Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: UxiPIfDoeTPsf3ygkg9COCbz7HZnpR69EJQ2AVM9VHo=
Subject key identifier: 4F:AE:49:76:64:23:1F:96:7C:DC:86:40:C0:B4:89:84:47:D3:E8:3E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0FD5CD07DBE87265E4076DD8A05F54DDB0BA83A3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
Signing time: Mon 06 Jul 2026 18:13:34 +0000
ROA not before: Mon 06 Jul 2026 18:08:34 +0000
ROA not after: Mon 05 Jul 2027 18:13:34 +0000
asID: 7018
IP address blocks: 46.202.53.0/24 maxlen: 24
46.203.223.0/24 maxlen: 24
46.203.225.0/24 maxlen: 24
91.124.0.0/24 maxlen: 24
91.124.2.0/24 maxlen: 24
91.124.3.0/24 maxlen: 24
91.124.16.0/24 maxlen: 24
91.124.59.0/24 maxlen: 24
91.124.82.0/24 maxlen: 24
91.124.90.0/24 maxlen: 24
91.124.134.0/24 maxlen: 24
91.124.208.0/24 maxlen: 24
92.112.111.0/24 maxlen: 24
92.112.112.0/24 maxlen: 24
92.112.113.0/24 maxlen: 24
92.112.114.0/24 maxlen: 24
92.112.115.0/24 maxlen: 24
92.112.116.0/24 maxlen: 24
92.112.117.0/24 maxlen: 24
92.112.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d5:cd:07:db:e8:72:65:e4:07:6d:d8:a0:5f:54:dd:b0:ba:83:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 6 18:08:34 2026 GMT
Not After : Jul 5 18:13:34 2027 GMT
Subject: CN=4FAE497664231F967CDC8640C0B4898447D3E83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:d8:4d:22:2f:1e:91:ae:12:91:85:b1:42:
3d:36:99:fa:bc:7f:98:ad:ca:c3:d1:e9:cd:5e:7c:
66:45:86:f7:db:8a:56:8f:d4:98:33:e4:8e:1f:78:
e1:8f:9c:6d:ac:14:05:b0:fb:9d:0d:5e:e1:ba:05:
cd:99:65:dc:c6:7e:b3:3f:02:27:8c:28:b5:e5:bd:
e1:21:db:ef:10:04:89:4c:33:9d:44:47:a7:b6:39:
d2:e8:f1:38:74:39:2b:ad:de:23:0c:4e:40:8c:38:
b3:49:1c:b4:21:d6:7e:f7:f4:13:3e:84:1b:c1:f1:
15:4d:85:ab:ed:a8:ef:d7:7d:b5:be:70:83:65:6b:
7d:d0:28:58:64:14:2e:cc:c6:e3:5f:c6:83:37:63:
71:13:ce:61:d6:93:56:5b:d5:55:19:66:79:4f:c7:
30:5b:72:23:36:62:78:b4:a8:16:d4:17:f8:f5:a3:
8f:f2:67:74:29:90:8b:aa:fa:26:2c:d2:16:33:9d:
eb:dc:18:c0:b9:66:3a:d5:eb:0b:31:21:70:7d:24:
f8:70:fa:91:ad:3f:ca:80:45:f1:33:c1:1f:b8:65:
21:16:69:e5:11:42:1d:93:a8:43:b9:a7:9c:7b:0f:
e4:25:ca:54:ed:ad:3c:02:91:51:3a:79:87:4a:a7:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AE:49:76:64:23:1F:96:7C:DC:86:40:C0:B4:89:84:47:D3:E8:3E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.53.0/24
46.203.223.0/24
46.203.225.0/24
91.124.0.0/24
91.124.2.0/23
91.124.16.0/24
91.124.59.0/24
91.124.82.0/24
91.124.90.0/24
91.124.134.0/24
91.124.208.0/24
92.112.111.0-92.112.118.255
Signature Algorithm: sha256WithRSAEncryption
64:10:6e:ee:f4:15:26:dc:c4:e5:72:66:8b:f6:ff:be:83:17:
db:f6:89:09:62:69:2a:7c:b2:77:5b:37:08:1d:0e:db:79:65:
da:b6:e4:89:6d:ce:62:b9:97:a9:f5:76:fb:18:56:8a:dc:47:
43:5c:27:a3:e0:76:c9:5e:13:68:07:bc:4f:b8:28:ea:96:05:
e9:b7:c0:89:36:c5:28:b6:85:e8:10:ed:8a:2f:18:ae:d7:2c:
42:56:7b:6a:73:c5:a5:3f:6e:fd:0a:3c:2b:f1:85:34:0b:ca:
6d:a0:85:67:05:13:fc:12:e0:3c:8e:2f:8d:1b:5b:37:c0:c8:
11:20:ee:2f:a3:79:9b:0c:b5:65:a6:ea:16:1c:4d:1c:27:35:
10:8f:3f:79:6b:cf:98:67:90:cc:96:01:7e:0f:dc:18:1a:52:
f0:5e:98:bf:38:d4:8f:c2:50:e8:c7:e6:b6:ef:93:2c:a8:23:
02:48:9e:a2:27:ad:57:23:b0:51:01:13:7d:e2:a9:bb:6b:1f:
ce:9a:32:b4:f8:5e:42:29:94:dc:d1:a4:14:67:c3:7f:8d:4b:
2f:c7:be:d4:bc:de:6a:5a:ef:54:d3:b7:fe:d3:af:05:48:9e:
a9:cf:08:4a:aa:58:87:25:8c:69:75:09:5a:1e:27:07:c1:b8:
5f:38:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:36:53 2026 by rpki-client