Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: syDyQGMv3SfiWaanUwBzs23rezJ8Nhbu19r6Pgk8/Mk=
Subject key identifier: CA:F9:E1:0C:3C:1B:B0:FB:90:BF:C0:E7:F2:E4:23:E3:35:3F:EC:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4B17936AF2B8A8D047EF8BB95F18C67045BB712D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14618.roa
Signing time: Wed 30 Sep 2026 20:28:32 +0000
ROA not before: Wed 30 Sep 2026 20:23:32 +0000
ROA not after: Wed 29 Sep 2027 20:28:32 +0000
asID: 14618
IP address blocks: 82.21.0.0/24 maxlen: 24
82.24.76.0/24 maxlen: 24
82.24.203.0/24 maxlen: 24
82.26.154.0/24 maxlen: 24
82.26.201.0/24 maxlen: 24
82.29.0.0/24 maxlen: 24
82.29.2.0/24 maxlen: 24
82.29.3.0/24 maxlen: 24
82.29.4.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.29.102.0/24 maxlen: 24
82.29.104.0/24 maxlen: 24
82.29.105.0/24 maxlen: 24
82.41.98.0/24 maxlen: 24
82.41.168.0/24 maxlen: 24
82.41.200.0/24 maxlen: 24
82.47.64.0/19 maxlen: 24
84.75.96.0/19 maxlen: 24
84.75.129.0/24 maxlen: 24
84.75.177.0/24 maxlen: 24
2a13:9500:126::/48 maxlen: 48
2a13:9500:127::/48 maxlen: 48
2a13:9500:13a::/48 maxlen: 48
2a13:9500:157::/48 maxlen: 48
2a13:9500:1d7::/48 maxlen: 48
2a13:9500:1dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:17:93:6a:f2:b8:a8:d0:47:ef:8b:b9:5f:18:c6:70:45:bb:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 30 20:23:32 2026 GMT
Not After : Sep 29 20:28:32 2027 GMT
Subject: CN=CAF9E10C3C1BB0FB90BFC0E7F2E423E3353FEC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:d5:15:71:87:17:95:41:55:58:81:48:30:
fe:82:ee:57:05:32:b4:0a:53:64:9b:a5:9d:23:29:
17:fe:74:87:25:88:d1:92:69:0a:2d:b7:ea:18:59:
ce:52:a9:9b:52:1f:31:27:c6:a7:f3:d5:b2:88:aa:
8a:b1:02:26:67:63:74:6d:3d:3a:27:19:49:3e:d7:
84:4a:7e:a1:f8:5f:75:22:d1:84:2a:c3:d0:cb:07:
e9:df:82:22:b6:de:55:de:b0:2e:05:bd:90:ca:01:
94:01:6e:63:77:fe:50:b5:dd:4b:86:ce:e3:ab:19:
1b:38:b5:89:2e:a1:30:ce:04:93:ae:ca:10:cd:27:
7d:c5:69:49:05:60:9f:aa:07:83:59:82:fb:62:9b:
17:25:c1:d6:2d:11:c8:58:0a:24:e3:1d:ff:ae:12:
b1:a3:17:29:33:2b:af:0f:16:25:89:6c:7a:be:66:
a4:2e:a3:82:62:e9:35:71:42:29:ae:e5:76:88:2a:
16:a5:54:c7:7b:82:f7:ac:41:90:c4:a8:ee:55:d9:
fa:ab:75:a7:04:61:c3:c8:0f:df:64:71:09:ed:2e:
7d:dc:48:6b:77:1f:f1:11:1f:d9:7d:1d:b2:9d:ad:
08:30:42:bb:2a:c5:fb:f4:45:9d:58:1f:f9:40:52:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:E1:0C:3C:1B:B0:FB:90:BF:C0:E7:F2:E4:23:E3:35:3F:EC:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.0.0/24
82.24.76.0/24
82.24.203.0/24
82.26.154.0/24
82.26.201.0/24
82.29.0.0/24
82.29.2.0-82.29.4.255
82.29.44.0/24
82.29.102.0/24
82.29.104.0/23
82.41.98.0/24
82.41.168.0/24
82.41.200.0/24
82.47.64.0/19
84.75.96.0/19
84.75.129.0/24
84.75.177.0/24
IPv6:
2a13:9500:126::/47
2a13:9500:13a::/48
2a13:9500:157::/48
2a13:9500:1d7::/48
2a13:9500:1dc::/48
Signature Algorithm: sha256WithRSAEncryption
9c:5f:d5:9b:aa:0c:02:9e:e7:bb:8c:93:f2:3f:c4:5c:f3:e8:
26:df:dd:3a:65:c2:b9:60:db:4d:81:57:0a:9c:5d:23:cb:a4:
0e:a2:bf:61:94:8c:dd:be:2a:e9:d5:3a:83:c5:5f:97:e2:45:
b0:77:31:4e:33:32:1d:10:aa:21:38:39:29:a0:5f:4a:9d:7e:
3e:be:2d:e0:1d:75:1b:26:83:91:5a:b4:7a:90:83:e6:d2:88:
b0:35:63:19:93:8a:3f:c8:82:ac:62:12:e9:97:28:93:ec:a0:
c6:ad:42:4c:61:c1:72:53:e0:56:38:8a:16:8d:6e:be:0a:d9:
af:2c:4c:ac:e7:e8:68:24:a4:c3:92:71:fc:75:42:55:b1:8a:
58:c3:8d:e6:bb:87:60:8c:28:87:ab:4f:e0:44:82:d1:ee:7b:
22:58:a1:5c:47:57:1f:eb:35:e0:66:99:89:d5:1e:86:fc:6c:
92:9c:42:e3:fa:10:4f:c5:ed:3e:1f:d7:10:19:31:a7:0b:27:
5a:19:f7:31:18:79:29:e7:83:ad:38:86:e5:ee:f7:08:59:46:
99:ec:2d:7c:67:08:36:9e:ae:df:a4:e3:de:57:28:e2:fd:5f:
c6:b1:36:7a:a2:05:a3:0c:06:be:17:40:8a:ab:58:96:cd:d4:
d6:9a:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:10 2026 by rpki-client