Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: v3X7dre/tzpoYUY7289Ghr8HadwvLAhsI8n99W5FbjE=
Subject key identifier: EA:8B:AC:C0:7C:73:81:1E:81:EB:75:01:7C:E2:DF:5C:57:47:F2:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 592F56A1737D87E098B6B48B28499E639AB66227
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
Signing time: Tue 29 Sep 2026 13:37:19 +0000
ROA not before: Tue 29 Sep 2026 13:32:19 +0000
ROA not after: Tue 28 Sep 2027 13:37:19 +0000
asID: 14618
IP address blocks: 96.62.208.0/22 maxlen: 22
140.150.156.0/24 maxlen: 24
140.233.128.0/19 maxlen: 24
143.14.227.0/24 maxlen: 24
145.223.64.0/24 maxlen: 24
145.223.65.0/24 maxlen: 24
146.103.60.0/24 maxlen: 24
146.103.62.0/23 maxlen: 24
147.79.25.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.186.0/24 maxlen: 24
155.117.0.0/24 maxlen: 24
155.117.60.0/24 maxlen: 24
155.117.185.0/24 maxlen: 24
155.117.187.0/24 maxlen: 24
155.117.203.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.159.0/24 maxlen: 24
162.141.180.0/24 maxlen: 24
168.222.17.0/24 maxlen: 24
168.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2f:56:a1:73:7d:87:e0:98:b6:b4:8b:28:49:9e:63:9a:b6:62:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 29 13:32:19 2026 GMT
Not After : Sep 28 13:37:19 2027 GMT
Subject: CN=EA8BACC07C73811E81EB75017CE2DF5C5747F2FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:0c:7a:eb:97:65:2e:98:b2:e4:c4:da:fa:
8f:ce:65:dc:d9:c8:a4:9b:75:65:1f:88:52:5c:71:
2a:c5:34:aa:e8:2a:f7:28:ec:25:ab:a5:8a:3b:1c:
0e:18:01:e4:81:09:31:a9:3b:05:a8:e8:66:a8:3f:
04:16:08:68:bb:86:4c:f6:e1:b4:3f:f7:69:cc:83:
38:fb:1d:25:c0:94:dd:26:f9:a2:f9:ca:33:1c:d4:
84:c9:fb:11:ef:3e:d7:7e:0f:16:10:85:82:5f:70:
f1:df:ee:98:6c:98:d9:81:45:ed:b5:9e:3f:93:bc:
d9:96:bb:dd:7c:be:04:24:da:a2:0c:f1:0f:c2:9e:
13:3b:9e:03:7e:1f:cc:61:6d:bd:04:b4:8d:4a:d7:
98:40:e5:c8:3e:c5:e3:6a:77:a1:06:e5:4b:a7:4a:
cc:2b:72:59:bc:07:c3:47:3f:28:52:8a:15:b9:b8:
1d:2f:82:99:12:3b:cb:29:88:e2:b9:3a:a5:b3:13:
64:f8:3b:86:65:c2:22:b9:40:8d:35:a7:4b:9b:61:
3d:49:04:cb:a2:68:56:09:e0:4e:45:3f:3e:d5:1e:
75:c0:93:94:d2:71:a9:23:98:5e:8f:ea:d7:82:22:
07:6e:dc:d6:15:9f:36:13:f5:a4:0a:a2:d2:4c:cb:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:AC:C0:7C:73:81:1E:81:EB:75:01:7C:E2:DF:5C:57:47:F2:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.208.0/22
140.150.156.0/24
140.233.128.0/19
143.14.227.0/24
145.223.64.0/23
146.103.60.0/24
146.103.62.0/23
147.79.25.0/24
148.135.180.0/24
148.135.186.0/24
155.117.0.0/24
155.117.60.0/24
155.117.185.0/24
155.117.187.0/24
155.117.203.0/24
162.141.44.0/24
162.141.159.0/24
162.141.180.0/24
168.222.17.0/24
168.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0f:6f:1d:4f:de:8e:ce:bb:97:eb:4f:01:02:9d:ce:f2:5f:
f3:46:10:5d:0c:ab:1b:85:56:13:52:3d:6f:6a:e8:b4:0c:13:
ef:22:3e:e6:c6:ba:ba:77:f6:af:6d:26:83:8d:64:7f:2a:5d:
09:6c:ab:6b:8d:56:71:a2:36:4c:45:f8:2a:95:f1:cb:5d:cc:
1d:a8:73:9b:fe:63:17:12:dc:25:22:2f:8e:04:97:8e:63:52:
54:2b:7e:d2:86:59:d8:7f:ab:e8:56:f3:59:3a:5b:b7:f6:96:
e9:e7:69:03:69:06:94:27:c9:34:06:c4:df:84:b9:fa:ae:78:
2a:bb:3d:96:b6:9b:aa:da:a4:45:2e:19:8c:1e:7a:45:88:42:
41:1a:63:de:42:5f:e8:6e:db:6e:74:8e:9d:47:c4:f2:03:e4:
f5:de:c8:31:79:bb:c5:ff:c8:0d:44:03:1b:fe:d2:5b:74:b8:
06:1a:06:49:1d:76:73:c6:5c:55:3f:dc:d9:be:38:77:b7:57:
c0:e1:7f:34:41:9a:ad:42:c1:4c:28:f5:75:f1:56:b4:79:60:
c4:9a:f9:f0:ea:66:40:ce:12:5d:7b:de:71:88:3d:2b:bd:f7:
cf:29:8f:f1:5d:05:4d:47:4b:fc:86:7b:19:9f:a1:ad:e5:d9:
9a:04:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:39 2026 by rpki-client