Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: 7lFiRUD9Mee0wPobGgkhZ+wmKkqRWzyzVGFp8Rvi0Cw=
Subject key identifier: F6:1B:D6:D7:32:FE:57:0E:5C:C9:8E:F7:27:75:E9:63:0A:7A:71:D4
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 545222959944BB79B0AC30A659B0C556EB4012C6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
Signing time: Tue 25 Aug 2026 08:16:06 +0000
ROA not before: Tue 25 Aug 2026 08:11:06 +0000
ROA not after: Tue 24 Aug 2027 08:16:06 +0000
asID: 14618
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.229.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
212.60.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:52:22:95:99:44:bb:79:b0:ac:30:a6:59:b0:c5:56:eb:40:12:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 25 08:11:06 2026 GMT
Not After : Aug 24 08:16:06 2027 GMT
Subject: CN=F61BD6D732FE570E5CC98EF72775E9630A7A71D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:02:67:66:4a:13:8d:75:d8:6d:c4:64:7f:
e8:1f:f9:dd:5c:ac:d2:9f:3b:0b:9e:cc:80:a8:7d:
c2:86:86:b9:36:8c:7a:19:2f:c1:34:70:26:79:65:
58:a0:fd:5a:b5:04:2a:8a:b8:42:8d:c3:f4:dc:c3:
c2:6e:ca:2e:d2:aa:dd:c5:88:84:13:f0:a5:25:b3:
58:76:ea:a1:98:c3:31:06:56:ee:bb:24:69:90:bb:
a6:6d:e9:74:f4:a6:ec:12:10:a1:76:5b:96:c2:61:
95:08:3f:3d:ad:ea:37:e4:eb:fc:99:ba:8e:a6:59:
ee:60:b7:4d:2b:32:fc:b3:f1:86:e1:86:c1:b8:e9:
67:89:54:ad:b3:66:b6:41:2a:4a:94:15:10:ea:aa:
78:c6:56:33:bd:fc:b5:bf:12:03:60:2d:46:02:94:
d8:9d:a0:11:74:77:fc:d8:40:fe:f9:2c:10:e2:63:
96:d5:2c:1a:a6:32:21:68:dc:d0:a9:f6:0c:9c:d9:
b0:8f:b7:1c:f6:f0:26:1c:e4:13:c7:ac:07:b8:49:
44:10:bc:70:ad:4c:8c:ca:0f:d0:8b:32:76:c2:85:
08:85:65:f9:4c:6a:f3:64:0b:f3:90:c0:86:3f:e5:
4d:e4:08:9f:ca:f6:72:12:1f:35:f7:bb:f6:26:72:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:D6:D7:32:FE:57:0E:5C:C9:8E:F7:27:75:E9:63:0A:7A:71:D4
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.229.0/24
82.139.239.0/24
212.17.228.0/22
212.60.154.0/23
Signature Algorithm: sha256WithRSAEncryption
62:8a:91:64:39:2e:23:eb:84:7a:88:4e:ed:b7:65:47:ef:18:
1d:58:44:70:ae:14:4b:93:9b:63:8d:96:b2:0b:02:8d:10:a9:
bc:bc:9f:90:99:4c:2b:92:e0:81:5d:a8:05:52:a2:38:96:f2:
63:e6:ce:5d:d7:5c:7e:79:bc:37:0c:87:2b:80:71:68:59:5f:
36:f3:41:1b:a7:d9:c6:66:3f:d9:00:8b:6c:6a:c9:74:ee:76:
d2:f1:6a:f2:03:eb:bc:b7:e0:e1:f8:be:fc:5d:f0:f6:71:b9:
16:32:9b:eb:58:36:12:a5:7f:d2:fd:58:ee:b7:56:2d:bf:9f:
56:26:37:8e:4e:c2:9f:ee:d8:3a:82:5a:a0:0d:f3:c0:04:de:
3a:9e:72:89:71:55:86:29:cd:56:96:58:61:9a:ae:c7:cd:e4:
20:94:ab:10:8b:93:1c:11:46:a0:99:33:81:d6:98:96:73:80:
b4:97:9e:73:bd:2b:4e:02:30:f3:95:b5:3c:7b:99:c3:27:a6:
57:d6:bb:a9:1e:11:c7:89:38:b1:c4:49:4e:9c:12:f3:c5:cb:
aa:fc:51:de:79:51:f3:e3:20:4b:a8:66:57:35:4b:4c:4b:94:
81:3e:91:0e:19:39:d6:a0:3f:65:01:4a:6e:fa:07:de:1d:a6:
b3:69:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:03 2026 by rpki-client