Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: Vcvjeys02pXkXqKwfg5YFsOkKEOTLVtiTfLh1jDwDpQ=
Subject key identifier: AE:27:54:8A:58:A6:90:EC:5F:43:A4:E7:9E:BA:E6:84:6F:A2:76:F7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2E565E749C6BF6807E58C83679F715E9F0641752
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14618.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 14618
IP address blocks: 2a0f:85c1:3a9::/48 maxlen: 48
2a0f:85c1:d62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:56:5e:74:9c:6b:f6:80:7e:58:c8:36:79:f7:15:e9:f0:64:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=AE27548A58A690EC5F43A4E79EBAE6846FA276F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:d8:bd:b8:83:37:e6:64:bd:0d:92:c4:84:
9a:73:a2:c3:88:ca:8f:cb:82:01:a5:9a:b9:d4:c4:
69:9a:19:5a:0b:ff:05:90:b8:2e:b1:6b:fa:97:03:
8a:25:b8:98:c8:35:1c:1c:63:18:61:41:fd:05:a0:
55:35:e8:a9:d8:2a:8c:e7:4a:df:03:85:aa:eb:28:
0b:22:f3:07:56:0a:81:7e:94:20:c3:cc:2b:55:70:
25:aa:8b:e5:13:f2:85:9a:2b:61:c4:61:0d:05:5f:
a5:39:83:c5:b3:05:50:88:cd:6f:36:25:08:55:70:
e9:f4:04:4d:8b:8a:13:d6:fb:41:65:a4:2d:35:46:
11:77:2b:cb:a4:d8:80:9b:3f:dc:7d:8a:cc:dd:29:
a5:7c:91:fc:47:4c:a2:5f:20:f7:d9:a1:e0:9f:58:
61:1d:1f:f4:50:fe:b1:1e:4f:1b:65:a2:65:d8:54:
1b:a1:8e:ee:e7:20:fe:6c:34:33:4b:1d:da:48:74:
c6:a1:a1:b4:01:3b:c2:23:d0:c8:d8:59:c0:01:c3:
00:38:e6:4f:cb:19:9d:1c:36:54:37:93:e4:be:79:
0c:9a:34:a9:57:cb:99:d5:4a:05:64:4d:a7:ce:56:
b4:b9:c5:7a:63:6f:a7:61:af:ec:81:d2:24:10:1e:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:54:8A:58:A6:90:EC:5F:43:A4:E7:9E:BA:E6:84:6F:A2:76:F7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a9::/48
2a0f:85c1:d62::/48
Signature Algorithm: sha256WithRSAEncryption
92:da:95:7b:5d:32:f4:60:bb:91:a6:bf:3f:e1:88:b1:5e:57:
99:2c:47:73:33:b3:71:70:3c:44:ec:d3:46:6e:e2:1c:df:9c:
5e:d2:e5:62:f2:c1:3c:01:f6:97:8b:90:cc:ef:64:7d:d7:86:
3f:32:64:4b:72:99:9a:94:53:e1:d5:54:71:63:7f:19:28:7e:
33:a7:a8:54:a6:32:a9:e3:06:21:0f:9e:ea:02:98:10:30:f7:
85:de:10:96:10:d1:d7:e4:e8:00:79:d4:dd:61:fb:88:b9:6d:
0d:55:5a:56:f6:25:59:22:b6:d1:85:04:dc:f9:ae:66:db:28:
05:e8:a9:91:2b:49:4d:4c:7d:47:f0:29:19:88:7b:1c:e8:c8:
4d:36:dd:9f:0c:6c:a8:3e:c9:3d:a2:e7:b6:c4:77:b0:a2:30:
16:cc:1c:47:2e:3a:0e:24:78:f9:94:52:5a:8b:d1:34:69:74:
1c:cc:0c:70:a8:b2:06:ec:85:dc:d3:b9:d8:96:b4:4b:78:f3:
e1:2c:1e:14:21:25:0d:45:6e:42:10:b5:d4:e7:ca:ba:38:16:
a8:b6:07:11:38:20:10:a7:5a:a0:47:f0:77:a3:33:fb:90:3e:
cb:80:48:de:4d:c1:13:18:33:b8:d9:1e:cb:7a:bd:15:0a:96:
a4:7f:3a:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:55:46 2026 by rpki-client