Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
File:                     AS9318.roa (raw, json)
Hash identifier:          VcEL0/cO0FPfHQkgZYNZY8WGph61Kv8AVt6kAwKRI+4=
Subject key identifier:   14:EA:FA:F1:A1:87:1B:BF:6F:3A:30:5D:47:6C:13:56:45:47:CD:8A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       197664A02FF4C2507F04C2B3E7B2A61ACA2A81AD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
Signing time:             Sat 28 Mar 2026 00:02:56 +0000
ROA not before:           Fri 27 Mar 2026 23:57:56 +0000
ROA not after:            Sat 27 Mar 2027 00:02:56 +0000
asID:                     9318
IP address blocks:        82.23.13.0/24 maxlen: 24
                          82.40.39.0/24 maxlen: 24
                          82.41.3.0/24 maxlen: 24
                          178.83.165.0/24 maxlen: 24
                          178.83.167.0/24 maxlen: 24
                          178.83.168.0/24 maxlen: 24
                          178.83.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:76:64:a0:2f:f4:c2:50:7f:04:c2:b3:e7:b2:a6:1a:ca:2a:81:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Mar 27 23:57:56 2026 GMT
            Not After : Mar 27 00:02:56 2027 GMT
        Subject: CN=14EAFAF1A1871BBF6F3A305D476C13564547CD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:f9:31:14:7f:b9:57:5b:eb:e7:88:01:6f:
                    2a:6b:67:61:4e:c5:b7:b6:d6:8d:57:80:fd:ca:9f:
                    9e:08:43:0f:32:8b:36:82:a7:62:a2:72:4d:81:cc:
                    e1:b0:6a:28:96:58:09:6b:ee:5a:31:52:6f:4c:44:
                    de:a0:3a:0c:31:d0:66:14:3b:40:b7:12:b4:3d:6a:
                    42:2e:4c:0b:63:9b:47:8e:67:b4:fa:76:6e:ef:e2:
                    7c:2b:69:a1:6a:1d:57:78:31:43:ef:95:40:b4:89:
                    4d:48:f4:b8:32:15:a9:d9:83:e2:9b:90:a9:af:e4:
                    ed:a2:b0:43:2c:4b:36:f9:86:ab:14:3e:f6:05:22:
                    67:4f:4e:9c:29:5f:50:68:e2:59:e1:56:b8:76:6e:
                    4e:94:ec:c4:57:b8:e6:32:9f:f5:9e:d7:a6:bd:cc:
                    d7:0c:d8:0e:de:43:9d:28:99:42:e6:05:3b:16:88:
                    55:98:b7:d6:5b:a7:b7:ba:47:ea:cb:9b:2d:82:e3:
                    54:7b:6f:ea:af:11:d0:c0:a8:c6:b1:1f:b5:c6:7b:
                    f3:3c:fa:13:c2:82:fd:31:c0:10:09:bb:77:4a:d8:
                    71:96:bc:68:5a:63:fd:e2:24:f4:a9:ed:3f:46:cc:
                    bd:4c:a3:4f:5f:14:7a:3f:a1:17:56:04:4b:8f:b0:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:FA:F1:A1:87:1B:BF:6F:3A:30:5D:47:6C:13:56:45:47:CD:8A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.23.13.0/24
                  82.40.39.0/24
                  82.41.3.0/24
                  178.83.165.0/24
                  178.83.167.0-178.83.169.255

    Signature Algorithm: sha256WithRSAEncryption
         61:34:af:7e:95:88:6d:13:9a:ad:e8:99:99:74:7f:d0:d1:df:
         5e:01:df:a8:ae:d1:19:e3:97:f3:f3:a4:62:13:af:d0:4a:34:
         bf:6d:7c:a8:08:c3:ce:be:dc:6b:02:1e:38:0f:b7:5f:28:04:
         97:49:ea:f4:ac:5c:05:96:ce:84:a2:75:8b:12:62:c2:8f:8d:
         9b:17:a7:e0:8c:41:26:8b:ef:5b:5d:df:24:81:41:7d:30:c5:
         ca:82:5c:c6:6b:5f:ae:eb:58:d6:5e:98:81:3f:aa:0f:72:a8:
         d3:af:b6:bc:24:a0:c5:69:48:0a:5b:a9:3a:f3:29:da:6a:93:
         ae:9c:1d:cd:1e:d0:1d:a0:c4:24:f2:28:e4:66:17:0e:c6:a5:
         3a:d0:af:3b:64:b0:db:b8:e7:69:0d:24:8e:3a:40:94:df:5d:
         94:36:75:b4:0e:de:8e:79:e4:6b:9c:7b:54:5f:a5:f8:6c:73:
         f4:43:c3:01:cf:3b:18:18:c0:dd:2b:c0:19:27:f3:1c:c5:b7:
         0d:90:2a:93:74:4a:ba:3a:56:7b:bd:c4:35:b2:67:d1:49:f9:
         2f:e0:59:06:14:d8:59:4c:6e:d7:0a:fd:08:5d:36:61:45:f1:
         98:dc:1f:9e:ad:dc:dc:a9:7a:9e:e7:4f:47:87:7c:cc:2c:11:
         68:fd:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:04 2026 by rpki-client