Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: 92XUH1mVQPYL3g8VN4hPGsR2lcDA1/Gs5lDY1PAuUeA=
Subject key identifier: A3:EC:82:9B:7F:57:08:C9:20:B7:B9:86:4B:1D:D0:9D:5F:F6:E2:DB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 17A9438F2E816F7D4A3D609EABDA61C2E18FC1DF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9318.roa
Signing time: Wed 04 Feb 2026 13:39:20 +0000
ROA not before: Wed 04 Feb 2026 13:34:20 +0000
ROA not after: Wed 03 Feb 2027 13:39:20 +0000
asID: 9318
IP address blocks: 2.57.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 01:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a9:43:8f:2e:81:6f:7d:4a:3d:60:9e:ab:da:61:c2:e1:8f:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 4 13:34:20 2026 GMT
Not After : Feb 3 13:39:20 2027 GMT
Subject: CN=A3EC829B7F5708C920B7B9864B1DD09D5FF6E2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:42:f8:c6:20:55:c9:3e:9b:82:1f:51:a2:
f9:9d:ee:75:b2:ab:88:17:b5:43:af:94:af:2f:72:
dd:3e:94:63:c7:0b:fd:bc:09:0d:49:3f:01:81:c2:
26:3d:f6:f7:d1:d1:aa:26:9e:a0:30:6b:12:6b:40:
01:9e:55:51:7a:34:9b:f2:48:4f:d0:7e:77:8a:61:
d9:9f:31:b3:8e:71:fc:b0:60:32:21:ef:ac:38:39:
e7:86:7c:30:89:98:bd:5f:6c:cd:3b:5f:1e:18:54:
ac:b5:8e:77:25:5e:9d:3a:6f:ae:1c:a7:36:9c:ea:
6f:5f:ce:5c:7c:de:5b:d1:b8:3a:49:d1:ff:1f:f0:
8b:71:28:bb:a5:78:73:ac:55:50:7d:f5:c1:e0:91:
6c:af:8e:69:4f:03:76:28:a2:84:01:e9:02:77:38:
9b:16:b1:80:39:c0:46:0f:d9:d9:33:77:01:53:57:
7d:d6:6a:f6:9f:fc:5e:85:74:c4:a3:91:24:c7:e5:
a3:dc:42:c1:2d:02:10:b3:e9:2f:c5:5f:0c:d2:a3:
70:d8:bb:4e:f8:50:bb:67:e3:bd:1a:97:25:20:d3:
12:67:1a:23:89:70:03:39:20:f1:6d:9e:95:13:4e:
2c:4e:44:6d:1f:73:9b:51:9b:61:df:58:4c:84:d4:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EC:82:9B:7F:57:08:C9:20:B7:B9:86:4B:1D:D0:9D:5F:F6:E2:DB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
Signature Algorithm: sha256WithRSAEncryption
03:12:dd:60:53:71:99:ef:00:b0:82:5d:3c:23:a9:f2:cb:0a:
43:7d:2b:8f:5f:11:28:d9:73:5c:8d:76:37:ca:ff:d8:09:eb:
a8:cb:7d:e8:4f:97:2c:83:4c:9d:62:1c:07:e9:e7:37:7d:77:
17:6b:19:35:50:9d:0c:1f:c2:c1:08:82:08:2c:43:38:68:14:
5b:cb:0f:d8:28:e5:be:be:2a:78:36:dc:c1:1c:d2:44:b8:30:
85:bf:17:ce:cc:2a:8c:ba:0c:db:9a:64:b3:71:50:22:bd:76:
5e:c1:84:d0:e8:ac:3f:59:80:2b:cd:60:cb:18:14:ab:7b:93:
f6:a3:e5:6c:6c:64:81:ae:8f:2b:c6:59:95:b3:cf:90:76:b6:
8c:73:53:9a:2a:c1:64:65:d0:77:14:03:e4:d7:c0:21:63:68:
f9:71:30:82:48:58:89:07:f9:bf:a3:f8:b0:bd:40:45:54:0d:
06:5c:a3:32:8c:3b:2a:6c:7f:90:6b:72:36:6f:95:90:a1:5b:
55:17:ea:6c:68:65:36:00:73:bb:7f:be:d8:42:ae:60:c8:2a:
37:20:a2:0b:ac:28:c9:f0:9d:48:1a:97:c6:6c:59:0b:7a:1e:
be:ca:c6:72:15:df:76:08:02:8b:e3:10:d8:2f:ce:02:f1:cc:
dc:45:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:54 2026 by rpki-client