Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
File: AS18186.roa (raw, json)
Hash identifier: xN5/t0U4/0EnlziKrisJAB+pmRSo3lV9/oL9QUYmePU=
Subject key identifier: 7B:22:B9:89:E4:A9:7B:D6:EF:20:5A:B5:FD:15:4E:98:6C:8F:F4:40
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 324FE20B87B5872E0A62C8A38B8E3C1E2ABF3EE0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
Signing time: Mon 03 Aug 2026 13:18:13 +0000
ROA not before: Mon 03 Aug 2026 13:13:13 +0000
ROA not after: Mon 02 Aug 2027 13:18:13 +0000
asID: 18186
IP address blocks: 96.62.152.0/24 maxlen: 24
96.62.222.0/24 maxlen: 24
140.233.171.0/24 maxlen: 24
143.14.145.0/24 maxlen: 24
155.117.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4f:e2:0b:87:b5:87:2e:0a:62:c8:a3:8b:8e:3c:1e:2a:bf:3e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 13:13:13 2026 GMT
Not After : Aug 2 13:18:13 2027 GMT
Subject: CN=7B22B989E4A97BD6EF205AB5FD154E986C8FF440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:15:59:75:1a:62:9d:a5:0b:f3:e8:b1:74:
8f:14:38:c1:b4:2b:e9:10:74:9a:c8:cb:19:73:7d:
3c:91:ab:ff:d5:75:7e:fd:9c:79:49:50:ab:ea:41:
91:0e:aa:e8:f3:75:32:4e:3a:a9:65:27:f5:e8:f7:
a8:96:8c:4f:96:45:d4:84:cb:4a:3c:b5:bc:09:9a:
37:70:83:a7:07:3c:90:fb:e1:f7:b7:43:bd:41:44:
63:e8:c7:2f:5f:c3:87:95:99:31:4c:ea:90:76:43:
ce:a3:e6:d6:66:53:2e:92:6e:58:43:5f:a9:87:da:
78:63:88:92:5e:7d:61:5f:de:8b:aa:c6:87:71:05:
4b:fa:ac:2d:bf:4d:f1:05:7f:70:06:d5:40:79:af:
20:62:ab:da:bb:37:ea:9f:6d:67:dd:63:dd:68:e2:
fb:30:bb:f7:94:cc:94:ac:fd:92:c7:04:6e:d3:9a:
3b:ca:87:b1:8b:50:a4:84:b9:19:0a:89:23:ab:81:
18:34:97:cd:cc:c5:1e:ff:08:0c:8f:13:f1:cf:98:
33:4b:b7:11:02:29:a4:e8:be:f4:25:80:3f:cd:fc:
fc:b1:b6:20:f2:f0:07:97:c3:52:e3:25:ca:c6:fa:
e3:e8:09:42:20:d5:91:47:7c:84:07:9e:b8:40:fb:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:B9:89:E4:A9:7B:D6:EF:20:5A:B5:FD:15:4E:98:6C:8F:F4:40
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
96.62.222.0/24
140.233.171.0/24
143.14.145.0/24
155.117.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8c:b4:43:b5:d1:e5:58:94:e2:e8:07:e1:6c:ac:d7:2c:cf:
52:36:5b:82:88:f6:11:ee:92:1a:42:43:38:55:68:35:e3:27:
7b:6a:4a:a6:9d:26:6f:ac:f5:7f:69:0d:d5:12:38:5e:38:9c:
25:f4:d9:5c:69:40:7f:e4:a5:b1:e5:4f:d9:f3:69:0c:0b:3f:
0d:d4:b8:be:75:4c:a8:b1:3c:ae:a2:c4:25:87:71:36:a4:17:
86:7a:5c:06:21:e3:65:f5:34:da:01:05:50:03:90:02:39:f6:
6f:79:53:ae:38:95:24:a6:2a:cd:43:4c:91:05:97:f5:5b:a0:
45:e0:62:2c:91:9b:62:ca:a1:90:2c:21:45:1b:00:29:a3:75:
9d:5f:1c:4e:13:f3:90:65:c6:25:54:9b:7d:c1:74:61:91:f4:
d1:73:2f:91:3d:16:ce:be:0a:20:a1:4a:8c:d5:ed:11:91:cc:
75:95:d2:0e:96:f0:8b:82:70:87:62:6b:a6:49:8e:87:b3:3c:
85:73:5b:af:ff:6e:ff:db:60:4a:49:ca:b6:5b:76:4f:2a:ca:
a5:eb:f6:29:f8:3d:26:4e:0c:bb:51:5f:a0:14:73:40:5d:b8:
cf:7a:88:a9:5a:0a:47:df:01:72:aa:1d:8a:b7:74:bf:70:16:
de:7b:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:06 2026 by rpki-client