Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: AVy/MTTJtlfXtFJhySN/YcD3NqU2V9RR9Nz/gM8xuAU=
Subject key identifier: 43:87:65:67:48:2F:C4:33:8E:60:6F:87:1B:6F:F7:FF:59:42:0D:38
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 64FB313E7ED48CACEC3F6B0322DA90C5AED3C3DF
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
Signing time: Fri 16 Oct 2026 00:06:18 +0000
ROA not before: Fri 16 Oct 2026 00:01:18 +0000
ROA not after: Fri 15 Oct 2027 00:06:18 +0000
asID: 14618
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.229.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fb:31:3e:7e:d4:8c:ac:ec:3f:6b:03:22:da:90:c5:ae:d3:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 16 00:01:18 2026 GMT
Not After : Oct 15 00:06:18 2027 GMT
Subject: CN=43876567482FC4338E606F871B6FF7FF59420D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:ef:6d:db:3b:19:1e:a0:6e:c8:79:47:a4:
ad:59:5c:34:c6:e1:14:95:e4:e8:e6:1d:6a:71:28:
17:e6:9a:ca:00:9c:52:de:fb:72:20:bc:72:0e:10:
64:02:a7:6f:30:4c:62:1e:fb:42:c5:cd:4a:33:ae:
bf:d4:de:32:ff:c9:13:51:fd:45:f8:df:6a:d5:b1:
d4:86:92:6f:a3:a4:3e:34:ed:fd:db:6c:a3:47:a7:
f8:ca:d0:89:4d:f5:90:5d:0a:76:62:1c:9e:11:4a:
fc:ce:36:3c:62:b1:be:71:8f:b4:e7:2b:7d:83:bf:
ed:1d:9a:a1:0f:80:63:a0:d3:f5:b5:c0:60:39:27:
81:35:7c:10:2c:a0:14:76:89:b1:73:9d:23:1c:b1:
21:b9:5a:3d:bc:99:4a:39:00:65:68:f4:e3:b9:13:
82:bd:3e:1c:01:17:7d:ab:7d:52:00:dd:f5:2d:9f:
82:01:53:3e:c4:7b:68:e5:df:37:f6:9b:4a:08:71:
1d:cc:e9:a0:36:98:1a:8b:b7:ee:8a:3c:f1:39:58:
28:9c:c3:2c:5e:cb:b5:4d:e2:72:b9:35:36:1e:57:
ab:2c:59:c5:d5:9b:21:31:47:33:46:57:10:39:74:
28:62:ac:c8:aa:86:4e:ea:45:58:1f:c9:21:4e:ad:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:65:67:48:2F:C4:33:8E:60:6F:87:1B:6F:F7:FF:59:42:0D:38
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.229.0/24
82.139.239.0/24
212.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:b0:5b:86:ef:fb:47:0a:eb:1d:c0:94:ea:68:05:5d:83:e4:
11:cd:a4:81:bc:6d:93:2f:76:ea:67:50:ea:27:31:2d:12:f6:
11:16:23:3b:fe:46:76:41:a6:f1:f9:57:43:43:91:cc:fc:f0:
8c:7b:49:f3:5e:d4:ad:75:db:5f:b0:c0:75:ff:d8:78:8b:c2:
9e:e5:f0:cb:1a:bb:bf:3b:91:e1:0b:e9:90:bb:27:18:84:97:
c7:e2:02:ec:11:ee:2e:b6:9e:04:66:0d:6e:04:1e:91:a4:7d:
20:14:77:2d:ac:6b:df:4e:16:ec:4c:ae:5a:a7:ab:1f:da:ac:
09:56:7d:de:98:c4:9f:23:a2:d2:72:b8:03:f3:ae:23:c2:d6:
09:12:56:ff:ed:6c:dc:74:cf:8f:81:de:3b:80:9c:1f:b8:49:
c9:95:b8:b5:12:22:dc:25:0a:7b:5e:07:1a:70:2e:98:64:ac:
af:e1:1d:ea:98:00:16:12:63:5e:3b:d7:4b:37:20:ec:b2:dd:
ae:39:24:2b:e0:1e:41:81:63:c1:31:c0:eb:dd:cc:e9:07:c3:
10:d4:94:66:6f:a8:e0:a8:fc:2d:6f:8e:a1:5b:a0:38:2a:1b:
1c:9a:89:c3:1c:f8:8f:0b:5c:cd:c2:dd:a6:09:fb:20:52:cb:
74:54:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:47:05 2026 by rpki-client