Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: u2PuepZzMqLKNgUJsmDnSGRSXqacNlGKDn2zHGMISFE=
Subject key identifier: BE:E5:25:0F:BC:92:56:1C:87:61:D4:A3:15:34:43:3B:CB:91:1C:73
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3CB82DB279D50543E0AE1C447E96FD59D98A5897
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
Signing time: Tue 08 Sep 2026 10:49:33 +0000
ROA not before: Tue 08 Sep 2026 10:44:33 +0000
ROA not after: Tue 07 Sep 2027 10:49:33 +0000
asID: 7018
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.36.0/22 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
82.27.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b8:2d:b2:79:d5:05:43:e0:ae:1c:44:7e:96:fd:59:d9:8a:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 10:44:33 2026 GMT
Not After : Sep 7 10:49:33 2027 GMT
Subject: CN=BEE5250FBC92561C8761D4A31534433BCB911C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:46:7d:dd:c5:94:2f:e6:7e:5c:f5:45:62:
f4:88:85:e8:3b:05:a4:4a:a0:7c:b9:7e:4c:c5:7d:
b4:e7:d8:02:75:d1:f4:99:43:72:34:cc:9c:1c:c4:
c5:50:73:57:7e:89:a0:12:36:9e:0c:4e:d0:d0:1e:
ca:0d:29:95:82:cd:5c:d1:0f:66:34:c7:6b:00:90:
7f:b4:86:9d:5b:20:86:2e:53:41:67:86:d6:8f:cb:
16:9d:9e:45:fe:94:e5:62:44:a7:a3:e0:dd:ec:b3:
a1:84:80:f3:5d:e1:36:10:63:01:60:f9:6c:5d:0b:
93:00:62:f8:5e:96:19:11:e3:39:bc:c4:0b:a9:77:
d1:e9:ee:7d:a7:70:dd:3e:51:1d:4e:96:f1:a2:85:
16:a3:b8:c7:f6:ec:31:97:65:06:69:92:00:f5:14:
7a:57:36:03:ed:ad:da:be:f6:f7:b3:a8:55:62:54:
e1:94:cf:22:ff:48:f2:03:32:cc:a1:fb:ef:5a:2e:
ea:25:38:7b:a4:f6:83:d5:8c:37:15:72:e8:80:55:
f9:7b:e5:76:9b:59:db:12:ab:9e:e3:c0:97:27:08:
c9:da:c6:1c:82:da:d4:5f:d6:ab:cf:33:95:f4:89:
ae:12:3c:da:2f:82:a5:25:de:ce:3c:0f:78:cb:40:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:25:0F:BC:92:56:1C:87:61:D4:A3:15:34:43:3B:CB:91:1C:73
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.10.0/23
82.24.36.0/22
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.24.0/21
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.136.0-82.27.159.255
82.27.168.0/21
82.27.192.0/22
Signature Algorithm: sha256WithRSAEncryption
10:72:6f:ac:5c:3d:4e:25:94:ba:a4:64:36:21:59:20:e5:76:
63:24:cb:e5:70:8f:4d:85:11:18:79:89:ee:65:9a:cb:2b:94:
06:81:1b:85:c7:5d:f5:be:04:a5:84:7e:b1:29:5d:82:39:72:
77:a8:4d:d1:d1:8b:36:14:fd:26:09:2d:63:fb:f5:25:83:a4:
c9:ef:f2:61:a2:14:b8:79:41:6f:73:1e:67:66:5e:51:2b:f3:
5c:22:15:87:96:f0:e2:f2:d9:36:92:6d:f8:a0:e4:3c:7f:59:
d4:08:dd:da:6b:ad:a7:33:23:dd:2b:58:45:9f:9d:7c:f9:04:
8e:53:d1:b7:21:62:2d:04:5e:02:c2:9d:c5:c1:de:3f:fa:75:
35:55:bf:5c:99:be:ae:cd:1f:ba:b4:8f:80:83:2c:56:50:03:
07:dc:d8:6b:e2:94:52:8b:fb:04:0c:95:44:c3:13:c5:65:dd:
e0:c7:0f:df:90:5e:84:07:10:fa:cf:0c:be:4b:27:68:8a:b1:
7b:65:99:a6:3f:54:c0:2e:b6:83:a8:1a:21:9e:ce:ad:bf:9a:
39:d4:70:9a:ff:b5:eb:8d:55:95:d3:aa:4f:21:cb:46:a7:be:
02:d4:87:8e:ab:f9:ee:33:df:ab:64:fd:f3:18:37:bf:57:7b:
57:66:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:28 2026 by rpki-client