Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: PI7yYwPSijetg9czOekfPAAqD0x8oD8tWQb167QYEtg=
Subject key identifier: 0C:5D:CC:71:7C:50:43:08:C0:B0:9A:41:F1:B8:0E:78:48:67:A6:BF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 340F83A79A75099726EC23071DB131DD40FD0AC1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Thu 15 Oct 2026 07:58:09 +0000
ROA not before: Thu 15 Oct 2026 07:53:09 +0000
ROA not after: Thu 14 Oct 2027 07:58:09 +0000
asID: 14618
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:83:a7:9a:75:09:97:26:ec:23:07:1d:b1:31:dd:40:fd:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 07:53:09 2026 GMT
Not After : Oct 14 07:58:09 2027 GMT
Subject: CN=0C5DCC717C504308C0B09A41F1B80E784867A6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:6b:26:38:87:83:ac:70:5e:80:b0:95:94:
5c:35:9c:77:68:ec:69:e8:45:b9:9d:45:96:df:b5:
8a:1a:2d:92:53:82:d6:71:fe:51:df:d0:0a:5b:8a:
1e:cf:f9:65:03:5c:f4:c8:e9:80:6e:41:ae:43:3e:
ba:0f:d0:1b:26:dd:1b:d3:f4:2b:5c:56:e9:4f:50:
8c:d7:e9:c4:27:36:9b:c6:9d:1b:4c:c7:8b:6d:7c:
86:b3:cc:e3:c6:24:96:95:83:5a:25:93:e2:7a:76:
58:b2:d4:cf:d8:88:c3:b0:c5:ec:6e:94:0b:2f:b5:
55:33:67:42:e2:99:b3:25:bb:1c:37:ce:68:67:af:
f2:c7:34:41:36:69:fa:bc:0c:d2:87:c9:e5:a3:f0:
76:c8:6b:ab:cb:2e:bc:2a:1c:6c:04:4e:d0:7b:f2:
7a:cc:26:d0:c6:c8:02:75:92:03:be:6c:00:b0:df:
d7:01:79:64:4c:06:e2:7f:cd:54:2a:66:5d:d1:5b:
ae:10:10:ca:65:72:be:e9:76:0e:30:2c:e1:1a:0c:
06:8c:35:8c:4f:29:bc:04:c1:68:26:5b:77:66:56:
77:49:7b:74:e8:8c:d1:4f:10:4c:f9:b9:2c:58:ac:
7d:4e:0c:ac:b7:b9:b1:90:38:3a:3e:03:7f:4a:03:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:CC:71:7C:50:43:08:C0:B0:9A:41:F1:B8:0E:78:48:67:A6:BF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
0f:11:64:21:d7:67:b6:6d:1f:86:96:d0:e4:19:7c:91:92:ba:
d0:ae:86:b4:58:7f:1a:ae:34:6e:ce:11:29:08:38:c6:5f:08:
cc:4c:32:a0:a0:bf:1d:14:34:0e:04:ba:40:af:c7:e3:b4:39:
be:95:f9:d8:d8:85:f2:8a:75:8b:33:95:73:87:e2:00:03:21:
78:c6:8b:96:d5:1f:ca:42:5d:4d:d2:e2:42:a9:74:fb:e0:22:
6a:af:3b:e1:87:17:ba:b5:a9:fb:7b:e5:2f:07:16:18:84:0d:
dc:dc:e5:78:d2:b0:93:98:ec:57:65:a3:4c:52:fd:04:e8:9d:
df:61:cc:b8:8a:85:b2:19:46:57:d5:ad:90:ae:c7:a6:6e:42:
a0:fd:54:f5:f6:cd:07:97:9e:8d:58:70:d6:b7:99:1b:41:46:
dd:5e:4c:55:00:ed:e0:a3:05:41:5f:04:08:ca:78:b2:76:ce:
d7:d6:c0:a6:cd:44:bb:22:18:f6:1b:2c:f0:6a:f9:8f:60:1f:
5c:3c:4d:38:e6:07:04:0a:78:48:16:63:19:b1:89:b1:dd:b9:
ff:19:58:8d:b6:2f:5d:4c:f5:f5:c7:86:5f:cf:41:8a:98:02:
eb:c8:b3:d6:36:e2:26:ee:3f:45:3e:39:41:71:46:a0:7a:4d:
1f:48:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:48:57 2026 by rpki-client