Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: +NvoBzyCrilRhvFcrGxx8gSXFR7nBPtWAx/CfQnsW24=
Subject key identifier: D9:EA:FE:3B:D0:A6:D8:31:37:A5:19:CB:FB:F3:7F:0B:12:12:E7:EA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 44353CFD968268B60A36D5821496ABD3035FE283
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
Signing time: Fri 20 Jun 2025 20:02:56 +0000
ROA not before: Fri 20 Jun 2025 19:57:56 +0000
ROA not after: Fri 19 Jun 2026 20:02:56 +0000
asID: 7018
IP address blocks: 46.202.1.0/24 maxlen: 24
46.202.49.0/24 maxlen: 24
46.202.50.0/24 maxlen: 24
46.202.51.0/24 maxlen: 24
46.202.53.0/24 maxlen: 24
46.202.87.0/24 maxlen: 24
46.202.96.0/24 maxlen: 24
46.202.97.0/24 maxlen: 24
46.202.98.0/24 maxlen: 24
46.202.99.0/24 maxlen: 24
46.202.124.0/24 maxlen: 24
46.202.125.0/24 maxlen: 24
46.202.126.0/24 maxlen: 24
46.202.127.0/24 maxlen: 24
46.202.201.0/24 maxlen: 24
46.202.202.0/24 maxlen: 24
46.202.203.0/24 maxlen: 24
46.202.207.0/24 maxlen: 24
46.202.216.0/24 maxlen: 24
46.202.217.0/24 maxlen: 24
46.202.219.0/24 maxlen: 24
46.202.220.0/24 maxlen: 24
46.202.221.0/24 maxlen: 24
46.202.222.0/24 maxlen: 24
46.202.223.0/24 maxlen: 24
46.203.3.0/24 maxlen: 24
46.203.5.0/24 maxlen: 24
46.203.13.0/24 maxlen: 24
46.203.14.0/24 maxlen: 24
46.203.21.0/24 maxlen: 24
46.203.22.0/24 maxlen: 24
46.203.29.0/24 maxlen: 24
46.203.32.0/24 maxlen: 24
46.203.43.0/24 maxlen: 24
46.203.44.0/24 maxlen: 24
46.203.47.0/24 maxlen: 24
46.203.54.0/24 maxlen: 24
46.203.56.0/24 maxlen: 24
46.203.58.0/24 maxlen: 24
46.203.62.0/24 maxlen: 24
46.203.74.0/24 maxlen: 24
46.203.80.0/24 maxlen: 24
46.203.91.0/24 maxlen: 24
46.203.92.0/24 maxlen: 24
46.203.104.0/24 maxlen: 24
46.203.113.0/24 maxlen: 24
46.203.121.0/24 maxlen: 24
46.203.137.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.161.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.223.0/24 maxlen: 24
46.203.225.0/24 maxlen: 24
46.203.249.0/24 maxlen: 24
91.124.0.0/24 maxlen: 24
91.124.2.0/24 maxlen: 24
91.124.3.0/24 maxlen: 24
91.124.16.0/24 maxlen: 24
91.124.59.0/24 maxlen: 24
91.124.82.0/24 maxlen: 24
91.124.90.0/24 maxlen: 24
91.124.134.0/24 maxlen: 24
91.124.208.0/24 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.56.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.111.0/24 maxlen: 24
92.112.112.0/24 maxlen: 24
92.112.113.0/24 maxlen: 24
92.112.114.0/24 maxlen: 24
92.112.115.0/24 maxlen: 24
92.112.116.0/24 maxlen: 24
92.112.117.0/24 maxlen: 24
92.112.118.0/24 maxlen: 24
92.112.144.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:35:3c:fd:96:82:68:b6:0a:36:d5:82:14:96:ab:d3:03:5f:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 20 19:57:56 2025 GMT
Not After : Jun 19 20:02:56 2026 GMT
Subject: CN=D9EAFE3BD0A6D83137A519CBFBF37F0B1212E7EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:ea:4b:84:ff:7f:8b:69:3a:dc:b1:61:63:
52:df:fe:e5:28:f6:f2:f1:1d:c9:e0:02:e7:bf:bd:
ac:88:2f:00:e1:04:c3:46:35:e4:5b:29:85:23:18:
17:6d:1f:e1:db:eb:77:58:15:9d:83:c8:6d:4c:e3:
97:35:24:54:57:7d:1c:4a:69:fe:09:69:c7:58:48:
7a:a0:59:1e:0b:40:c8:1f:04:dd:e3:44:13:07:b6:
e1:7d:a9:e7:49:d5:db:02:6d:6c:1c:31:ab:66:b8:
4d:9f:58:7a:ce:9f:71:cb:27:b2:b4:86:3d:46:12:
4a:9d:19:13:a4:79:af:3b:3b:00:12:c2:e5:29:2a:
3c:e1:14:24:bc:8e:b5:2b:52:86:ac:c6:c9:8b:b8:
00:c7:bb:d8:53:5a:03:fb:54:06:9c:40:53:ff:e2:
6c:b9:4f:f9:ab:25:3a:3c:76:04:16:5a:7f:a6:5b:
5b:2b:1b:11:61:60:96:4a:9d:94:ca:f1:04:ad:74:
83:b4:e9:32:66:0b:50:72:e2:00:b4:fa:db:51:61:
bd:e6:db:8e:4e:7e:f5:53:f1:f8:3f:2d:74:6a:0f:
6b:1e:54:a5:98:0c:ce:ec:93:e8:e8:9b:41:61:f4:
0d:8d:af:e2:f2:13:b0:e3:88:42:66:2f:82:94:26:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:FE:3B:D0:A6:D8:31:37:A5:19:CB:FB:F3:7F:0B:12:12:E7:EA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.1.0/24
46.202.49.0-46.202.51.255
46.202.53.0/24
46.202.87.0/24
46.202.96.0/22
46.202.124.0/22
46.202.201.0-46.202.203.255
46.202.207.0/24
46.202.216.0/23
46.202.219.0-46.202.223.255
46.203.3.0/24
46.203.5.0/24
46.203.13.0-46.203.14.255
46.203.21.0-46.203.22.255
46.203.29.0/24
46.203.32.0/24
46.203.43.0-46.203.44.255
46.203.47.0/24
46.203.54.0/24
46.203.56.0/24
46.203.58.0/24
46.203.62.0/24
46.203.74.0/24
46.203.80.0/24
46.203.91.0-46.203.92.255
46.203.104.0/24
46.203.113.0/24
46.203.121.0/24
46.203.137.0/24
46.203.150.0/24
46.203.161.0/24
46.203.214.0/24
46.203.223.0/24
46.203.225.0/24
46.203.249.0/24
91.124.0.0/24
91.124.2.0/23
91.124.16.0/24
91.124.59.0/24
91.124.82.0/24
91.124.90.0/24
91.124.134.0/24
91.124.208.0/24
91.124.242.0/24
92.112.56.0/24
92.112.62.0/24
92.112.111.0-92.112.118.255
92.112.144.0/24
92.113.6.0/24
92.113.15.0/24
92.113.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fc:0a:51:c7:65:04:75:db:86:ad:9f:28:f0:dd:bc:45:20:
9a:42:6a:c6:22:89:36:7e:67:18:56:3c:c4:b4:3b:34:53:31:
66:c1:43:b7:e2:73:9d:c9:92:49:c4:03:b6:a0:0d:88:42:0b:
17:e7:3e:31:e8:3d:05:0f:1d:32:d9:cd:ee:16:70:7d:77:1d:
4f:a8:45:7d:2c:8a:32:1c:93:6d:12:e1:0f:a0:44:40:0f:7c:
1e:4e:17:f0:cb:4a:89:ff:51:3e:5d:4e:04:9e:5e:7a:a6:ce:
70:ab:a9:de:e0:6e:3b:e9:ca:3a:ea:e9:7e:95:c3:36:c0:21:
ba:b0:f8:56:3a:f9:cd:7d:88:2b:bf:2d:dd:74:55:23:57:b0:
8f:cc:e2:0e:2a:3e:71:02:1f:a3:f9:43:34:df:e0:6b:9a:a5:
b8:10:0f:14:2e:17:1b:ab:07:f7:cd:12:3a:c2:8c:df:04:3a:
f0:a8:91:f5:71:f2:a0:58:e5:b7:92:2e:0d:32:70:4b:8c:89:
19:f1:d7:84:67:46:25:f5:58:d2:8f:d9:f1:59:e3:c1:d7:11:
85:3e:09:12:c8:01:25:ee:5b:ef:0f:2f:34:51:84:41:1e:ec:
00:0b:57:68:37:59:c4:18:c8:2e:72:43:25:79:cd:04:35:9c:
d5:14:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:00:24 2025 by rpki-client