Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
File: AS18345.roa (raw, json)
Hash identifier: DOIC2MPrFhf6RAzBict9bxXWPZWBaZalbyJDNvPrUps=
Subject key identifier: 8C:CB:1F:0E:A1:45:1D:1C:62:75:3C:D5:79:F6:66:FC:CC:F5:D0:85
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0147429D192C1905CCAC046E79B6237ACF4E6AF1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
Signing time: Tue 01 Sep 2026 00:14:47 +0000
ROA not before: Tue 01 Sep 2026 00:09:47 +0000
ROA not after: Tue 31 Aug 2027 00:14:47 +0000
asID: 18345
IP address blocks: 181.214.23.0/24 maxlen: 24
181.214.51.0/24 maxlen: 24
181.214.104.0/24 maxlen: 24
191.101.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:47:42:9d:19:2c:19:05:cc:ac:04:6e:79:b6:23:7a:cf:4e:6a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 00:09:47 2026 GMT
Not After : Aug 31 00:14:47 2027 GMT
Subject: CN=8CCB1F0EA1451D1C62753CD579F666FCCCF5D085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:04:a4:03:dc:a1:2a:0f:7a:be:9e:fd:88:
21:8e:26:a3:e0:1e:50:85:a8:27:4d:0a:fd:2e:10:
97:bb:01:a5:40:92:ae:30:2c:26:2f:90:b4:bb:df:
6c:f2:cd:f3:45:c5:ac:e0:7d:ac:97:e8:3d:26:97:
0e:ca:02:b9:a3:43:a4:47:65:34:4c:be:75:77:40:
11:ac:e5:dc:09:35:6a:5f:ce:6b:f1:8e:e2:62:08:
26:07:7e:39:64:6a:82:a8:dc:2f:2c:2c:8f:62:ea:
58:2f:ac:52:b4:42:b5:a1:cc:16:2f:13:4b:d3:4f:
51:d1:7b:09:4e:87:97:70:b8:03:c2:4c:83:15:90:
d4:0c:ff:14:2d:04:9b:c3:26:af:96:d7:64:2e:a3:
e8:46:0d:8c:94:3c:1b:f1:0f:c3:b5:19:70:e9:a6:
2a:8b:6f:3c:01:5b:62:18:54:ed:99:69:54:70:43:
7a:8a:13:f9:b5:b1:26:fc:18:9e:f4:69:e1:c4:ee:
51:fd:65:aa:65:f0:30:07:ad:b1:46:34:e6:d0:fd:
d5:82:d4:25:18:ca:68:8b:a5:a8:fc:92:1a:3e:73:
34:87:6c:59:a6:76:b1:87:a8:7e:68:69:cc:d7:34:
46:d8:c9:bf:c4:fe:49:0c:1d:14:44:29:ae:8b:ba:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:1F:0E:A1:45:1D:1C:62:75:3C:D5:79:F6:66:FC:CC:F5:D0:85
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.23.0/24
181.214.51.0/24
181.214.104.0/24
191.101.211.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6c:10:e0:9e:13:08:d6:16:f2:f7:78:0a:3e:6f:f4:71:72:
7b:15:90:33:b9:4c:39:5e:72:cc:72:dd:05:b0:ef:18:f2:2b:
20:af:c2:11:7e:02:c7:c0:c6:df:9d:69:d8:27:75:f3:5b:38:
41:ef:24:21:d3:ef:c3:40:71:3c:7a:a4:26:a1:83:90:af:aa:
15:2f:d7:e1:cd:cf:d0:93:82:54:b5:9b:08:d8:88:04:47:f0:
54:a2:15:54:af:31:13:2f:80:5c:17:94:2f:89:65:1e:59:a9:
5e:bc:46:9f:e4:8c:42:7a:d4:31:df:4d:11:6b:1a:54:d4:13:
e2:1e:9d:96:d6:fc:e5:99:80:e2:85:0c:20:27:09:bf:38:f7:
a0:18:4c:28:39:21:50:af:6a:51:7e:3a:cf:ac:d9:98:35:77:
34:4a:04:4b:d1:e1:78:e5:b3:68:3f:e6:81:17:74:86:b4:ee:
e1:e1:ad:b4:b6:6a:16:3a:83:83:7c:9a:23:04:8b:a3:36:79:
7a:89:57:5e:c1:c9:fe:31:d3:3b:d8:99:8b:66:07:bd:1d:53:
31:40:9f:f6:a7:59:5a:dd:53:85:bd:d8:9f:ca:bd:ed:6a:27:
fc:9c:0f:45:59:25:6a:1e:62:cf:81:e1:ed:01:99:9f:99:da:
8b:5f:9e:25
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUAUdCnRksGQXMrARuebYjes9OavEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MDEwMDA5NDdaFw0yNzA4MzEwMDE0NDdaMDMxMTAvBgNV
BAMTKDhDQ0IxRjBFQTE0NTFEMUM2Mjc1M0NENTc5RjY2NkZDQ0NGNUQwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7QSkA9yhKg96vp79iCGOJqPg
HlCFqCdNCv0uEJe7AaVAkq4wLCYvkLS732zyzfNFxazgfayX6D0mlw7KArmjQ6RH
ZTRMvnV3QBGs5dwJNWpfzmvxjuJiCCYHfjlkaoKo3C8sLI9i6lgvrFK0QrWhzBYv
E0vTT1HRewlOh5dwuAPCTIMVkNQM/xQtBJvDJq+W12Quo+hGDYyUPBvxD8O1GXDp
piqLbzwBW2IYVO2ZaVRwQ3qKE/m1sSb8GJ70aeHE7lH9Zapl8DAHrbFGNObQ/dWC
1CUYymiLpaj8kho+czSHbFmmdrGHqH5oaczXNEbYyb/E/kkMHRREKa6LuhlRAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUjMsfDqFFHRxidTzVefZm/Mz10IUwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTgzNDUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAC11hcD
BAC11jMDBAC11mgDBAC/ZdMwDQYJKoZIhvcNAQELBQADggEBACdsEOCeEwjWFvL3
eAo+b/RxcnsVkDO5TDlecsxy3QWw7xjyKyCvwhF+AsfAxt+dadgndfNbOEHvJCHT
78NAcTx6pCahg5CvqhUv1+HNz9CTglS1mwjYiARH8FSiFVSvMRMvgFwXlC+JZR5Z
qV68Rp/kjEJ61DHfTRFrGlTUE+IenZbW/OWZgOKFDCAnCb8496AYTCg5IVCvalF+
Os+s2Zg1dzRKBEvR4Xjls2g/5oEXdIa07uHhrbS2ahY6g4N8miMEi6M2eXqJV17B
yf4x0zvYmYtmB70dUzFAn/anWVrdU4W92J/Kve1qJ/ycD0VZJWoeYs+B4e0BmZ+Z
2otfniU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:14:16 2026 by rpki-client