Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: 0ySZK222slHiuo2SeF01cn0bsM57ZCq9K/RmCNsc1m4=
Subject key identifier: 08:A1:65:01:83:27:E3:28:85:4B:C0:59:25:39:79:73:3F:0C:27:4D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 63AE6D8C64B55921ED9CBCDD54B74D167C1DB116
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Mon 20 Oct 2025 13:46:48 +0000
ROA not before: Mon 20 Oct 2025 13:41:48 +0000
ROA not after: Mon 19 Oct 2026 13:46:48 +0000
asID: 18811
IP address blocks: 178.92.16.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ae:6d:8c:64:b5:59:21:ed:9c:bc:dd:54:b7:4d:16:7c:1d:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 20 13:41:48 2025 GMT
Not After : Oct 19 13:46:48 2026 GMT
Subject: CN=08A165018327E328854BC059253979733F0C274D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:24:37:6a:0e:6d:cd:bb:44:e0:aa:19:4f:
39:d3:91:1c:3a:de:5c:42:29:69:98:26:79:a6:01:
68:3e:2c:43:99:36:27:58:29:8a:f5:b5:e9:57:eb:
bb:91:42:60:58:e5:81:8c:59:c1:ac:ca:b4:05:25:
b0:3f:e5:9b:5e:59:99:62:2f:39:a5:3c:33:ae:ee:
4e:96:91:19:01:a0:bb:33:f6:b4:0d:a3:e5:60:af:
b1:91:19:12:6d:5d:66:c0:d0:9d:b8:17:45:6c:e4:
a9:fa:84:5b:cc:48:da:bb:36:a3:cf:5f:7c:1c:21:
cc:f2:0f:ff:20:2f:6c:4e:9f:4a:68:28:b3:f8:19:
4a:cb:b2:6b:4b:f0:83:d8:ba:5d:86:a4:cc:cb:8f:
e2:c7:d4:cf:c7:9a:8e:82:71:99:e7:ce:09:33:8b:
59:70:42:74:98:66:7c:de:a6:f0:fb:eb:f1:de:ed:
2f:11:c1:c0:b2:96:1b:a6:c9:1e:c5:94:f5:71:8b:
c6:af:c9:53:2e:b7:d9:53:16:76:a8:c9:70:30:7b:
4b:27:8c:2b:57:11:44:11:fe:37:c9:49:35:bd:c0:
bb:39:62:96:1c:57:be:b3:21:37:c5:4d:86:b2:6b:
34:69:56:e2:61:83:d7:8e:81:af:76:dd:85:54:35:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:65:01:83:27:E3:28:85:4B:C0:59:25:39:79:73:3F:0C:27:4D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.16.0/22
178.92.36.0/22
178.93.0.0/22
Signature Algorithm: sha256WithRSAEncryption
57:58:c9:12:dd:76:f1:f2:2c:82:49:e3:1b:e1:fe:32:da:d0:
18:88:9a:29:fc:7f:e9:d5:a0:50:7d:2d:58:d4:10:54:c8:52:
0b:ac:02:08:bf:70:e7:12:2a:1f:51:23:e4:cf:56:76:5e:62:
5e:23:47:99:34:b3:87:e9:69:4e:c8:54:95:12:8e:8d:8d:6f:
24:4f:0a:48:3b:78:12:46:c9:9a:dc:fc:ad:c8:d8:97:74:58:
90:5d:f9:11:6c:bc:e5:03:98:c6:40:79:09:80:0b:1e:5c:cb:
d9:4d:a3:89:5d:05:ac:8f:77:d5:0c:d6:79:1f:36:fa:c1:e0:
99:60:e5:f5:b5:1a:b4:5c:2f:7c:c2:80:ed:5b:39:0f:6e:a7:
fd:ea:2e:35:0d:48:25:8e:31:c1:fe:88:d9:59:cc:37:11:e7:
b7:8f:33:f3:63:f3:f0:8d:ea:f7:e2:3e:ba:16:9c:0b:02:0f:
aa:42:d6:aa:98:ab:f1:9d:27:fd:67:54:03:98:e8:7f:60:6b:
71:67:47:73:56:29:60:22:16:0b:54:18:e7:3f:28:d0:ee:b6:
9a:4b:42:41:66:04:cb:5f:89:f5:0e:17:7a:6f:af:cf:3c:c7:
10:9f:a6:0e:57:f5:84:64:b8:f3:2d:28:00:ab:93:57:a5:b6:
60:77:72:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 22 04:31:26 2025 by rpki-client