Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
File: AS18186.roa (raw, json)
Hash identifier: QUWuwExw0QsXQ4xSB99YqCB8WWohhPcG+YWcRP1XwGk=
Subject key identifier: 6E:4D:2B:C9:3D:6F:92:2E:89:ED:E9:59:EC:52:15:28:62:D6:D6:C7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 36448E79BC0D4AE83C4A75DB9E1CC61193270851
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
Signing time: Tue 14 Oct 2025 10:36:29 +0000
ROA not before: Tue 14 Oct 2025 10:31:29 +0000
ROA not after: Tue 13 Oct 2026 10:36:29 +0000
asID: 18186
IP address blocks: 96.62.222.0/24 maxlen: 24
140.233.171.0/24 maxlen: 24
143.14.145.0/24 maxlen: 24
155.117.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:44:8e:79:bc:0d:4a:e8:3c:4a:75:db:9e:1c:c6:11:93:27:08:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 14 10:31:29 2025 GMT
Not After : Oct 13 10:36:29 2026 GMT
Subject: CN=6E4D2BC93D6F922E89EDE959EC52152862D6D6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:af:98:a1:d4:1e:64:66:74:05:2f:47:5a:
46:34:42:08:1f:2b:b7:7e:71:bc:f7:dd:47:00:ef:
8a:ce:33:76:00:00:14:e1:3e:31:39:74:5a:06:6f:
c7:87:cd:fd:43:8d:f0:03:96:b7:dc:7a:6e:7f:eb:
3f:25:d1:6d:da:1d:af:91:d1:39:c1:09:86:9b:bc:
29:db:cf:e4:e7:db:a3:4a:e0:05:86:3a:26:88:ef:
6d:e2:5b:47:8d:f7:e9:15:7b:b4:cf:e1:32:dc:0c:
1a:8d:c9:83:be:69:8d:c8:1c:b1:f6:f6:8a:ee:88:
7f:98:a6:5d:d8:1c:9c:9e:9f:4d:b5:bc:cf:81:d7:
ce:ea:87:fa:7a:8a:1b:3c:8e:83:98:33:61:4c:08:
1a:32:5d:bf:21:5a:29:e3:49:31:3c:21:0f:8e:1b:
a9:0b:a9:11:ab:13:7a:55:69:7f:d5:c4:ba:a7:54:
48:ee:29:1a:fa:34:ed:8c:0b:46:12:fe:e1:1d:ae:
4a:b0:dc:2f:87:aa:f2:80:aa:c8:ea:59:63:c7:fd:
55:c1:b0:39:2c:33:3a:3d:21:b8:37:da:ab:8d:a3:
46:1b:fe:5e:78:80:2e:5a:de:cb:86:dc:0b:2e:b4:
a7:f4:6e:4d:52:47:25:e0:d6:fc:57:36:b2:64:4c:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:2B:C9:3D:6F:92:2E:89:ED:E9:59:EC:52:15:28:62:D6:D6:C7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.222.0/24
140.233.171.0/24
143.14.145.0/24
155.117.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c4:77:19:77:e0:40:60:97:c4:ce:a5:aa:a3:ae:44:50:16:
68:5d:3f:b6:54:61:c6:f4:9c:b4:38:9d:27:7a:7d:9b:69:1f:
0d:3f:7b:58:80:12:b7:3e:e1:e8:c8:43:79:bb:42:3f:f6:94:
6b:4c:5c:73:56:4d:8e:85:75:7d:c7:aa:58:0e:e7:d4:66:d2:
48:cc:ec:32:9a:4d:67:d6:29:8f:df:c3:5d:7c:75:74:dc:45:
ef:0f:b4:38:a2:ad:cd:ba:bf:36:e3:7f:ee:4e:7c:cd:58:52:
73:da:2d:ab:78:3c:20:48:12:1c:33:c4:5a:51:95:de:79:ee:
92:56:e7:d8:71:3e:4b:67:df:ba:d7:2b:f2:56:fe:67:d9:ea:
54:37:ab:ee:f0:58:ec:33:6b:70:f4:e8:0c:70:64:09:f7:f7:
ec:f8:1a:8e:66:ce:ca:b0:51:d4:89:6b:a4:29:cf:e9:cd:b7:
33:ee:a2:39:64:1e:99:22:0f:c1:48:ed:4f:63:56:a5:f6:a4:
22:c6:44:16:56:a2:a8:bf:30:60:a3:00:6d:f1:94:c9:68:44:
66:d1:57:e2:0e:de:4d:e0:8d:3d:0a:4e:49:9d:0e:8c:f0:ce:
72:40:96:fb:e3:f2:0e:e1:4e:8a:a9:25:ae:62:0b:88:72:5e:
6a:68:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:08:33 2025 by rpki-client