Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
File: AS18811.roa (raw, json)
Hash identifier: KwCOfBhCrX5z2Y+Mv38wbN+jASxzV6Z41/S3ed7zDU8=
Subject key identifier: AE:A4:A2:66:2D:80:17:B5:AA:90:2A:67:C3:DF:1B:7A:55:77:4B:AC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 06A75609533C3487585E13E0C01FF56EB4DB34B2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
Signing time: Tue 29 Jul 2025 00:01:10 +0000
ROA not before: Mon 28 Jul 2025 23:56:10 +0000
ROA not after: Tue 28 Jul 2026 00:01:10 +0000
asID: 18811
IP address blocks: 178.92.8.0/22 maxlen: 24
178.92.16.0/22 maxlen: 24
178.92.24.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.92.64.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
178.95.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a7:56:09:53:3c:34:87:58:5e:13:e0:c0:1f:f5:6e:b4:db:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 28 23:56:10 2025 GMT
Not After : Jul 28 00:01:10 2026 GMT
Subject: CN=AEA4A2662D8017B5AA902A67C3DF1B7A55774BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:2c:c7:3c:82:40:bd:31:f7:b2:d6:2d:78:
66:c2:0f:e0:87:a4:f0:53:99:6d:dd:d2:f2:ff:26:
b6:48:81:45:b5:eb:85:e8:41:3d:5d:42:45:8a:94:
59:3b:0c:a9:f0:fe:c8:8b:b2:0a:08:60:40:c0:04:
87:5e:50:ff:29:00:8b:94:77:3f:61:4a:01:fe:67:
19:a4:a8:c6:48:53:c7:eb:4b:f3:01:cd:f8:8f:1a:
fc:45:30:4b:f9:21:81:05:2f:a1:9d:0b:34:cb:dc:
c7:21:48:bd:27:3d:6d:82:10:5f:a1:44:dd:cc:ef:
b3:36:cf:59:b7:07:ed:ea:83:23:de:55:0d:21:ba:
36:74:8e:bc:bd:f7:26:12:18:9b:18:3e:f5:51:5c:
a1:c3:07:9b:19:ed:4a:b5:5f:8c:c3:e9:4f:30:b9:
9a:53:09:2a:3e:bb:b2:78:00:ce:f5:4d:d8:86:b5:
4d:30:64:b7:52:8b:ff:d2:14:a9:27:7f:0a:d4:4c:
50:95:e8:9a:ca:7a:2c:97:b8:8a:29:f8:24:da:1e:
60:aa:6b:00:6a:bb:f0:a8:01:f6:71:08:0b:96:8b:
61:5c:86:60:1a:ec:ed:99:df:36:de:50:c9:bc:9e:
31:e9:53:c7:b1:3e:fa:c2:69:1c:bd:2f:f3:3a:e1:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:A2:66:2D:80:17:B5:AA:90:2A:67:C3:DF:1B:7A:55:77:4B:AC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS18811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.8.0/22
178.92.16.0/22
178.92.24.0/22
178.92.36.0/22
178.92.64.0/22
178.93.0.0/22
178.95.0.0/22
178.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ae:09:a0:3c:5e:ba:39:18:56:08:5d:b5:d1:24:c5:c4:37:
de:85:61:91:6b:90:5a:28:47:e7:8a:52:1e:90:ff:f8:59:6d:
47:f8:37:bd:a7:7c:05:8c:9c:c2:fb:bc:78:17:78:44:ae:7d:
e0:38:32:b3:6d:5a:6f:8b:61:61:a1:38:24:4f:11:c6:ac:06:
03:4a:b2:b9:0d:b8:ea:f8:23:fa:36:50:9f:50:63:c3:9e:f9:
fb:e8:df:a9:6d:2b:9b:d9:02:26:b6:8d:eb:7e:2d:cd:44:6b:
88:7e:32:6b:d1:c7:9c:bc:3a:f9:c2:3b:45:de:44:25:d7:6a:
eb:83:15:f4:de:59:83:ba:63:66:bc:72:23:69:f8:32:71:10:
46:ce:fb:80:eb:e3:27:a4:c8:81:a2:2b:1b:ab:fe:17:79:15:
e7:4b:1a:fd:75:da:b9:52:10:8d:4c:12:b5:06:49:f2:ae:b7:
15:12:9c:db:a7:0e:5f:bd:72:07:95:11:99:9c:a7:f8:f0:f6:
78:2c:d6:19:b1:b4:60:e2:8c:8d:24:99:a1:0d:15:cc:66:31:
04:3e:0d:a9:6a:cc:3a:c0:1f:0f:62:b9:c6:6e:45:6c:f7:32:
a7:e3:ac:6b:e1:bd:03:09:fa:4a:8e:f5:f5:fd:86:1c:88:a2:
33:14:e9:4f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUBqdWCVM8NIdYXhPgwB/1brTbNLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MjgyMzU2MTBaFw0yNjA3MjgwMDAxMTBaMDMxMTAvBgNV
BAMTKEFFQTRBMjY2MkQ4MDE3QjVBQTkwMkE2N0MzREYxQjdBNTU3NzRCQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx0izHPIJAvTH3stYteGbCD+CH
pPBTmW3d0vL/JrZIgUW164XoQT1dQkWKlFk7DKnw/siLsgoIYEDABIdeUP8pAIuU
dz9hSgH+ZxmkqMZIU8frS/MBzfiPGvxFMEv5IYEFL6GdCzTL3MchSL0nPW2CEF+h
RN3M77M2z1m3B+3qgyPeVQ0hujZ0jry99yYSGJsYPvVRXKHDB5sZ7Uq1X4zD6U8w
uZpTCSo+u7J4AM71TdiGtU0wZLdSi//SFKknfwrUTFCV6JrKeiyXuIop+CTaHmCq
awBqu/CoAfZxCAuWi2FchmAa7O2Z3zbeUMm8njHpU8exPvrCaRy9L/M64TZHAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUrqSiZi2AF7WqkCpnw98belV3S6wwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTg4MTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAKyXAgD
BAKyXBADBAKyXBgDBAKyXCQDBAKyXEADBAKyXQADBAKyXwADBAKyXxQwDQYJKoZI
hvcNAQELBQADggEBADyuCaA8Xro5GFYIXbXRJMXEN96FYZFrkFooR+eKUh6Q//hZ
bUf4N72nfAWMnML7vHgXeESufeA4MrNtWm+LYWGhOCRPEcasBgNKsrkNuOr4I/o2
UJ9QY8Oe+fvo36ltK5vZAia2jet+Lc1Ea4h+MmvRx5y8OvnCO0XeRCXXauuDFfTe
WYO6Y2a8ciNp+DJxEEbO+4Dr4yekyIGiKxur/hd5FedLGv112rlSEI1MErUGSfKu
txUSnNunDl+9cgeVEZmcp/jw9ngs1hmxtGDijI0kmaENFcxmMQQ+DalqzDrAHw9i
ucZuRWz3MqfjrGvhvQMJ+kqO9fX9hhyIojMU6U8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:25 2025 by rpki-client