Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: 7RoQF6TZC+RQdQylimC+7WAqflJv9xV2PY6tFRbyXOQ=
Subject key identifier: 49:D9:94:D7:C9:F7:4C:90:3A:55:08:2B:44:C1:5E:2B:39:4B:D7:AA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1AF85D208AE3E332B5FE86133372DDE10EC49172
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
Signing time: Sat 04 Jul 2026 07:03:24 +0000
ROA not before: Sat 04 Jul 2026 06:58:24 +0000
ROA not after: Sat 03 Jul 2027 07:03:24 +0000
asID: 14618
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f8:5d:20:8a:e3:e3:32:b5:fe:86:13:33:72:dd:e1:0e:c4:91:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 4 06:58:24 2026 GMT
Not After : Jul 3 07:03:24 2027 GMT
Subject: CN=49D994D7C9F74C903A55082B44C15E2B394BD7AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:04:58:34:2f:85:e6:a4:5f:27:0e:95:7d:
8b:5d:f4:aa:be:bf:6f:be:e4:b3:3b:9d:14:91:64:
30:5b:d5:37:9a:30:0c:02:ed:8d:91:99:87:13:d8:
9f:86:0b:cb:ad:22:a7:6f:06:f2:88:c1:4e:9b:c6:
da:d2:83:29:40:b5:64:13:9f:a6:eb:8c:b4:8c:b3:
84:12:6c:c3:d5:06:5b:c4:c7:9d:86:f8:2f:ae:2a:
c5:e0:aa:61:5a:c8:b3:4f:42:b1:7b:1d:c2:7e:17:
9a:9c:0a:58:98:8b:4e:cb:03:2e:a3:6f:88:d7:24:
cb:8f:96:13:4e:50:01:7d:4f:46:ba:e9:2b:db:ad:
de:9c:2e:d7:76:06:7e:c1:02:04:13:34:5c:38:88:
47:5d:ad:7d:78:2b:af:1a:f1:e3:eb:d2:f7:1f:e8:
92:63:34:19:98:1c:06:0d:5a:31:5c:da:e5:03:f6:
8e:d4:4c:e5:e1:74:5b:4a:c7:c5:3f:f2:c8:4a:93:
b0:d9:b0:cb:3d:da:84:87:c0:a6:ed:10:07:44:9c:
9e:16:9d:d3:46:46:82:3a:08:1c:a1:d3:bc:e4:89:
bf:eb:2a:d3:e7:c0:9a:18:5c:84:a3:f3:73:82:13:
24:1c:da:0f:7b:fe:8f:35:24:65:72:1d:e3:8a:4e:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:94:D7:C9:F7:4C:90:3A:55:08:2B:44:C1:5E:2B:39:4B:D7:AA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.112.0/24
141.11.115.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0a:3e:0c:fc:08:c5:2f:80:96:5c:6c:37:fd:64:f7:2a:6f:
24:7f:63:ac:be:8a:75:c0:58:7b:12:6a:18:8a:4a:b5:e2:cb:
3e:92:ab:66:af:da:bc:64:2c:c2:2b:7f:bc:2b:fe:78:ec:b1:
4c:97:82:9a:ed:e5:14:da:7b:d7:65:81:84:b0:a5:73:ac:32:
5d:6b:c4:bb:23:2e:38:a2:0b:32:f7:92:58:2b:68:15:b2:14:
6f:11:24:45:e1:5b:6b:77:5b:ea:1b:bd:1c:d3:f3:82:c2:e6:
56:cf:ce:56:00:18:8e:c1:b9:f5:f1:82:3f:60:b7:be:3a:6a:
03:41:42:49:40:83:24:88:bc:97:cb:1a:c1:d5:b1:1e:f8:fc:
cd:78:24:04:33:48:ab:2e:d1:fc:d5:bd:e9:9e:cd:8a:12:8d:
7d:75:9f:a2:a8:45:98:c1:c3:08:0f:dc:b2:07:41:12:cb:89:
2e:da:0e:9f:56:10:b0:d6:4e:23:20:4a:b3:75:b0:2b:5e:54:
44:5d:24:20:f3:60:e3:ab:25:fe:88:a1:09:3f:06:90:b2:eb:
22:a4:8f:58:eb:8d:a7:ac:db:f3:29:4b:99:9b:f3:e7:46:d5:
ea:f2:f2:c4:5d:39:a4:c7:f6:18:37:be:84:cb:05:e9:42:8b:
48:e5:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:41 2026 by rpki-client