Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS18526.roa
File: AS18526.roa (raw, json)
Hash identifier: 3iJrgmY0qlrit4vDCiBCHdPoWMh5aFje9aw54qutkkY=
Subject key identifier: E2:5C:74:9B:1E:DD:11:09:30:73:EC:C4:1D:B9:52:CA:0F:A4:AA:2E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 59B6E1E82D82C64201305C208CC6B6B835B6758C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS18526.roa
Signing time: Mon 10 Aug 2026 14:55:53 +0000
ROA not before: Mon 10 Aug 2026 14:50:53 +0000
ROA not after: Mon 09 Aug 2027 14:55:53 +0000
asID: 18526
IP address blocks: 193.164.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b6:e1:e8:2d:82:c6:42:01:30:5c:20:8c:c6:b6:b8:35:b6:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 10 14:50:53 2026 GMT
Not After : Aug 9 14:55:53 2027 GMT
Subject: CN=E25C749B1EDD11093073ECC41DB952CA0FA4AA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:7a:c1:ad:54:6f:ad:1b:1a:2b:75:70:50:
1f:c8:d4:d8:74:1b:cf:51:b8:09:50:b6:fb:ef:32:
27:1e:e3:66:d5:45:61:38:79:00:af:50:24:1e:f1:
15:df:79:ab:50:00:6f:b1:88:d9:e7:37:d7:52:f6:
4b:a6:69:a7:92:b1:39:92:77:66:fb:3c:18:59:59:
94:ba:17:2a:1c:da:94:9c:b8:71:e3:30:10:f3:1d:
60:d2:af:48:08:f7:16:0f:28:63:db:af:66:2e:7e:
47:66:0f:70:bb:be:9e:54:f7:4f:22:e4:fa:cb:66:
12:b1:ad:5b:13:87:93:36:ab:1f:04:ec:36:d7:e4:
60:20:d6:cb:06:43:85:f5:e2:f9:b2:00:5c:95:8f:
64:4d:b1:15:e3:84:6c:2a:6b:39:d6:70:cd:b0:02:
ed:7f:6a:e7:82:5a:71:9c:e5:47:1e:9b:dc:7e:f3:
63:c0:c8:ae:20:bd:b7:8e:62:d6:0e:b8:6b:d0:b7:
7f:a2:fb:a9:0b:fc:dc:5f:95:30:0e:d9:bd:71:d5:
de:89:99:8f:82:d3:1a:3a:a9:d4:b9:ac:97:fa:5b:
4c:71:41:19:5a:57:df:7e:36:b2:8b:78:59:eb:f6:
08:d3:22:08:45:90:ca:95:96:63:61:47:42:d3:bf:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:74:9B:1E:DD:11:09:30:73:EC:C4:1D:B9:52:CA:0F:A4:AA:2E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS18526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7e:d6:41:3c:c4:3b:07:27:fc:9e:0b:08:0e:02:d9:f7:ee:
67:8d:33:7e:24:2c:c9:92:b7:7d:ba:ba:6a:4b:40:52:d7:d0:
dd:bc:23:ec:da:da:2e:8a:ff:28:e8:24:92:0b:f1:b8:79:84:
a6:d8:fa:68:6a:0c:3a:f0:6b:cf:99:75:16:31:e5:fa:31:74:
ee:e2:d0:41:54:d9:a3:a4:5f:01:d0:d1:b6:16:e6:74:3f:25:
ba:0f:78:e0:c2:4d:2c:c3:78:8f:b0:4a:0d:2c:b1:50:15:65:
c7:56:64:a6:60:b9:94:57:c7:49:04:da:8b:8e:cf:42:26:fe:
80:b6:e2:60:69:16:c2:54:ed:cf:c2:1c:0e:1a:4b:73:81:b9:
5a:9f:34:ce:a4:e4:6f:29:cf:50:7a:97:36:b1:7e:e3:34:c6:
a5:73:c3:1c:5a:42:8a:ea:5f:92:32:ff:9a:fd:34:d8:04:d3:
7d:16:91:55:75:dc:bf:a0:80:6c:ae:3c:d6:29:cf:e4:be:83:
91:4a:9a:95:e4:c5:bf:f2:bf:20:bb:2b:88:31:f5:5d:94:26:
e9:45:01:99:6b:03:d0:17:05:7c:48:92:78:f9:2e:dd:52:af:
90:f4:f5:8c:f9:49:a2:54:76:42:24:9f:0a:80:11:61:40:7a:
32:dc:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:56:51 2026 by rpki-client