0:91:4f:fe:9c:84:9c:7f:0c:bc:
6b:1c:d9:24:f1:d9:5c:34:a8:bc:22:54:8f:88:45:
0f:0e:a3:c5:20:02:71:7b:2b:9e:39:46:93:c7:8c:
5a:aa:f1:2a:e0:b0:e6:68:2f:f1:ad:7a:69:d8:c8:
1c:6a:3b:0e:93:df:f1:c2:11:28:c5:d5:0f:05:29:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:56:22:9D:4D:2B:E4:E1:17:FE:5A:69:CC:91:8F:D8:A8:ED:19
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.8.0/22
178.92.16.0/22
178.92.24.0/22
178.92.36.0/22
178.92.64.0/22
178.93.0.0/22
178.94.196.0/22
178.95.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:68:42:11:8e:36:00:c9:ee:43:e1:eb:ab:b4:d0:c8:ef:7f:
ce:6e:14:c0:7c:63:43:e7:e6:60:8b:14:72:42:56:cf:30:40:
ed:99:9e:de:52:c3:27:fe:13:df:e9:4a:8a:4a:09:d5:9e:a0:
ae:0d:84:1c:87:b1:f2:20:ae:f6:01:99:6e:78:d4:ba:48:82:
12:0c:b2:23:1d:78:92:1b:5c:9c:44:15:ff:db:9e:b5:e2:38:
6b:34:a1:83:bc:f8:13:ce:e9:6b:ca:17:ba:86:6d:ad:55:a2:
13:ae:87:34:8a:41:74:39:d5:ad:66:8a:b9:f0:5c:b8:dc:1e:
48:5e:5b:25:de:39:64:fb:23:59:31:b0:46:0b:68:8e:20:e0:
23:c4:26:30:18:40:09:c1:7b:20:d9:8e:65:f9:17:65:3c:37:
c4:7d:2a:4d:2d:32:6f:51:ba:94:bc:ee:af:3b:a8:1f:c9:0c:
6a:99:71:bf:01:66:5b:8d:5f:4e:5b:c4:5f:f1:df:29:e6:68:
4c:cd:6e:c2:2c:9b:e7:be:86:dd:80:c4:6b:c2:c2:3d:57:30:
8c:b4:7d:51:7c:9c:17:02:6c:04:fe:f9:7c:13:1a:9d:bf:dd:
1f:43:5d:25:71:ca:e9:e8:18:9e:20:ce:a0:f7:1d:f6:e8:ff:
4a:a3:8a:98
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUbrRCer+pujrqiqoVvOq0eEVdjCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA4MTkyMzU1MTFaFw0yNjA4MTkwMDAwMTFaMDMxMTAvBgNV
BAMTKDE5Nzk1NjIyOUQ0RDJCRTRFMTE3RkU1QTY5Q0M5MThGRDhBOEVEMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04FP+d4s+Wv1j+W66zQkiOu+8
oAtYkVv2U76sclLE81BcsoAjHwg+/IJMF+KI7RkO/K3XgUlJ8vqnFDbj1iqJurrw
Svpn8CbzOte3qqJheVK/e2pP5ijmpHLXaDRvnSRf8L/fknPOXqlxklNkugPmQ+51
0q3TWpVIN3LjBYAooHECjZDOYkSYr1FmzGo8eHWFor86h/YEzWt0auVPRnzNggsJ
Xe+WIqXY2LCJPHL9hEufaVGxDBZS8JFP/pyEnH8MvGsc2STx2Vw0qLwiVI+IRQ8O
o8UgAnF7K545RpPHjFqq8SrgsOZoL/GtemnYyBxqOw6T3/HCESjF1Q8FKQoVAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUGXlWIp1NK+ThF/5aacyRj9io7RkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTg4MTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAKyXAgD
BAKyXBADBAKyXBgDBAKyXCQDBAKyXEADBAKyXQADBAKyXsQDBAKyXwAwDQYJKoZI
hvcNAQELBQADggEBAG5oQhGONgDJ7kPh66u00Mjvf85uFMB8Y0Pn5mCLFHJCVs8w
QO2Znt5Swyf+E9/pSopKCdWeoK4NhByHsfIgrvYBmW541LpIghIMsiMdeJIbXJxE
Ff/bnrXiOGs0oYO8+BPO6WvKF7qGba1VohOuhzSKQXQ51a1mirnwXLjcHkheWyXe
OWT7I1kxsEYLaI4g4CPEJjAYQAnBeyDZjmX5F2U8N8R9Kk0tMm9RupS87q87qB/J
DGqZcb8BZluNX05bxF/x3ynmaEzNbsIsm+e+ht2AxGvCwj1XMIy0fVF8nBcCbAT+
+XwTGp2/3R9DXSVxyunoGJ4gzqD3Hfbo/0qjipg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:17:59 2025 by rpki-client