Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: EqdzGyoTSJlDZWFW/lJtVnsqAohCGCmVt48DQ7uyld8=
Subject key identifier: 92:2A:A1:82:2B:52:5B:DB:81:BA:45:D1:14:20:18:EB:0D:0D:33:40
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1DA82C9C80D75AB84E3C72B3228716FA3F717359
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS14618.roa
Signing time: Wed 29 Jul 2026 15:25:10 +0000
ROA not before: Wed 29 Jul 2026 15:20:10 +0000
ROA not after: Wed 28 Jul 2027 15:25:10 +0000
asID: 14618
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a8:2c:9c:80:d7:5a:b8:4e:3c:72:b3:22:87:16:fa:3f:71:73:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:10 2026 GMT
Not After : Jul 28 15:25:10 2027 GMT
Subject: CN=922AA1822B525BDB81BA45D1142018EB0D0D3340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:5d:c6:ef:9e:63:4e:ab:d1:cf:73:a0:52:
4d:a8:d9:12:00:14:7f:bb:04:8d:8f:ae:d5:ba:78:
67:ef:70:45:56:7e:f8:49:5a:77:7b:36:34:60:e1:
be:1e:a9:78:a3:3a:c1:bc:3b:5e:e4:a0:f5:fc:d9:
87:5c:9f:70:36:b9:43:be:3d:3e:5d:c5:43:2e:3b:
91:f3:2d:18:2d:93:f5:21:1f:38:af:e3:54:59:c1:
60:2b:69:8d:7d:13:2e:0a:0a:38:05:e2:f9:78:88:
ff:62:68:f7:2c:eb:69:d9:e5:23:11:12:41:00:32:
bb:3b:cc:8a:1d:8f:80:2f:85:fe:c5:3b:fa:13:78:
8f:3d:26:a3:6e:fc:d5:44:98:54:5b:06:e3:25:d4:
1e:ab:13:3c:69:b4:f7:25:69:8d:7a:11:ed:f2:0e:
28:26:cd:47:e8:ef:c5:2d:42:43:d1:36:af:ad:4a:
67:53:de:19:b2:85:ec:b6:7e:20:2f:bb:b6:7b:a8:
ee:12:c1:83:95:bb:5d:6f:f6:8f:33:d9:6a:a7:1b:
8d:b4:c2:0c:0e:55:0c:e6:75:45:7c:9c:51:dd:ae:
34:fc:60:f2:3d:55:16:cc:1c:ea:bf:6b:96:12:3d:
24:71:fc:aa:2b:b3:53:b3:5b:35:31:8d:a1:0e:74:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:A1:82:2B:52:5B:DB:81:BA:45:D1:14:20:18:EB:0D:0D:33:40
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
50:32:4a:9d:6c:ab:fd:fb:20:d6:18:3f:e4:37:26:4b:f3:af:
98:9d:df:c1:28:dc:09:0b:9a:62:fe:62:d5:c1:9c:cb:89:2f:
5a:03:e8:11:37:56:9b:fd:f5:50:15:78:97:77:24:b5:ec:6c:
e6:c8:8b:4f:0b:96:94:23:e1:cc:57:96:15:ab:af:b2:5c:78:
36:e4:ea:e1:03:96:66:a1:30:23:74:47:8b:82:b5:1a:93:37:
be:a0:33:b0:12:a5:44:a9:6b:d7:64:05:9a:e8:6b:00:26:60:
12:10:d8:25:d5:94:95:d2:8e:76:fb:1a:a1:72:0a:50:e4:ab:
1e:b6:08:de:1a:45:d2:5f:6d:d8:4c:ed:e7:06:aa:de:7d:9d:
99:fb:76:44:22:f5:15:2e:06:0a:ee:6c:8f:3e:d3:ac:75:ff:
81:ac:e2:0d:e8:c3:d2:cc:74:b7:ad:e8:0b:ed:5c:2f:c9:bc:
91:a1:de:9d:97:f7:12:9f:b6:82:31:49:d4:9e:5e:95:b5:41:
48:8e:94:a9:69:70:0f:c8:91:cd:bf:39:fa:70:97:16:b0:57:
2d:0f:0b:e2:cd:4a:a4:cc:09:2c:ee:12:15:97:72:9a:9c:53:
ef:1c:da:55:d6:e1:8a:bb:50:ef:0b:e3:43:96:91:3d:b3:37:
a8:6e:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:14 2026 by rpki-client