Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: UEyvLkCQJAIUXSNBoOY/h2cEkjQeRo7aKB5lvwIqwfE=
Subject key identifier: E0:53:6B:86:32:3F:05:92:DB:0B:BF:89:E8:55:3E:85:74:99:14:3A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F5697DA55EA37E0C4ABBFCE59854DFB6B2759EC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Fri 29 Aug 2025 18:44:48 +0000
ROA not before: Fri 29 Aug 2025 18:39:48 +0000
ROA not after: Fri 28 Aug 2026 18:44:48 +0000
asID: 18811
IP address blocks: 178.92.16.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.94.196.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:56:97:da:55:ea:37:e0:c4:ab:bf:ce:59:85:4d:fb:6b:27:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 29 18:39:48 2025 GMT
Not After : Aug 28 18:44:48 2026 GMT
Subject: CN=E0536B86323F0592DB0BBF89E8553E857499143A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:9d:c3:0d:95:a3:b1:5f:61:dd:9d:bf:1b:
ae:28:81:d7:6b:b7:a3:4f:3f:4d:b6:56:09:ec:46:
24:c3:db:55:79:fb:0b:6e:db:b7:31:bf:e9:30:2c:
09:1e:0f:5c:b7:5b:9c:03:34:fd:f9:f0:7c:f6:12:
12:52:1b:c8:c8:bb:0e:a3:60:5c:b2:56:3b:bd:ca:
df:43:ca:a9:0a:61:41:2c:52:79:8a:d4:a7:a8:fe:
b3:d7:13:fa:2b:67:48:9c:c3:1a:53:11:48:c4:2e:
da:f4:66:23:dc:50:79:1b:e1:60:88:bc:ff:64:55:
f5:31:c9:7f:2d:cd:d4:03:6e:e0:5e:86:4b:38:11:
fe:76:c6:04:86:9c:ad:5f:64:be:4e:27:94:07:b4:
7f:fc:4f:17:7b:e1:65:45:7f:52:43:96:25:8d:2f:
db:52:6a:14:17:77:45:86:b0:51:d4:52:27:e5:6b:
c1:06:88:65:b5:d5:37:b4:1e:46:78:66:34:46:d1:
f0:8a:10:1a:67:0e:78:49:c5:ff:d8:cb:94:49:7d:
b9:32:60:37:22:85:e6:92:c7:5e:fa:3a:85:bc:20:
c2:ef:fe:8e:9b:5c:61:c9:52:89:96:8f:3a:ff:29:
3d:ad:18:19:2c:40:79:43:7f:55:c2:e7:17:55:a7:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:53:6B:86:32:3F:05:92:DB:0B:BF:89:E8:55:3E:85:74:99:14:3A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.16.0/22
178.92.36.0/22
178.93.0.0/22
178.94.196.0/22
178.95.0.0/22
Signature Algorithm: sha256WithRSAEncryption
94:3c:56:e8:0f:6a:25:83:a4:45:9b:63:69:66:3b:27:81:f2:
80:dc:e0:88:02:44:ca:e7:6f:02:e5:2c:c5:91:b6:63:e8:8f:
e4:2f:98:f8:cf:e0:3e:f8:0b:70:e5:33:58:8c:18:26:66:4a:
1c:8b:96:dd:23:d1:62:30:42:5a:95:b5:cb:1d:45:3a:f9:bd:
9b:3a:58:90:e5:6d:a7:44:4c:04:d7:d3:ec:e4:f4:d9:1b:6e:
c0:73:91:69:70:68:8a:dc:b7:bd:67:f1:26:13:d5:a6:0c:a2:
c6:aa:77:2e:ba:c1:a3:e7:86:de:d2:42:c9:28:97:e4:75:52:
50:eb:73:71:39:07:bd:d2:37:34:2c:61:a0:0d:d5:8d:22:1d:
34:a7:35:a4:55:a5:f1:28:cc:17:d0:4b:4e:53:41:08:5f:8c:
1c:8a:4e:9e:4f:5e:24:51:3e:0a:26:ca:5d:d5:67:50:93:3f:
50:44:53:a9:f1:3b:07:6a:ea:8a:e8:11:4f:02:eb:07:0b:81:
c1:80:23:ba:8e:48:54:81:4b:7d:02:8b:49:0d:ef:45:36:3b:
f8:72:8d:b9:79:92:6f:b9:df:04:13:b9:3f:70:d0:a4:b4:73:
d0:6f:db:13:4a:f8:b7:12:0f:2a:8c:9c:e1:dc:80:0a:71:45:
b8:fb:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:57:18 2025 by rpki-client