Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: KI6d7R/j62N3AbMQAV0k1bk1l2zV4NjaoATszJi4g3E=
Subject key identifier: B3:6F:73:44:0A:63:C1:FB:43:8A:88:72:CB:B3:16:7F:C1:C7:78:EE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31F712194F76EE134C10C974BD145EAB661824B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
Signing time: Sat 28 Feb 2026 00:01:25 +0000
ROA not before: Fri 27 Feb 2026 23:56:25 +0000
ROA not after: Sat 27 Feb 2027 00:01:25 +0000
asID: 9318
IP address blocks: 82.40.39.0/24 maxlen: 24
82.40.48.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.3.0/24 maxlen: 24
178.83.16.0/24 maxlen: 24
178.83.26.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
178.83.56.0/24 maxlen: 24
178.83.66.0/24 maxlen: 24
178.83.75.0/24 maxlen: 24
178.83.83.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
178.83.167.0/24 maxlen: 24
178.83.168.0/24 maxlen: 24
178.83.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f7:12:19:4f:76:ee:13:4c:10:c9:74:bd:14:5e:ab:66:18:24:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 27 23:56:25 2026 GMT
Not After : Feb 27 00:01:25 2027 GMT
Subject: CN=B36F73440A63C1FB438A8872CBB3167FC1C778EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:51:2e:8e:96:4c:07:d3:05:52:ec:e7:55:
4b:b6:55:bc:0b:07:83:af:19:4d:18:fc:6d:9c:f3:
43:0b:0d:33:9d:8e:a4:83:f7:87:73:3d:93:d1:d0:
f9:0a:83:6e:93:f8:24:88:1c:77:b0:93:ee:30:c5:
5f:0f:6e:d1:4d:09:37:58:9e:56:1f:98:ef:c1:1c:
dd:c3:22:b5:65:3f:6f:27:3a:36:6c:8a:07:4a:47:
d0:2c:d8:af:90:89:a0:33:96:03:07:87:07:86:22:
27:5f:3c:7d:41:97:38:5f:0c:43:57:10:e4:5f:bf:
30:d7:7a:35:f0:86:70:3b:70:c7:2a:d3:06:13:38:
9b:3d:cf:ab:9a:1a:2d:8f:36:b6:53:9b:75:b7:78:
3c:2d:98:53:0e:9f:80:6e:d7:a4:5b:9b:03:e7:5e:
37:46:5f:02:92:ae:5b:b3:5c:b4:bf:49:c8:60:aa:
ce:fb:56:aa:aa:8d:12:75:61:59:4a:be:dc:1a:61:
34:a3:70:be:12:f9:22:92:06:2b:03:c5:52:cc:bd:
c1:d7:d2:6e:b4:29:e2:ea:5b:57:95:76:f9:36:b1:
4b:55:68:43:bb:01:7f:a0:c5:a1:00:69:b8:3b:06:
5b:72:d1:80:d3:ba:07:4f:aa:11:aa:b5:44:4c:92:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:73:44:0A:63:C1:FB:43:8A:88:72:CB:B3:16:7F:C1:C7:78:EE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.39.0/24
82.40.48.0/24
82.40.51.0/24
82.41.3.0/24
178.83.16.0/24
178.83.26.0/24
178.83.36.0/24
178.83.46.0/24
178.83.56.0/24
178.83.66.0/24
178.83.75.0/24
178.83.83.0/24
178.83.165.0/24
178.83.167.0-178.83.169.255
Signature Algorithm: sha256WithRSAEncryption
0b:14:fb:8e:26:62:3d:a9:fa:2f:e1:cc:09:29:bf:3e:75:25:
5e:ab:6d:20:42:f7:2e:2a:6b:06:0c:4d:6d:ee:f1:cd:27:99:
94:74:58:5e:f1:72:e4:0f:08:b5:4f:39:a6:ee:4b:4f:dd:2d:
12:41:6f:ae:18:33:a7:6b:ff:0d:85:1e:a4:2a:aa:9e:aa:2d:
a5:33:af:58:94:4a:dc:5a:02:b1:a0:27:d7:cd:e0:41:3b:3e:
83:4e:f7:31:94:1a:fd:41:d0:91:f9:85:6c:42:04:8a:a3:4b:
52:bd:ba:66:5f:8a:67:8f:4f:76:48:95:a6:f2:55:48:66:67:
b8:16:a2:a4:90:bc:de:9e:a1:de:56:ef:48:00:71:d4:f5:41:
cc:a6:5e:85:5e:f3:21:0f:30:28:c7:d7:28:25:69:cc:cd:32:
f2:6d:b9:e7:ad:72:9f:d2:91:7d:37:e4:96:ef:1d:31:b8:64:
4f:bc:0e:47:f1:33:b6:e8:7f:9c:98:91:bb:be:60:f7:14:27:
b8:ef:14:18:9a:f1:29:35:5f:53:1e:6b:26:35:ff:60:0c:fa:
84:b7:cb:57:59:a5:74:c1:3b:58:d3:e4:f2:2d:ce:5c:61:51:
6a:05:80:c9:53:c9:68:36:6e:21:5f:dd:43:40:b2:03:3e:8f:
e5:3e:d7:b3
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUMfcSGU927hNMEMl0vRReq2YYJLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjcyMzU2MjVaFw0yNzAyMjcwMDAxMjVaMDMxMTAvBgNV
BAMTKEIzNkY3MzQ0MEE2M0MxRkI0MzhBODg3MkNCQjMxNjdGQzFDNzc4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKFEujpZMB9MFUuznVUu2VbwL
B4OvGU0Y/G2c80MLDTOdjqSD94dzPZPR0PkKg26T+CSIHHewk+4wxV8PbtFNCTdY
nlYfmO/BHN3DIrVlP28nOjZsigdKR9As2K+QiaAzlgMHhweGIidfPH1BlzhfDENX
EORfvzDXejXwhnA7cMcq0wYTOJs9z6uaGi2PNrZTm3W3eDwtmFMOn4Bu16RbmwPn
XjdGXwKSrluzXLS/Schgqs77VqqqjRJ1YVlKvtwaYTSjcL4S+SKSBisDxVLMvcHX
0m60KeLqW1eVdvk2sUtVaEO7AX+gxaEAabg7Blty0YDTugdPqhGqtURMkvjZAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUs29zRApjwftDiohyy7MWf8HHeO4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTMxOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB1BggrBgEFBQcBBwEB/wRmMGQwYgQCAAEwXAMEAFIoJwME
AFIoMAMEAFIoMwMEAFIpAwMEALJTEAMEALJTGgMEALJTJAMEALJTLgMEALJTOAME
ALJTQgMEALJTSwMEALJTUwMEALJTpTAMAwQAslOnAwQBslOoMA0GCSqGSIb3DQEB
CwUAA4IBAQALFPuOJmI9qfov4cwJKb8+dSVeq20gQvcuKmsGDE1t7vHNJ5mUdFhe
8XLkDwi1Tzmm7ktP3S0SQW+uGDOna/8NhR6kKqqeqi2lM69YlErcWgKxoCfXzeBB
Oz6DTvcxlBr9QdCR+YVsQgSKo0tSvbpmX4pnj092SJWm8lVIZme4FqKkkLzenqHe
Vu9IAHHU9UHMpl6FXvMhDzAox9coJWnMzTLybbnnrXKf0pF9N+SW7x0xuGRPvA5H
8TO26H+cmJG7vmD3FCe47xQYmvEpNV9THmsmNf9gDPqEt8tXWaV0wTtY0+TyLc5c
YVFqBYDJU8loNm4hX91DQLIDPo/lPtez
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:06 2026 by rpki-client