Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          n/lb7xL9z0B1fTKlczyiy0lop3/icuv3H8/0AP1Z8y0=
Subject key identifier:   4C:1F:A9:2C:65:4C:CF:0B:F9:1A:23:FE:94:A9:1F:02:7A:6C:8C:BF
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       1D6B1D4D6BE46344317E501151B7F96791BB49D5
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS14618.roa
Signing time:             Wed 07 Oct 2026 16:25:30 +0000
ROA not before:           Wed 07 Oct 2026 16:20:30 +0000
ROA not after:            Wed 06 Oct 2027 16:25:30 +0000
asID:                     14618
IP address blocks:        79.182.9.0/24 maxlen: 24
                          79.182.112.0/24 maxlen: 24
                          109.66.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6b:1d:4d:6b:e4:63:44:31:7e:50:11:51:b7:f9:67:91:bb:49:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  7 16:20:30 2026 GMT
            Not After : Oct  6 16:25:30 2027 GMT
        Subject: CN=4C1FA92C654CCF0BF91A23FE94A91F027A6C8CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:15:1f:52:19:78:f1:ec:1d:c1:20:2b:06:
                    10:c4:63:a2:52:a7:df:db:94:13:f6:ac:6a:d8:5c:
                    9e:fc:48:8e:49:97:3b:ed:ab:b4:e7:dc:3a:fc:5a:
                    5e:3d:65:f0:29:42:a4:3f:99:03:db:d4:80:f0:8e:
                    8a:54:a4:7b:7e:42:8c:ee:e1:03:a7:d3:58:a5:09:
                    61:1f:4d:94:90:17:1e:dc:55:88:45:80:2d:04:8a:
                    11:93:9d:51:c3:41:bc:2e:57:4a:17:5a:48:6e:fd:
                    5b:0f:bf:a7:c2:28:7c:7d:86:f3:b9:4e:a3:6f:80:
                    86:dc:f3:f1:e8:8f:64:a3:bf:e2:cb:e8:dc:99:d7:
                    13:bd:8e:58:48:37:7e:3d:39:b1:21:a9:52:73:54:
                    e3:35:93:61:ab:a1:6e:57:50:ca:db:df:68:e1:b0:
                    0d:54:ba:98:c9:d0:bc:97:d9:52:78:4b:a3:f0:b5:
                    69:fe:a9:a4:12:78:09:ea:63:9b:a8:07:b0:55:04:
                    e2:8d:5f:24:8e:4b:eb:cf:17:5f:05:6e:0b:eb:d3:
                    0a:fd:30:1d:ba:47:22:b2:73:d7:16:72:13:05:a4:
                    a1:52:bc:3c:84:b3:09:a4:12:c0:0e:fd:89:96:46:
                    c2:6f:cb:19:b0:54:88:28:eb:fc:b9:50:fc:4d:09:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:A9:2C:65:4C:CF:0B:F9:1A:23:FE:94:A9:1F:02:7A:6C:8C:BF
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.9.0/24
                  79.182.112.0/24
                  109.66.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:d9:11:eb:db:53:4f:24:78:50:0a:c4:7c:4f:83:4b:01:46:
         53:70:1f:b7:d8:31:3b:f4:29:51:1f:a8:12:22:27:f7:42:cd:
         78:f7:29:12:54:eb:1c:12:1b:52:6f:c4:4d:27:3f:1b:76:6f:
         28:d8:8f:b1:22:af:5d:2f:88:1d:51:85:1c:33:97:fe:fd:19:
         d5:6e:5a:dd:4a:d3:63:7f:b7:21:7a:47:cd:5f:fe:0f:b5:4b:
         20:a1:66:e9:79:01:4d:4b:b9:d8:26:9d:6a:97:22:2e:46:30:
         34:df:83:ae:7d:c5:da:37:2a:ea:51:5a:9b:1e:3d:68:1f:be:
         ae:53:82:5d:9d:97:78:53:4b:4f:42:95:41:fd:d6:d6:1b:d1:
         e2:c2:92:04:5e:a2:5f:b1:8c:34:55:26:af:7b:39:23:95:85:
         5c:8d:64:28:47:24:0c:e5:49:cf:73:38:0f:0b:a3:98:14:34:
         3b:70:36:b9:1c:f0:43:9a:e8:a5:fd:21:fb:bc:07:c1:85:18:
         f0:f6:f8:33:90:70:35:0d:08:e1:fb:37:e9:1a:ef:27:2d:5a:
         ac:8c:27:91:9c:fd:ba:a6:e4:d1:87:b3:51:c1:3c:4f:56:46:
         d1:88:10:79:58:a5:d7:aa:06:89:3a:14:16:47:31:4b:08:e5:
         ec:ca:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:24 2026 by rpki-client