Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS18046.roa
File: AS18046.roa (raw, json)
Hash identifier: VpmANte7Bi37Q5riEMTy8brveOi7EUtQsEx5DJuASGM=
Subject key identifier: 97:A3:59:2C:3F:32:83:D5:BE:46:F4:E4:5F:1F:EF:BC:CB:D8:57:79
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 487D0E728DDAF86FB278A20B7B5E29201DB49997
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS18046.roa
Signing time: Thu 02 Apr 2026 07:03:32 +0000
ROA not before: Thu 02 Apr 2026 06:58:32 +0000
ROA not after: Thu 01 Apr 2027 07:03:32 +0000
asID: 18046
IP address blocks: 78.105.0.0/18 maxlen: 24
78.105.64.0/19 maxlen: 24
87.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7d:0e:72:8d:da:f8:6f:b2:78:a2:0b:7b:5e:29:20:1d:b4:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:32 2026 GMT
Not After : Apr 1 07:03:32 2027 GMT
Subject: CN=97A3592C3F3283D5BE46F4E45F1FEFBCCBD85779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:90:da:97:a7:01:29:65:ec:9c:a1:e1:6e:
a8:77:74:41:49:9e:bc:ac:ae:76:43:b5:0b:d9:b4:
96:b9:65:c2:44:52:d7:36:a6:46:42:f0:cb:77:b3:
db:d4:45:45:55:59:6a:64:31:76:05:13:b0:40:67:
fc:3f:4c:f4:03:fb:66:ac:12:75:3d:2d:fa:2e:55:
a6:1f:45:5a:35:0a:dd:3d:6c:80:8a:ca:63:dd:8a:
cb:4e:8b:1e:b2:38:34:32:d2:4f:b1:7c:0a:29:b0:
ee:d8:1d:56:54:50:24:f7:7b:50:9c:66:e9:fe:bd:
33:16:b8:02:65:b1:0e:05:c9:b5:1b:7f:ba:db:74:
66:24:14:5d:99:49:da:3d:67:d6:f7:57:0a:0c:2b:
58:d1:a6:30:6f:02:60:81:1a:e8:b6:f2:db:f7:6e:
80:d9:5b:fd:28:69:af:1a:0c:19:7d:6b:82:fa:55:
bf:77:04:b8:1c:25:a1:36:33:18:ea:e7:bc:46:a4:
52:33:e8:10:be:f9:d0:e4:1f:bf:78:8f:d7:5f:99:
83:cc:fd:47:13:89:2f:b9:9f:58:48:b6:2e:04:fd:
dd:4d:41:7a:75:ed:17:e3:a9:b8:d6:1e:c5:11:d1:
4f:e7:aa:21:31:82:ac:5c:4a:db:0e:87:30:4d:c0:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:59:2C:3F:32:83:D5:BE:46:F4:E4:5F:1F:EF:BC:CB:D8:57:79
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS18046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.0.0-78.105.95.255
87.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:97:bf:81:f0:d3:95:5a:bb:6e:17:eb:2d:8c:55:da:08:ab:
fd:46:c0:91:23:a2:d9:f6:b8:1b:bb:cf:db:a4:7f:94:b1:39:
95:bb:6a:0b:37:59:85:fe:f2:c2:b7:99:2b:45:ba:4c:f5:e8:
c6:5d:8b:12:82:39:8a:f7:fb:c1:fe:36:af:5b:ce:7d:af:4b:
af:39:78:c6:ef:9c:bc:1d:d3:45:90:af:04:8c:8c:27:c9:d1:
d0:16:10:16:95:75:e9:cc:1b:56:e9:c9:6e:51:6e:2e:f4:47:
c8:a9:c1:68:d7:16:50:95:62:ee:a5:1b:62:1c:d2:ce:4d:99:
d9:91:be:72:89:a5:18:62:6e:64:f7:bd:ca:a2:81:56:a3:5d:
de:b5:46:ff:6f:f4:17:89:5e:7b:28:5e:c9:af:07:8c:53:34:
aa:29:0f:a4:ea:61:7e:95:8b:54:42:80:80:4c:83:84:54:a8:
1c:78:df:3f:30:66:ac:58:f9:7b:d7:1b:2e:84:c2:5c:9d:b6:
fc:84:d4:76:12:82:97:2f:37:7a:b3:dc:b8:ad:50:9d:19:39:
5d:8a:29:bb:35:58:ac:5a:e2:50:fd:ce:fe:4f:f9:18:b9:4f:
c7:09:41:15:18:b8:b0:31:de:d6:24:79:f7:f2:8f:fd:3a:7d:
ea:8a:b4:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:37:23 2026 by rpki-client