Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: SlGrDsT5D17kCfGVWtAkpUmn4i8wC3vVdhQkOfmEEOg=
Subject key identifier: 8A:0A:BB:13:B7:0D:0E:0F:4F:55:7F:96:4B:BD:AF:A8:79:9A:B1:BB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 113EDCECF1BFC5439E318A64C6D454139D67BCED
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
Signing time: Fri 26 Sep 2025 03:49:48 +0000
ROA not before: Fri 26 Sep 2025 03:44:48 +0000
ROA not after: Fri 25 Sep 2026 03:49:48 +0000
asID: 14618
IP address blocks: 143.20.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3e:dc:ec:f1:bf:c5:43:9e:31:8a:64:c6:d4:54:13:9d:67:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 26 03:44:48 2025 GMT
Not After : Sep 25 03:49:48 2026 GMT
Subject: CN=8A0ABB13B70D0E0F4F557F964BBDAFA8799AB1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:97:fa:5b:e8:0c:83:b0:2e:f0:7b:90:d0:
2e:2c:19:46:c7:8f:62:b8:44:ae:f7:a5:c6:f4:cd:
3b:e1:d8:b3:62:7c:53:93:44:45:a8:17:c0:92:8a:
87:7c:28:fb:b6:aa:bc:31:35:9b:25:af:5e:f7:5a:
0f:e7:0d:35:7c:a7:09:e3:00:6c:5c:0d:bf:4c:92:
8c:52:84:94:11:c8:86:a8:2b:8e:fc:25:3b:2a:2c:
e6:65:66:52:c9:ad:74:51:c5:d4:3c:f4:00:b3:69:
ab:c1:d8:6d:30:bd:e7:d3:50:62:ea:c2:d5:9b:f9:
78:38:0f:e3:22:8c:da:24:cb:6e:12:ab:21:76:73:
22:2a:49:3f:9b:d2:7d:95:2e:c4:55:ca:25:b8:78:
fb:ff:26:b5:34:a2:2c:d2:18:46:ca:19:77:20:b7:
17:24:e6:8f:60:9f:b8:a3:dc:78:cd:a0:34:bd:db:
91:c6:36:f9:6b:42:c1:a3:85:6d:0e:25:ec:02:c5:
c9:c7:6c:26:97:8d:df:cd:ef:69:5f:5e:d9:8f:67:
cb:cb:03:36:6f:22:5c:2f:f2:ca:31:7a:02:6b:4f:
6a:4f:37:bc:60:c7:d3:de:2b:a4:4f:d6:34:8e:06:
f0:4c:5e:ed:01:a0:3c:d9:5f:f2:d7:f8:2f:97:b9:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:BB:13:B7:0D:0E:0F:4F:55:7F:96:4B:BD:AF:A8:79:9A:B1:BB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:92:52:57:98:5e:e8:d8:60:e8:3b:3b:a3:41:f0:87:70:be:
ee:da:20:53:b1:54:45:7f:b6:47:92:16:bb:58:37:d5:92:33:
69:7f:a2:a2:b7:27:c0:44:b9:31:42:72:fa:bf:02:09:8e:c6:
d4:c7:30:eb:4e:71:25:93:48:12:f8:13:45:62:1c:66:58:d9:
43:a2:ff:f5:12:f4:5a:84:8f:7a:7d:2b:13:cd:2f:e9:76:8e:
8d:75:04:60:95:db:0c:e4:1c:b1:ca:6a:0d:ef:82:fa:4c:4f:
bc:96:e7:09:88:76:a6:11:e9:db:e5:3e:2a:bf:c3:cd:ac:2d:
a8:1d:e6:c3:98:b9:dc:5d:96:0a:f9:93:2b:bc:62:4b:0f:01:
80:ce:c5:83:4e:12:dc:b1:97:2e:3d:9c:ef:cf:ef:b9:70:1a:
73:f0:6a:07:d7:1a:24:91:a6:92:db:e9:44:d4:b5:ea:93:26:
88:7d:13:04:0b:41:76:9f:94:6f:7e:73:b3:21:87:59:ee:0c:
85:f1:b8:34:fb:5f:8e:20:d1:31:f3:7e:42:fd:5f:fb:ab:85:
2d:6a:e8:6f:77:25:2e:0c:c7:b8:3f:ec:67:2f:0d:7a:0b:6c:
a3:32:dd:fb:b2:f3:1f:a3:47:8f:95:26:c1:b3:e3:bd:3c:de:
6e:01:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:03 2025 by rpki-client