Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: HENTq4i+D1Bl17n+jl1N0wYi+WFUU+EqulJlHgtamqA=
Subject key identifier: 43:30:26:05:C7:11:33:B1:BE:A6:DD:17:7B:12:E1:1C:A4:63:D5:48
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 05EEDD520F3A912182AEC6346F0E2ACDC2B12C10
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9318.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 9318
IP address blocks: 212.74.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ee:dd:52:0f:3a:91:21:82:ae:c6:34:6f:0e:2a:cd:c2:b1:2c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=43302605C71133B1BEA6DD177B12E11CA463D548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:d1:bc:bd:52:40:6f:b4:d3:b4:b0:31:a1:
50:7e:f2:ca:53:d6:4a:6b:b1:48:43:14:f3:62:d7:
3c:9e:1a:a7:d2:dd:92:40:ac:d4:8f:34:36:23:38:
c5:d1:03:60:90:89:1f:f5:2f:43:21:6d:b1:bb:88:
51:f1:76:73:fe:cf:fb:fd:9e:1a:b6:e7:60:77:7b:
28:b1:55:84:7b:aa:20:eb:ed:ef:90:d6:a2:de:9a:
f5:60:3b:c1:11:64:7a:98:d5:d9:fd:2d:7e:29:7b:
69:a0:e5:83:79:46:3d:6c:22:ca:88:03:61:ee:7b:
39:0a:33:3b:f1:d9:e3:09:fb:d4:93:61:2c:1b:dd:
96:e6:0e:b1:67:79:12:07:88:d6:ba:20:65:a6:97:
3d:cf:94:9b:6e:b2:16:1b:9d:73:17:58:7f:c9:b3:
b2:54:d3:a9:08:0a:e5:0a:b9:49:50:c6:06:36:99:
0e:75:52:67:da:66:9e:29:c7:89:5f:b4:99:11:f9:
be:66:ef:d4:8a:42:ae:37:79:ec:60:df:67:ba:cc:
98:29:7a:64:cc:a3:da:ac:62:66:61:57:3b:da:43:
06:cc:42:85:4c:82:cf:27:01:6f:51:6a:03:2e:11:
63:0f:6d:48:b4:f0:0b:83:f7:e7:3c:fe:02:ea:5c:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:26:05:C7:11:33:B1:BE:A6:DD:17:7B:12:E1:1C:A4:63:D5:48
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.35.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:10:f7:29:2a:60:4e:0b:7e:a0:92:7f:bf:6a:75:16:20:8a:
1b:09:26:50:d4:ea:f9:27:ff:46:63:7d:29:80:64:9c:b0:b4:
e2:04:fd:94:cd:01:47:26:de:9d:90:99:b6:47:46:62:4c:90:
b5:29:30:d1:33:b8:bc:d0:b9:1e:f0:69:71:69:67:ad:44:11:
46:02:11:a8:23:6b:48:25:dc:a4:32:03:55:21:b7:ea:78:1c:
6f:ad:ef:d6:53:08:d8:41:79:ab:6f:95:40:a2:9f:44:8e:7d:
be:52:f5:1f:8d:13:fe:d8:45:09:b6:45:83:00:f5:20:1f:b5:
e1:80:4b:f0:f8:f9:ea:da:41:f8:8a:c6:94:72:a3:e8:bf:80:
17:fb:16:14:bf:f7:2f:83:e3:69:54:f8:e3:6a:96:fb:19:94:
7c:83:19:a0:2b:36:17:87:0e:d1:59:c2:2b:84:06:32:d6:4c:
19:b2:a3:fa:17:89:15:09:50:e6:ea:a2:a1:ae:1a:fd:cd:93:
49:5a:84:8f:0a:ce:ae:42:c9:fc:1f:dd:6e:8a:e7:97:8a:85:
b5:c8:a1:6c:a4:87:1d:85:45:b6:b0:78:81:fe:b0:38:a6:48:
81:6b:2e:e0:d4:98:4b:4a:41:ac:ed:1d:19:cb:72:88:94:f6:
63:0d:cb:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUBe7dUg86kSGCrsY0bw4qzcKxLBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwNzIwMjBaFw0yNzA5MTUwNzI1MjBaMDMxMTAvBgNV
BAMTKDQzMzAyNjA1QzcxMTMzQjFCRUE2REQxNzdCMTJFMTFDQTQ2M0Q1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvH9G8vVJAb7TTtLAxoVB+8spT
1kprsUhDFPNi1zyeGqfS3ZJArNSPNDYjOMXRA2CQiR/1L0MhbbG7iFHxdnP+z/v9
nhq252B3eyixVYR7qiDr7e+Q1qLemvVgO8ERZHqY1dn9LX4pe2mg5YN5Rj1sIsqI
A2HuezkKMzvx2eMJ+9STYSwb3ZbmDrFneRIHiNa6IGWmlz3PlJtushYbnXMXWH/J
s7JU06kICuUKuUlQxgY2mQ51UmfaZp4px4lftJkR+b5m79SKQq43eexg32e6zJgp
emTMo9qsYmZhVzvaQwbMQoVMgs8nAW9RagMuEWMPbUi08AuD9+c8/gLqXJ7DAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUQzAmBccRM7G+pt0XexLhHKRj1UgwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTOTMxOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRKIzAN
BgkqhkiG9w0BAQsFAAOCAQEA1hD3KSpgTgt+oJJ/v2p1FiCKGwkmUNTq+Sf/RmN9
KYBknLC04gT9lM0BRybenZCZtkdGYkyQtSkw0TO4vNC5HvBpcWlnrUQRRgIRqCNr
SCXcpDIDVSG36ngcb63v1lMI2EF5q2+VQKKfRI59vlL1H40T/thFCbZFgwD1IB+1
4YBL8Pj56tpB+IrGlHKj6L+AF/sWFL/3L4PjaVT442qW+xmUfIMZoCs2F4cO0VnC
K4QGMtZMGbKj+heJFQlQ5uqioa4a/c2TSVqEjwrOrkLJ/B/dbornl4qFtcihbKSH
HYVFtrB4gf6wOKZIgWsu4NSYS0pBrO0dGctyiJT2Yw3Lhg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:06 2026 by rpki-client