Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18779.roa
File: AS18779.roa (raw, json)
Hash identifier: Slfg8GWcC4zIIurzVDY3yfeJaMTUzy3skghtADRqFSs=
Subject key identifier: 04:BA:E0:F2:B9:3F:C4:C1:DD:DD:45:BF:D8:25:14:89:B6:1E:DB:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 511D2A0CBEA0A005ED20CBAD5C51D66B7A2A59A0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18779.roa
Signing time: Tue 14 Apr 2026 05:47:05 +0000
ROA not before: Tue 14 Apr 2026 05:42:05 +0000
ROA not after: Tue 13 Apr 2027 05:47:05 +0000
asID: 18779
IP address blocks: 136.143.241.0/24 maxlen: 24
158.140.192.0/24 maxlen: 24
203.100.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1d:2a:0c:be:a0:a0:05:ed:20:cb:ad:5c:51:d6:6b:7a:2a:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 14 05:42:05 2026 GMT
Not After : Apr 13 05:47:05 2027 GMT
Subject: CN=04BAE0F2B93FC4C1DDDD45BFD8251489B61EDB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:1c:4e:74:64:66:20:6a:63:b7:b7:e4:8c:
1c:2c:50:e2:b8:40:f8:d3:43:5c:b6:f0:c4:a4:d9:
77:5b:16:8c:5b:ee:79:62:4e:d3:a2:61:29:2e:91:
47:ec:f8:2c:23:de:3a:d8:94:ad:83:f1:f7:87:d5:
49:c2:e8:2f:18:88:8e:ac:b6:3d:5c:65:98:e6:7f:
ea:dd:e6:3c:b8:14:3e:a3:b1:df:08:05:79:d1:2a:
5c:e8:48:1e:a3:85:21:8d:2e:82:62:73:91:bf:2b:
18:c8:6a:57:f9:14:5e:2a:cb:37:64:c8:5e:2b:d6:
5a:13:96:15:d4:16:d1:02:a2:79:28:ce:5f:b0:72:
f4:9f:62:2e:4b:00:a5:e5:f2:1b:24:d7:1a:e1:3e:
6a:63:24:b5:43:07:78:d7:3a:d6:f8:de:e2:ce:73:
33:41:39:20:65:b5:dd:36:f6:84:fc:b1:2e:fc:e5:
13:ae:53:7b:1d:69:f5:a6:37:3d:39:dd:c2:eb:8c:
60:ec:d3:56:f7:e0:32:81:22:5d:cf:65:99:5f:e9:
fa:a0:6d:6e:41:e1:b1:32:ef:be:f3:0b:a8:af:56:
69:1e:39:13:aa:33:5a:a4:2a:3e:0b:5e:fd:a6:85:
94:a0:ab:f1:d4:61:87:3e:5d:75:9e:c5:0b:f9:12:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:E0:F2:B9:3F:C4:C1:DD:DD:45:BF:D8:25:14:89:B6:1E:DB:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS18779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.143.241.0/24
158.140.192.0/24
203.100.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:0d:f9:3b:ec:eb:1a:29:fc:55:8f:0c:dc:1b:0f:b9:14:22:
82:a3:71:6d:d1:88:7c:a9:a0:3e:40:a1:51:f4:44:31:2d:fa:
af:fb:94:c1:ec:98:85:ec:4b:04:b8:2a:b2:67:4e:45:97:60:
35:a9:b0:b6:00:0a:da:a8:0b:ed:6a:08:c1:f0:f4:8f:e2:e8:
2f:62:65:34:cf:33:b0:19:ac:79:64:0e:b1:31:dd:dd:62:de:
14:f4:90:b0:ab:36:9b:47:9e:64:bb:e2:d0:e7:d5:eb:b3:7b:
68:c1:bb:9e:fe:a2:10:04:10:1d:fa:56:c2:01:a1:fd:65:93:
10:35:6e:c4:50:e8:21:a9:d8:f2:5d:70:68:3d:5f:dd:51:d7:
82:9c:6d:45:f0:10:3d:d8:72:2e:f7:ef:be:ee:58:a6:0c:02:
b9:e7:10:32:f5:32:91:dc:d3:27:21:12:56:09:ce:4c:7a:99:
00:5c:05:53:30:46:49:df:53:a8:50:93:a0:14:20:63:b5:c5:
5f:29:7b:14:96:0b:21:57:a4:d1:df:1d:37:43:4c:45:0d:e9:
8c:63:91:97:e7:93:6e:60:4a:52:e1:12:03:b1:86:28:52:70:
b6:50:93:25:d5:fe:c2:71:d5:a4:cb:c0:8f:b2:f6:0e:1d:97:
b0:12:01:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:51:52 2026 by rpki-client