Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: x83qIzmJ5N8fxXWEezmj3szLtq9cip+5KNXWJlXPu34=
Subject key identifier: 79:A0:AC:B8:F3:3D:F9:6D:F6:15:64:D6:F5:DB:31:2D:79:BD:13:34
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2425C4433A9D3B1DB18A49A8A3B9E16168C42CF6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
Signing time: Sat 27 Jun 2026 16:03:31 +0000
ROA not before: Sat 27 Jun 2026 15:58:31 +0000
ROA not after: Sat 26 Jun 2027 16:03:31 +0000
asID: 14618
IP address blocks: 2a14:7580:ff9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:25:c4:43:3a:9d:3b:1d:b1:8a:49:a8:a3:b9:e1:61:68:c4:2c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 27 15:58:31 2026 GMT
Not After : Jun 26 16:03:31 2027 GMT
Subject: CN=79A0ACB8F33DF96DF61564D6F5DB312D79BD1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:b7:05:34:65:c1:dc:00:6f:ae:89:f1:8d:
48:65:ea:55:9e:56:e1:99:02:f9:93:6a:24:3a:b3:
9e:8e:0e:6f:e2:32:7b:14:83:ed:60:05:f6:9f:d9:
6f:d0:cd:72:cf:ed:2f:2d:26:cc:a5:71:f7:27:b2:
1c:e5:66:53:28:75:35:09:9a:ba:4a:92:22:76:7a:
12:f6:c1:11:0b:2a:1d:7b:c9:70:b9:33:73:6c:15:
39:dc:d4:e1:75:8b:83:3f:bc:9a:55:a2:c1:0b:03:
a0:8f:e9:b8:eb:62:17:fa:01:df:c7:b4:02:74:e1:
57:a6:ff:89:74:91:47:ac:19:19:ea:57:ad:ce:26:
3c:af:75:fb:fb:96:9d:00:9e:36:db:ee:7c:12:7d:
60:e8:43:91:c4:5c:23:f6:57:e4:61:0f:cc:ed:70:
19:92:f3:14:c2:8b:77:73:1b:3e:45:1c:55:13:59:
fc:de:88:97:f3:67:6e:cd:17:5a:7f:fb:e0:18:da:
01:c9:f8:96:10:ff:3b:e5:ec:35:1d:83:57:e9:8d:
ed:fc:e3:b9:e9:03:7d:8c:4e:d1:7d:1e:9c:eb:e0:
96:45:3a:b9:55:b0:e2:e6:bc:ac:fb:6d:be:ac:da:
1a:48:8b:f2:92:66:22:77:3c:76:ba:5b:4c:bc:10:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A0:AC:B8:F3:3D:F9:6D:F6:15:64:D6:F5:DB:31:2D:79:BD:13:34
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9f::/48
Signature Algorithm: sha256WithRSAEncryption
39:72:bb:04:ad:11:5c:19:a2:ee:a7:f9:a5:20:2e:9a:f6:c0:
47:94:71:4e:07:15:a5:76:0d:8e:e8:b1:b7:81:e6:52:4d:c0:
22:78:95:69:06:05:8f:01:eb:4c:28:c5:22:fd:7c:01:2c:d8:
4d:ba:60:94:04:79:1d:31:01:60:fd:31:3e:37:63:db:fe:3a:
3a:dc:92:f8:1b:5b:1e:05:58:31:20:c6:34:7b:9f:77:84:f3:
f8:a5:11:40:aa:5b:80:e8:36:6f:d1:b8:bb:8e:3e:96:64:a1:
92:f2:bd:11:7d:32:8e:fc:95:62:fb:8e:f4:f5:66:52:e1:6c:
96:8b:76:44:49:72:48:e0:f2:a2:21:52:5a:ad:d1:7e:44:44:
83:2a:08:d2:dc:41:86:9c:c1:eb:44:79:38:ca:f0:4a:c4:4e:
99:50:d6:2c:ff:73:3a:07:5d:ec:43:c9:0a:14:59:e3:b5:fc:
6e:1a:99:58:b2:ff:ba:5b:a6:72:dd:6b:5f:e4:cc:f7:13:07:
29:80:f2:ea:29:9a:31:ae:b1:33:12:4c:5f:d6:04:15:3c:d3:
1c:f2:dd:6c:62:25:ec:c5:98:ad:e7:a4:e4:1e:28:56:de:c5:
2e:25:b8:38:63:f5:ac:80:10:81:8a:9a:38:fb:44:03:84:ad:
51:4d:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:49 2026 by rpki-client