Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: A0BAoMqlp3jiDGvBxc+wQj+C2x3tr1yMduZ+fWTrckg=
Subject key identifier: 96:FF:4A:1C:D4:2F:DD:4C:3C:D0:20:61:2F:DC:4D:BC:30:21:07:8D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 240E97C22765737912B1580BFCF39247C5303099
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Mon 30 Jun 2025 00:00:24 +0000
ROA not before: Sun 29 Jun 2025 23:55:24 +0000
ROA not after: Mon 29 Jun 2026 00:00:24 +0000
asID: 14618
IP address blocks: 181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.135.159.0/24 maxlen: 24
185.137.12.0/24 maxlen: 24
185.137.13.0/24 maxlen: 24
185.141.166.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0e:97:c2:27:65:73:79:12:b1:58:0b:fc:f3:92:47:c5:30:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 29 23:55:24 2025 GMT
Not After : Jun 29 00:00:24 2026 GMT
Subject: CN=96FF4A1CD42FDD4C3CD020612FDC4DBC3021078D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:d8:74:a3:ad:f7:45:5e:fe:80:e5:d7:f1:
0f:45:51:5a:d5:e8:48:b6:fc:fa:98:90:1f:ce:c0:
e6:de:d3:30:5d:b4:2f:32:1d:95:67:d7:cf:59:4c:
3a:dd:39:20:2a:3b:93:20:fb:bb:1e:49:94:ac:86:
77:c0:29:91:b6:81:7c:9e:2a:36:e8:de:0f:65:02:
9e:72:20:e7:cd:bf:b1:ea:94:5c:0c:99:0b:03:7c:
c9:10:35:25:1c:b9:95:59:54:e8:42:67:c5:2b:86:
6f:b0:3a:82:ac:3c:d3:07:1a:51:14:30:57:54:db:
dc:08:5b:af:8d:e1:e2:f3:1d:49:53:8d:ca:78:4d:
8a:46:af:9d:27:73:00:9d:3c:bb:0c:75:9c:02:8e:
97:ab:5d:8b:49:29:7d:f3:7a:98:f0:a1:2b:bc:68:
a2:d4:c8:96:c4:e2:4d:a2:34:5d:03:de:7a:33:e9:
0f:dd:9e:26:3c:3b:f5:71:09:71:8a:54:ce:b1:fc:
e2:f2:22:4a:83:5e:a5:fc:da:62:98:a2:0c:bd:b0:
e6:43:79:e6:20:db:9b:2d:5b:9f:6a:0a:b1:7c:72:
b3:67:93:9d:ac:22:6b:92:f3:f9:78:53:4e:75:e4:
25:ba:8d:c1:02:ab:ec:94:6e:8a:1a:bb:ef:d5:0d:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:4A:1C:D4:2F:DD:4C:3C:D0:20:61:2F:DC:4D:BC:30:21:07:8D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.110.0/24
181.215.206.0/23
185.135.159.0/24
185.137.12.0/23
185.141.166.0/24
191.96.204.0/24
191.101.111.0/24
Signature Algorithm: sha256WithRSAEncryption
50:96:ce:a1:5c:13:52:1c:4b:11:5c:21:e6:e4:e7:93:81:97:
74:00:16:45:b4:8e:23:9f:d7:e2:16:76:fe:f8:4e:3b:3f:1e:
52:5e:6d:a6:f3:93:93:a8:c4:06:9b:90:38:9e:08:e0:78:d3:
d6:15:cd:e9:45:95:e6:bb:30:35:84:6a:75:eb:20:d4:9f:b0:
d7:4f:3f:14:c8:39:50:ee:3e:58:69:5d:3f:93:5e:29:7d:99:
0f:3c:0c:c0:40:0a:b9:85:52:00:f7:80:bb:a9:1c:76:ab:fc:
6c:d5:2b:28:50:c2:b7:19:01:05:ce:da:79:a8:9e:3c:a7:e6:
54:e4:9b:13:59:0e:59:d2:af:19:c9:5e:68:5a:1a:45:4b:91:
bb:fa:78:34:ff:37:c3:41:5e:5e:3b:ba:f3:08:ee:fe:e0:ee:
83:c6:23:e3:ec:4c:7c:27:5a:03:d8:04:bc:fa:45:37:76:a2:
22:f3:a0:c2:7b:9d:b0:da:59:78:ec:22:4f:35:18:d8:2b:61:
22:22:5c:02:63:e6:91:bf:85:38:5b:59:16:25:5b:50:24:1c:
ad:3e:58:4f:3f:75:e9:ad:17:3c:ed:35:50:ed:f2:99:78:f8:
28:e0:c3:6b:98:17:12:89:f7:1a:9a:ef:72:8d:0a:38:c2:5a:
3e:00:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:54 2025 by rpki-client