Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: E3YHeGwYokkWKYV/cWdYqUN5/q1Ln9x0FgZbYjgaxo4=
Subject key identifier: 39:E9:44:70:87:07:E4:D4:7E:32:1C:1A:52:3F:9E:F4:E7:FB:89:A4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2A22CC35734AD757A7F17C7ADD886A92060769A4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
Signing time: Wed 07 Oct 2026 00:01:18 +0000
ROA not before: Tue 06 Oct 2026 23:56:18 +0000
ROA not after: Wed 06 Oct 2027 00:01:18 +0000
asID: 9318
IP address blocks: 51.146.234.0/24 maxlen: 24
51.146.238.0/24 maxlen: 24
51.241.162.0/24 maxlen: 24
51.241.163.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:22:cc:35:73:4a:d7:57:a7:f1:7c:7a:dd:88:6a:92:06:07:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 6 23:56:18 2026 GMT
Not After : Oct 6 00:01:18 2027 GMT
Subject: CN=39E944708707E4D47E321C1A523F9EF4E7FB89A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:05:9b:3f:da:70:11:17:05:fa:d0:fd:32:
80:3d:5f:25:cf:82:ee:68:c3:14:01:62:a5:24:03:
6d:50:53:1e:c1:a7:10:ab:01:26:f8:e6:3d:01:43:
c7:6e:72:48:dc:6a:77:ac:17:6b:3e:e8:43:be:cc:
91:cb:5d:e9:38:85:fc:6d:02:e8:45:07:8a:fd:66:
d9:40:9c:57:62:35:d5:a2:89:f2:d5:2f:e1:75:c8:
14:4f:0e:40:29:df:ef:ff:a6:78:19:9d:98:96:33:
53:c1:60:36:d5:c7:7c:f5:21:77:f8:cf:0f:88:96:
34:08:4c:09:19:02:55:f7:e1:3f:35:87:5a:d8:31:
27:c4:c0:47:fe:d5:71:1c:d3:ba:0e:83:f0:3a:3a:
cd:0b:fb:a4:f7:0a:98:87:ad:c5:eb:b7:62:07:a6:
d2:c6:cf:c4:dd:70:c3:b7:68:fe:7c:99:77:2e:2b:
9a:de:71:3f:7d:ac:09:19:3c:1a:af:9e:03:3d:58:
fa:9c:be:22:88:74:57:f3:5e:70:52:85:60:b8:a6:
95:f8:d3:c0:08:6a:7b:f5:f2:51:02:4b:30:66:78:
d6:f5:d6:7f:ab:f1:10:b4:f5:29:15:0b:7c:93:58:
27:b5:9a:9e:0e:41:1e:b5:eb:63:1d:ed:0d:5c:79:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:44:70:87:07:E4:D4:7E:32:1C:1A:52:3F:9E:F4:E7:FB:89:A4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.234.0/24
51.146.238.0/24
51.241.162.0/23
78.105.219.0/24
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1c:63:91:08:15:ca:b7:82:be:8c:e7:ab:4f:57:8e:76:57:
37:a3:32:71:92:27:a4:21:db:17:c7:ee:19:c6:14:6e:4a:2b:
1f:1d:97:fa:32:81:f0:0b:28:36:e4:09:16:b2:df:b2:e5:0f:
73:67:0a:f2:33:5d:c3:3f:80:97:05:06:b0:a0:17:0c:96:d5:
7f:f7:79:52:f7:e9:1c:77:d6:ce:da:57:63:50:d0:8d:cd:3e:
f1:08:e1:e0:ab:65:be:99:74:6b:de:69:2e:aa:ce:0f:c2:45:
ea:b5:96:7a:99:ff:ce:92:88:76:55:d4:af:02:03:44:0d:a7:
df:b5:a1:db:d1:d2:b4:c3:df:0a:b9:70:c1:1a:cf:2a:42:8c:
a5:35:97:8d:b8:f9:b9:23:81:07:6f:e6:3e:eb:07:29:68:fa:
46:60:5c:2c:2a:d5:36:d0:9f:29:11:48:62:1b:c9:09:26:8b:
d5:92:09:73:24:36:a4:c7:96:3a:24:1c:9d:6a:d2:0d:a0:b5:
6b:ee:e0:0f:2b:13:d9:e9:ad:64:3f:84:02:01:f5:a2:9e:d0:
fe:0b:58:f1:6e:94:9f:86:b3:7f:0d:54:bb:c6:ba:1f:63:e4:
8a:a2:8c:c0:88:e1:7f:73:92:9d:5f:cd:6b:bd:9b:b9:b4:4f:
bb:05:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:25:14 2026 by rpki-client