Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: cSI9ceC+wTq0CZMXA2VodpFYLetywIipePTqI3U0TFM=
Subject key identifier: 22:D1:FE:63:F8:FF:6E:43:63:4B:73:36:EF:A3:FE:77:D3:5C:D5:4D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 41BA74387E81C5EEB6193A3BD62EFEDF17883025
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
Signing time: Tue 03 Mar 2026 04:50:27 +0000
ROA not before: Tue 03 Mar 2026 04:45:27 +0000
ROA not after: Tue 02 Mar 2027 04:50:27 +0000
asID: 9318
IP address blocks: 82.23.13.0/24 maxlen: 24
82.40.39.0/24 maxlen: 24
82.41.3.0/24 maxlen: 24
178.83.16.0/24 maxlen: 24
178.83.26.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
178.83.56.0/24 maxlen: 24
178.83.66.0/24 maxlen: 24
178.83.75.0/24 maxlen: 24
178.83.83.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
178.83.167.0/24 maxlen: 24
178.83.168.0/24 maxlen: 24
178.83.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ba:74:38:7e:81:c5:ee:b6:19:3a:3b:d6:2e:fe:df:17:88:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 3 04:45:27 2026 GMT
Not After : Mar 2 04:50:27 2027 GMT
Subject: CN=22D1FE63F8FF6E43634B7336EFA3FE77D35CD54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:6d:88:22:b7:73:6e:6f:53:d6:2d:05:cb:
89:54:a3:e1:d9:f0:cf:73:c2:cd:c6:e8:82:5b:af:
0d:c7:7c:28:b5:fe:54:37:75:12:e5:ce:9b:0f:24:
31:0c:c9:3b:26:cc:8a:39:fe:53:a8:b2:79:7b:51:
2b:4c:8b:e8:05:a6:92:68:f1:f2:40:ad:27:32:50:
e4:78:33:78:4b:11:0d:ee:2f:11:28:d7:6d:06:ac:
68:20:b9:b7:67:f3:63:fa:e6:dc:b2:3d:35:e4:44:
33:7b:ed:21:6f:7a:8b:6c:17:c4:f4:d8:ed:a9:e1:
66:98:3f:68:a3:a1:34:a8:ff:e1:d2:7e:8a:b7:19:
ab:ce:16:50:b9:a0:b1:41:07:a6:ce:59:b8:65:e0:
ef:f3:dc:0a:7c:7f:73:96:ee:3e:cb:28:28:49:0e:
7c:22:3e:90:71:36:e6:5b:46:6a:94:5b:38:15:24:
ed:96:7c:50:32:9c:20:a6:fe:bd:a0:06:eb:f1:a4:
15:5c:c4:94:5b:9c:7d:0f:31:09:68:bd:bb:95:b5:
38:fb:35:7e:e9:d0:5b:ea:05:0b:99:37:00:05:7c:
df:35:f1:0a:35:20:21:d0:2a:01:90:78:b9:11:3b:
f5:c0:c9:87:12:99:e1:37:75:75:45:83:e2:04:9c:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:FE:63:F8:FF:6E:43:63:4B:73:36:EF:A3:FE:77:D3:5C:D5:4D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.13.0/24
82.40.39.0/24
82.41.3.0/24
178.83.16.0/24
178.83.26.0/24
178.83.36.0/24
178.83.46.0/24
178.83.56.0/24
178.83.66.0/24
178.83.75.0/24
178.83.83.0/24
178.83.165.0/24
178.83.167.0-178.83.169.255
Signature Algorithm: sha256WithRSAEncryption
40:61:dd:80:b7:8b:5f:15:f5:4b:ce:a7:19:d8:f4:ad:d3:97:
9c:d2:a7:8b:49:be:1f:94:ad:e7:ce:58:43:bd:91:6c:20:4d:
7f:19:e0:2a:2f:dc:1e:1d:ac:be:34:2c:f2:27:99:08:0d:8b:
e9:bb:45:c6:10:76:7d:48:66:df:0e:9d:d5:6d:a8:84:65:22:
73:64:c3:0e:75:08:8f:27:b2:b4:44:41:e7:67:fe:a8:f8:6c:
db:f1:9f:a2:3d:40:5a:38:19:b5:70:32:07:c7:68:0d:47:6d:
6f:8d:aa:b4:07:02:56:30:10:1e:2f:5e:50:80:9d:3f:d7:70:
b5:a9:76:7c:be:87:8f:3b:7b:d9:fe:01:a1:52:af:23:a9:c0:
61:25:95:05:83:0e:5b:c7:8a:48:75:92:c2:05:e8:d3:95:32:
67:e1:e1:7c:8e:5c:71:08:33:ff:61:dd:07:d8:13:9d:d1:e1:
20:25:b2:35:0a:37:4a:96:58:d8:b9:fd:9f:6a:9e:3e:76:2c:
f6:d5:8c:c8:0a:94:37:bb:50:7e:7a:e6:9a:f9:04:0b:e3:32:
39:8b:be:f5:3c:a6:2f:18:62:cc:3b:fd:2d:a0:e4:9c:d9:13:
79:75:59:4f:ea:37:6f:79:1e:af:c6:2b:1b:3b:78:da:ac:f6:
77:df:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:04:21 2026 by rpki-client