Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: QolATekGAqQS9ebVl0FcMxTZt7Uc5DOiuV/ArZLZWAA=
Subject key identifier: 06:28:2F:CB:8A:79:B9:AB:6E:90:9D:71:26:44:4F:E0:CA:C0:28:9B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 549CE92491320E4F2C550C45267254581DD1E5E3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
Signing time: Sun 08 Nov 2026 00:09:01 +0000
ROA not before: Sun 08 Nov 2026 00:04:01 +0000
ROA not after: Sun 07 Nov 2027 00:09:01 +0000
asID: 7018
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.36.0/22 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9c:e9:24:91:32:0e:4f:2c:55:0c:45:26:72:54:58:1d:d1:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 00:04:01 2026 GMT
Not After : Nov 7 00:09:01 2027 GMT
Subject: CN=06282FCB8A79B9AB6E909D7126444FE0CAC0289B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:7c:b9:4d:01:f5:fe:74:73:d1:61:33:dd:
ba:65:5a:b9:65:3a:0c:7f:1b:fa:ae:ae:10:1a:0e:
7f:ba:76:fa:a8:ac:72:6c:b0:1c:a1:e6:bf:33:d6:
ca:8b:ae:1b:97:c7:43:22:0e:11:dd:6d:3d:10:25:
96:fd:64:79:8c:30:7a:f7:32:f1:4d:20:a4:9b:51:
5a:bf:81:d6:6a:22:59:d2:64:97:43:1a:ac:a9:32:
bd:98:76:a5:1b:8c:45:e7:d2:30:24:13:1e:61:c1:
4b:62:09:89:14:2a:2c:85:a6:93:f7:f7:ec:6e:18:
0c:bd:06:36:fa:1e:78:6c:b3:e8:55:c8:e1:d6:de:
27:7c:29:75:3d:ac:6a:df:f0:a8:5c:30:ca:35:c9:
c5:ca:70:69:7e:d2:13:32:27:32:b3:38:c5:f4:c4:
3f:2e:f0:00:9b:3b:40:75:ca:33:b9:42:8f:7f:a4:
7c:87:29:c6:47:4a:81:4e:dd:0f:71:66:6a:8a:17:
60:f5:2f:88:36:eb:73:80:e5:0c:5a:80:e1:64:8b:
90:1e:ca:14:b4:96:b9:66:c4:d4:3c:3f:bb:23:e4:
e3:56:d4:db:11:5c:80:96:30:97:15:90:82:44:75:
f0:13:dc:eb:4c:6c:e4:08:6e:74:92:83:aa:24:bb:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:2F:CB:8A:79:B9:AB:6E:90:9D:71:26:44:4F:E0:CA:C0:28:9B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.136.0/22
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.10.0/23
82.24.36.0/22
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.24.0/21
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.144.0/20
82.27.192.0/22
Signature Algorithm: sha256WithRSAEncryption
11:21:e3:68:28:2a:9c:ad:7b:1c:35:ea:ef:db:91:76:e4:44:
ff:70:02:2e:4e:8e:3b:e8:68:2d:84:5f:88:c2:af:48:a0:c9:
fc:f0:cc:5d:34:a6:12:36:fb:13:85:1c:72:c6:34:c6:a8:24:
12:6e:ee:60:d3:a5:a0:c4:6c:d2:e8:f7:e1:83:f3:26:15:82:
89:17:a6:54:8d:3f:51:93:64:ae:6c:4a:07:cc:ce:e8:e6:39:
b1:4a:f6:6c:b6:ba:dc:94:a9:71:40:01:a3:9e:df:e6:6f:2f:
fb:54:5e:3d:d5:90:1d:73:6b:9e:a5:b9:84:6e:d7:c4:8a:ac:
bf:f6:1b:8a:f6:47:e7:2d:d3:7c:95:59:c2:fd:94:09:fa:cd:
37:da:ff:3b:72:27:6a:ed:67:06:24:0e:f0:25:f6:ef:44:55:
bd:39:07:e5:0d:cb:ec:15:ef:cc:0e:7d:e4:44:e4:65:17:dc:
0e:c8:4e:21:f1:53:ce:34:f6:0c:90:47:30:42:0f:e8:1e:c3:
02:39:90:71:0c:ef:44:53:43:06:c3:55:e5:47:6d:98:98:67:
f2:16:84:27:a1:26:83:19:28:82:1b:bb:06:6d:e9:dc:d2:56:
da:4b:36:db:7e:0b:b8:cd:b8:0c:9e:f7:1b:d3:93:ee:a1:3d:
c5:21:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:52:27 2026 by rpki-client