Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: cA+kXuY3lb1mHC6efQuqiU5XNp9zDImCN4xkxkMt4VU=
Subject key identifier: 6C:42:1D:97:F5:C6:85:DC:A2:98:12:F3:F3:A2:D4:4F:BD:EF:A8:18
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6A957A765CF5CE2F20CEB1B26C2BCCFE9D2C53DB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
Signing time: Mon 24 Aug 2026 23:02:01 +0000
ROA not before: Mon 24 Aug 2026 22:57:01 +0000
ROA not after: Mon 23 Aug 2027 23:02:01 +0000
asID: 14618
IP address blocks: 51.241.200.0/24 maxlen: 24
188.220.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:95:7a:76:5c:f5:ce:2f:20:ce:b1:b2:6c:2b:cc:fe:9d:2c:53:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 22:57:01 2026 GMT
Not After : Aug 23 23:02:01 2027 GMT
Subject: CN=6C421D97F5C685DCA29812F3F3A2D44FBDEFA818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:55:4a:0c:f4:14:ba:e6:e6:d8:e0:ff:2c:
6c:92:ed:2d:ad:bc:0f:fb:73:24:aa:b5:3c:c7:05:
95:62:5c:ec:e1:8f:ee:05:40:ab:6c:fa:e6:48:f8:
99:6a:db:23:46:51:fc:c2:78:be:5a:6a:17:6b:bd:
9d:85:c1:b2:0b:fd:78:5c:c9:12:b3:a4:39:58:13:
4f:1d:4b:67:b3:ea:3a:c4:12:8a:34:34:5a:d5:0b:
7c:0c:24:1e:69:ea:b3:68:92:f2:e7:5e:08:26:06:
61:eb:d7:17:ae:66:ce:9a:f5:b5:ad:fd:a2:14:28:
dd:81:de:9a:5e:49:a5:2e:ba:62:95:16:e4:0b:42:
c9:ae:f4:af:55:ff:c4:5d:51:bc:07:a3:4c:62:fe:
18:a1:2e:e8:a3:32:cb:31:5a:28:40:96:94:aa:a2:
79:b9:eb:d1:84:6e:25:52:4d:58:ff:88:19:b1:cc:
50:71:8d:e2:a8:67:2d:0f:63:92:1e:34:79:3a:3c:
81:29:a4:f1:ba:0f:56:35:40:c5:f7:4a:4b:b2:75:
fc:31:56:62:a1:c8:8e:ee:a8:0b:9f:62:78:cb:fb:
43:f6:38:13:ab:35:cd:04:c3:d4:29:ce:5e:0f:3c:
29:ef:34:ce:07:7c:a3:e3:ef:09:77:83:22:ae:1b:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:1D:97:F5:C6:85:DC:A2:98:12:F3:F3:A2:D4:4F:BD:EF:A8:18
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.200.0/24
188.220.80.0/22
Signature Algorithm: sha256WithRSAEncryption
71:9d:80:2a:af:26:ca:66:3d:ba:92:86:22:9c:f9:b8:ab:1d:
d9:ae:67:99:c9:6c:69:3e:fd:2a:ef:6f:c1:56:93:a8:38:e3:
84:28:3f:fa:cb:5c:66:22:82:1f:58:94:bc:85:16:88:77:de:
e3:29:70:7b:77:3e:a9:63:83:19:da:8f:c0:5d:62:12:d3:15:
b7:3d:e8:3e:08:79:25:dd:1d:49:a3:d7:5c:3b:a4:e0:0f:a6:
52:2d:9d:10:98:d8:44:77:9a:c8:aa:57:64:27:1a:33:d3:82:
a0:0a:aa:57:7d:c4:87:89:c2:a1:ed:25:73:cd:a6:25:ba:52:
9f:5d:6e:c1:f2:cb:bc:55:7f:ca:e1:da:e5:7c:79:5a:1b:a9:
2f:bb:b4:e4:4d:7d:a8:0f:36:dc:c6:bf:6b:bc:7f:98:ee:c9:
7a:a1:01:c5:3f:1a:c7:a2:a5:af:3e:38:c1:54:dc:db:b6:c1:
60:7f:fe:63:a9:b5:ac:57:2b:3e:e8:2b:12:2b:8e:c6:09:60:
8a:4b:e4:7f:a2:77:be:27:5d:de:2a:d6:f9:33:63:ca:d2:09:
6c:8d:22:3c:97:26:b8:ef:d5:6e:0e:49:84:95:4e:2e:19:a2:
53:74:06:30:43:16:72:1e:98:4a:5a:f2:8d:5f:cf:6a:ba:4e:
9e:40:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:44 2026 by rpki-client