Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
File: AS14445.roa (raw, json)
Hash identifier: o8bTDyvtH4OyJc9ZzUkkKkMGFtUBoElx/2qa2LTvrNw=
Subject key identifier: 27:EE:E4:BF:54:66:30:42:64:BA:F0:22:10:6D:4E:0E:04:7F:B3:BC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 37C50808501AE9B6AA6584089E3BC1E693C103C6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
Signing time: Thu 28 Aug 2025 16:53:17 +0000
ROA not before: Thu 28 Aug 2025 16:48:17 +0000
ROA not after: Thu 27 Aug 2026 16:53:17 +0000
asID: 14445
IP address blocks: 82.25.11.0/24 maxlen: 24
82.25.12.0/24 maxlen: 24
82.25.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c5:08:08:50:1a:e9:b6:aa:65:84:08:9e:3b:c1:e6:93:c1:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 16:48:17 2025 GMT
Not After : Aug 27 16:53:17 2026 GMT
Subject: CN=27EEE4BF5466304264BAF022106D4E0E047FB3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:68:28:4a:61:8b:31:8b:68:bb:a2:43:97:
58:83:9c:63:69:1e:66:08:df:6b:f4:9b:6a:c8:9c:
98:91:fb:1a:3a:89:9e:d0:ca:69:c8:0b:18:08:be:
6b:d2:be:53:ab:5e:60:9f:c4:6e:c2:e8:17:ae:3f:
bd:ee:ae:41:b9:24:25:be:bd:66:4f:a6:b7:98:37:
f7:20:ee:ff:db:49:3c:cc:a0:5e:29:c0:c0:71:c0:
e1:d0:45:df:b3:ff:d6:ae:82:b0:30:52:ac:21:18:
9a:3a:9e:33:1e:22:9f:9a:74:b2:70:11:9d:a4:92:
49:25:81:2a:43:a3:21:c5:7a:c4:1f:7b:8d:b5:34:
8d:fb:9a:99:b1:83:8e:c0:06:f3:3d:3c:54:81:40:
d0:87:a2:6d:23:c0:75:c1:d9:c3:ac:8d:64:cc:f6:
33:fa:27:1b:85:47:42:2c:c9:67:30:32:1f:02:25:
eb:bc:3a:30:1a:58:02:f3:91:36:11:21:d3:92:a3:
e1:1c:7a:8f:b0:12:8e:40:fd:ae:39:25:82:37:ca:
82:08:d6:c5:8e:d9:a3:be:66:cf:9d:89:30:3b:22:
ec:20:a9:b1:dd:3a:a9:9d:dc:3c:77:e5:eb:cb:a2:
52:99:62:5d:32:18:ff:d6:9c:06:2a:4d:9b:d5:c5:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:E4:BF:54:66:30:42:64:BA:F0:22:10:6D:4E:0E:04:7F:B3:BC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.11.0-82.25.13.255
Signature Algorithm: sha256WithRSAEncryption
54:61:e1:37:d7:5b:d0:13:1a:97:26:e5:c1:a6:ec:a6:64:a0:
c9:29:81:ab:d7:fe:67:c9:07:f8:0d:7f:c9:c3:8f:4e:c9:a5:
bc:d5:f6:09:c3:49:c2:cb:c8:b9:e7:c9:37:0e:20:ee:f3:68:
4e:68:14:74:2e:32:dc:e9:a9:25:1d:20:8a:fa:e8:2d:6d:03:
76:fb:c3:11:3a:86:66:a0:c5:13:68:54:ba:62:f2:e1:83:fc:
05:f8:03:9a:53:d6:79:fe:ca:d2:96:78:62:b9:a6:13:b8:e8:
02:93:ec:f7:46:83:4e:ab:0f:ad:56:be:5f:9b:33:73:c1:30:
b6:79:28:c3:58:ed:22:55:36:9a:6b:af:4f:92:9a:e9:32:3c:
20:03:50:1d:29:98:18:8a:83:b4:d4:d6:aa:cc:d7:de:78:d0:
f3:73:1e:67:8d:28:c4:00:64:37:3b:22:b5:5f:a1:a3:9d:ee:
d9:1c:36:d4:63:27:18:27:31:6a:ac:1f:a1:d1:da:e7:5c:ee:
46:15:a6:b7:d6:b4:57:46:55:da:d1:e3:21:a8:c8:48:f1:9b:
f7:03:d8:b3:b0:23:7f:ab:af:42:ee:50:05:39:22:ad:b7:77:
8b:65:ae:8f:b5:f7:3f:4e:da:15:97:ca:91:74:ea:b7:9f:4d:
e4:1b:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:45:33 2025 by rpki-client