Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: r0h+ddbuj+TWalvKOG/lKKQ0kfxwi8u/GA2yHq0VExQ=
Subject key identifier: 8F:34:23:A5:12:4A:F4:31:41:B4:E7:94:62:B8:D4:37:47:50:41:5E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 138BDF9A6BBC91370B60FC0AAC1ECFC9D7EEC26A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
Signing time: Sun 29 Mar 2026 13:37:26 +0000
ROA not before: Sun 29 Mar 2026 13:32:26 +0000
ROA not after: Sun 28 Mar 2027 13:37:26 +0000
asID: 14618
IP address blocks: 2a14:7580:ff9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8b:df:9a:6b:bc:91:37:0b:60:fc:0a:ac:1e:cf:c9:d7:ee:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 29 13:32:26 2026 GMT
Not After : Mar 28 13:37:26 2027 GMT
Subject: CN=8F3423A5124AF43141B4E79462B8D4374750415E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:d4:cf:7b:4e:c1:f4:32:67:34:dd:ef:1a:
e4:2f:7f:88:a0:11:cf:9a:a9:15:3b:9e:d2:b4:24:
d6:04:ff:87:1a:18:b1:4b:7d:d7:4f:73:7e:a6:49:
a7:69:7c:25:e7:08:b7:a1:57:f2:84:8f:34:1f:aa:
25:4e:9c:03:7b:d1:87:a7:da:31:01:c8:10:18:b8:
ae:9f:1e:82:da:6a:ba:b8:86:be:90:4f:21:94:45:
ea:ca:e5:78:93:23:5d:70:ab:a7:a4:a6:09:ea:3e:
1f:72:ec:9a:7d:4f:eb:18:14:4e:1b:dc:d8:79:4b:
27:82:77:a8:ba:7f:39:06:c9:3e:db:9c:b9:a1:64:
67:6b:57:b4:bb:aa:d1:a4:24:77:43:45:9a:89:31:
f2:5e:81:3d:2b:f6:89:22:10:3a:14:d3:79:c2:4f:
e1:53:a3:a0:d9:83:2f:10:45:b2:fb:0a:2a:0b:62:
54:95:cf:e7:65:94:03:e8:dc:19:8a:af:5c:65:46:
51:16:9a:bf:d3:a7:36:02:41:14:b4:f3:bf:a5:2d:
a5:25:bd:5d:a9:dc:0f:dc:e2:d5:65:99:e7:e2:52:
bf:e0:fe:fa:ed:39:3c:02:ad:3a:0a:41:c8:e3:46:
7c:30:68:6b:fa:18:f1:8d:3f:85:f9:04:76:12:b8:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:34:23:A5:12:4A:F4:31:41:B4:E7:94:62:B8:D4:37:47:50:41:5E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9f::/48
Signature Algorithm: sha256WithRSAEncryption
3b:87:a9:57:f8:3c:72:c4:b1:fd:cd:37:ab:bb:f6:fb:1d:66:
43:9f:cc:4f:b2:7b:84:5c:c3:71:d4:ff:32:59:83:6e:69:ce:
38:6f:87:7c:02:4d:97:98:e1:41:54:9a:c9:cb:09:18:01:63:
9a:ad:ea:48:9e:47:7d:bd:ab:e8:c5:2b:2e:29:e0:1c:c7:0a:
10:8e:e5:cf:d4:3a:87:6e:46:b5:12:5e:12:fc:58:0c:73:04:
a9:cc:50:aa:cc:0a:b6:e6:b1:de:06:13:82:c7:ff:f8:c2:ba:
b3:06:80:ea:0e:3c:2a:32:0b:04:0f:d0:05:fc:42:94:da:be:
cc:24:96:26:7e:ac:f4:f1:8a:20:6e:e5:c7:a6:f1:44:6d:5c:
62:b8:ec:56:46:63:ea:2f:ab:60:21:a9:49:3d:77:24:18:3e:
29:4e:fc:ed:0c:e7:cc:31:b7:28:22:22:fd:ea:60:06:80:d2:
3a:ae:3a:21:5e:50:1e:55:10:c6:12:08:eb:f5:36:ff:a6:78:
d9:78:3a:1a:eb:e1:3c:7b:82:67:4a:16:7a:f7:75:27:02:51:
7c:ba:c3:8e:ba:8b:b4:25:9e:42:93:d5:b4:c9:e7:ff:43:6b:
5c:5c:a9:98:43:e2:2c:7e:9e:a0:5d:c3:3a:f0:9d:4b:bd:4b:
7e:4e:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:11 2026 by rpki-client