Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
File: AS18427.roa (raw, json)
Hash identifier: UtUmHlGu4z3wtIQq17t7S1oJ2WWClOSoUtTbK/ANfAo=
Subject key identifier: 1D:17:B9:AE:34:1D:94:6B:9B:48:CD:F5:D5:1C:7F:AB:0A:DF:2C:42
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F0E50E87AF8E66656FFBB49DBACB06EB6635C01
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
Signing time: Mon 03 Nov 2025 09:22:08 +0000
ROA not before: Mon 03 Nov 2025 09:17:08 +0000
ROA not after: Mon 02 Nov 2026 09:22:08 +0000
asID: 18427
IP address blocks: 96.62.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0e:50:e8:7a:f8:e6:66:56:ff:bb:49:db:ac:b0:6e:b6:63:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 3 09:17:08 2025 GMT
Not After : Nov 2 09:22:08 2026 GMT
Subject: CN=1D17B9AE341D946B9B48CDF5D51C7FAB0ADF2C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5a:5f:88:6f:27:9c:b5:6e:0d:34:a7:52:a6:
1f:ff:ed:ba:63:8f:b5:28:11:1a:be:a3:fb:cf:bc:
9a:64:14:12:f8:ec:3f:3d:84:e6:58:fd:a1:8a:77:
5e:35:3e:99:fb:b6:7d:32:01:57:58:fd:72:77:09:
69:98:ae:85:85:f7:cf:e7:98:80:7b:d0:55:fe:27:
ed:16:f8:ef:6e:9a:66:6a:34:1c:2e:ab:02:e0:b3:
71:44:55:16:af:a5:ea:aa:8e:bd:87:46:0b:47:43:
dd:f0:1a:77:bb:7d:2a:02:fe:62:73:e4:57:76:a1:
c4:08:0a:c3:d1:a1:71:92:f2:b3:87:5a:b3:50:73:
5f:30:26:ac:80:7e:e9:9b:02:df:90:6d:30:9b:45:
52:f5:88:28:7c:8a:f9:0d:74:2b:2e:f0:31:a4:64:
93:b9:72:b5:1f:0f:bf:f8:25:21:eb:22:11:b1:ec:
e8:d4:d3:21:bc:31:55:7a:e4:1d:4f:07:97:b3:8d:
e7:ff:f6:c3:ad:26:f9:87:37:81:68:79:bf:f7:d6:
b4:e8:d2:af:d9:66:40:98:a0:f1:bb:5b:c6:4d:93:
2a:7e:07:8c:b4:be:87:80:6c:79:29:87:d6:5b:25:
71:0e:fd:ea:fe:04:de:33:2d:37:db:30:55:9d:97:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:B9:AE:34:1D:94:6B:9B:48:CD:F5:D5:1C:7F:AB:0A:DF:2C:42
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fb:48:81:72:84:d7:26:e5:0e:5f:99:15:19:18:f7:0f:d2:
2a:52:8d:91:bd:b0:7c:03:a0:55:7e:75:01:c7:77:ea:4d:0f:
f8:6c:e1:6a:01:e2:f4:0f:75:b6:22:21:49:c5:87:c6:8c:63:
e4:80:56:98:b9:2d:77:dd:aa:d1:7e:6c:00:da:0d:db:88:ea:
ee:42:51:75:88:4c:46:c0:00:b3:9c:38:86:5b:31:14:75:da:
de:2c:8c:80:12:5a:99:51:7e:44:1a:7d:98:19:98:ee:dc:93:
7a:88:89:fe:d8:46:95:e7:d3:23:39:97:eb:16:46:7f:0c:e0:
57:d6:86:fb:0b:af:80:8b:73:36:af:6b:03:c5:51:47:4f:ee:
2a:b3:44:1c:7c:cb:e3:d1:1a:c9:31:58:f7:3e:c5:7d:67:f0:
55:7b:6d:19:9c:78:48:ee:63:f7:9b:fe:b1:c8:dc:ef:9a:12:
e9:09:31:d9:e7:78:eb:42:33:57:e0:af:5e:64:ef:2d:aa:d3:
e9:9b:0e:ff:af:f2:ef:5d:21:f2:5c:5e:93:6d:71:a0:ef:b8:
50:ea:ec:fc:1b:35:8b:9b:bd:9e:a8:82:30:54:bd:e8:75:0b:
85:a4:ef:14:12:2d:26:99:37:97:e8:55:18:fb:02:3d:b1:4b:
d6:55:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:48 2025 by rpki-client