Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: BaTs5O+JN/hcXmUQyNO8nmKzyHkrHj+l4LxT6o1pyHM=
Subject key identifier: FB:D4:BD:14:2A:B7:8A:64:F4:78:E0:AC:64:74:B0:36:4D:4B:02:50
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 17FFA7B1CC3F58B2B8C061DCB6D5FF472F780498
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
Signing time: Sat 04 Jul 2026 18:48:06 +0000
ROA not before: Sat 04 Jul 2026 18:43:06 +0000
ROA not after: Sat 03 Jul 2027 18:48:06 +0000
asID: 14618
IP address blocks: 96.62.208.0/22 maxlen: 22
140.150.156.0/24 maxlen: 24
140.233.128.0/19 maxlen: 24
143.14.81.0/24 maxlen: 24
143.14.227.0/24 maxlen: 24
145.223.64.0/24 maxlen: 24
145.223.65.0/24 maxlen: 24
146.103.60.0/24 maxlen: 24
146.103.62.0/23 maxlen: 24
147.79.25.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.186.0/24 maxlen: 24
155.117.0.0/24 maxlen: 24
155.117.60.0/24 maxlen: 24
155.117.185.0/24 maxlen: 24
155.117.187.0/24 maxlen: 24
155.117.203.0/24 maxlen: 24
162.141.159.0/24 maxlen: 24
162.141.180.0/24 maxlen: 24
168.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ff:a7:b1:cc:3f:58:b2:b8:c0:61:dc:b6:d5:ff:47:2f:78:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 18:43:06 2026 GMT
Not After : Jul 3 18:48:06 2027 GMT
Subject: CN=FBD4BD142AB78A64F478E0AC6474B0364D4B0250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:a1:dc:33:fe:1b:2c:ea:ea:38:d3:d0:ad:
8c:3a:f3:f1:4c:76:9e:ee:91:f1:04:d9:a4:43:75:
4b:28:1b:bd:01:8c:55:77:f2:3f:2c:51:94:a3:b7:
d1:75:e5:45:97:9f:99:3e:52:1a:15:97:cc:8b:67:
9b:4b:0e:79:ac:e3:b1:f9:fe:bc:81:b3:2d:14:3b:
d4:a7:0d:a2:d5:ed:7c:e5:8b:19:39:44:e3:0e:63:
2e:d5:29:c2:2a:4a:79:62:ae:17:87:0e:48:02:b0:
09:dc:29:3c:61:24:fc:62:83:a9:90:80:4d:af:57:
09:2f:24:c1:51:0b:b4:1b:d9:0f:27:9b:10:07:7f:
a7:f2:d9:05:f0:de:da:90:18:7c:25:a1:c0:a3:51:
0a:5d:a7:d5:4c:b9:30:cd:24:f6:64:84:ea:14:3c:
d8:c1:7d:5a:fd:26:b4:1e:11:ca:ca:82:9a:49:17:
fd:89:15:5c:ea:fa:a9:92:64:8f:08:70:0a:66:2f:
b2:52:26:89:fb:3a:89:a9:f5:c0:ce:c4:fe:9a:f2:
35:cf:5b:79:3c:6f:d3:53:2d:d3:c5:01:b3:42:dc:
10:f6:4a:f3:71:05:c8:05:26:f7:85:a4:08:2d:36:
0d:30:5b:ee:7e:6b:e6:d3:9f:a9:20:a1:3a:62:71:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D4:BD:14:2A:B7:8A:64:F4:78:E0:AC:64:74:B0:36:4D:4B:02:50
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.208.0/22
140.150.156.0/24
140.233.128.0/19
143.14.81.0/24
143.14.227.0/24
145.223.64.0/23
146.103.60.0/24
146.103.62.0/23
147.79.25.0/24
148.135.180.0/24
148.135.186.0/24
155.117.0.0/24
155.117.60.0/24
155.117.185.0/24
155.117.187.0/24
155.117.203.0/24
162.141.159.0/24
162.141.180.0/24
168.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ed:38:a1:71:5a:04:c8:de:85:f8:1c:c7:4c:31:c1:a1:a1:
7b:a7:f6:30:c6:9c:30:1e:34:ea:bf:69:7d:f9:68:bb:ab:f2:
23:81:40:00:70:ed:e6:f2:de:f1:68:b8:51:71:65:d1:db:95:
5d:60:4b:77:95:95:4e:7c:32:ac:0f:84:95:6d:82:49:00:bd:
52:c9:e2:23:db:b8:fd:9e:6a:21:6a:1b:a8:4e:30:bc:b8:83:
30:c2:a4:f2:2f:0f:47:de:90:aa:bc:43:8b:f9:d6:a5:46:ff:
92:14:4a:83:1f:82:01:d4:6a:f2:65:2d:16:f7:9a:04:7d:91:
fa:73:ea:ae:24:e6:d4:d2:5f:1c:f4:05:22:67:a5:93:7a:6d:
57:4d:96:6a:97:94:4d:77:26:2b:d6:aa:7d:dd:d5:fc:dd:8b:
ae:82:83:50:79:20:37:93:a0:6a:f4:e5:49:9f:3b:4a:20:db:
f8:83:52:38:0e:41:d8:7f:20:60:e2:66:52:ce:36:91:f3:3e:
5b:bf:ec:17:82:a7:f6:6a:65:35:68:71:3b:fa:9c:75:e7:1f:
69:9b:27:1f:b4:73:2d:c3:74:6e:3b:a0:08:3c:ca:c1:7d:c9:
59:5a:4e:e8:52:76:78:65:49:fc:fe:e6:1a:db:29:bb:a8:39:
6f:b1:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:57 2026 by rpki-client