Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: 3zqVYoWaQP8h+iiIzNVHdfT6iH60aEpsKqQK5onVH9o=
Subject key identifier: 7B:D0:05:56:5C:15:FB:52:7B:8A:4D:81:87:21:16:3D:B0:2E:6A:39
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 62DE994E4E62470754C48A5C9069C0661A0525D6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
Signing time: Sat 03 Oct 2026 16:03:09 +0000
ROA not before: Sat 03 Oct 2026 15:58:09 +0000
ROA not after: Sat 02 Oct 2027 16:03:09 +0000
asID: 14618
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.93.0/24 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
141.11.136.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:de:99:4e:4e:62:47:07:54:c4:8a:5c:90:69:c0:66:1a:05:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 3 15:58:09 2026 GMT
Not After : Oct 2 16:03:09 2027 GMT
Subject: CN=7BD005565C15FB527B8A4D818721163DB02E6A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:31:78:f2:9f:67:98:14:78:93:e7:d4:1c:
8a:34:33:72:9c:3d:3f:36:13:fa:e9:df:e0:6e:a0:
be:82:57:d8:77:49:b7:cf:60:ec:d6:77:ad:3a:55:
fa:f0:10:f5:54:f9:34:a2:66:fd:a8:d4:b3:5d:8e:
33:f0:54:e3:05:cb:8c:93:87:84:01:0f:9b:49:07:
12:49:a0:1e:b3:39:98:cf:c2:0d:ce:19:a9:86:1d:
6d:ca:53:2c:e7:db:4a:0a:60:e1:28:bb:78:56:9d:
91:4f:d7:a2:21:dc:99:71:83:20:d4:dd:68:31:5e:
91:f2:25:b1:1a:9f:1b:39:50:64:8c:e8:68:b0:e6:
18:86:bb:9c:16:8e:c1:a2:ab:4a:8d:d7:96:e2:d2:
47:78:b9:c0:29:3a:0a:51:39:7e:c0:4c:5f:d7:83:
38:6a:ab:8b:a4:29:e0:f2:60:d3:41:a6:99:f2:c5:
99:67:2b:9b:33:31:c2:5f:4a:ed:ce:3f:55:c8:01:
2f:98:8a:c5:71:f5:ff:cc:dd:5c:42:b2:f3:d9:cd:
c8:56:89:60:95:45:4d:0a:6b:89:81:02:ce:2d:02:
94:f7:0d:50:64:f8:25:ac:b1:ac:cb:3a:81:e4:26:
64:07:ad:cc:6e:fa:e3:4a:90:f5:4f:b1:47:c2:bd:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:05:56:5C:15:FB:52:7B:8A:4D:81:87:21:16:3D:B0:2E:6A:39
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.93.0/24
141.11.112.0/24
141.11.115.0/24
141.11.136.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b8:42:4a:e6:c8:b4:82:dc:94:b6:91:9f:a5:34:79:33:f3:
23:19:00:91:19:00:b3:b5:84:ac:b4:fc:f2:54:b4:32:4a:80:
34:70:39:37:c1:91:ce:89:5e:e3:6b:b0:dc:07:d4:e2:30:45:
77:05:3c:9a:c6:9c:96:9a:f3:1c:d4:f3:43:88:f7:51:aa:f9:
12:86:d6:78:74:90:74:04:af:b0:73:05:d4:cd:e9:a2:dd:bb:
27:cc:37:e7:2d:32:33:73:d6:88:b2:85:40:85:b4:93:8f:0e:
99:20:e2:85:9e:5f:76:3e:94:f9:9c:f6:96:3b:3c:84:0d:21:
e9:29:2e:a5:d9:7e:b5:9d:70:32:04:18:09:03:53:ae:8c:09:
55:19:8a:5d:a2:55:53:6f:3b:f0:19:da:f4:c7:78:c5:e0:9f:
de:dc:9f:ee:55:af:c7:ca:7f:94:7c:39:98:85:fa:40:e0:90:
54:d6:98:ca:a4:4a:0b:06:47:39:dd:6a:64:1b:e6:54:cf:7e:
d4:4b:ea:0b:38:ea:21:a3:47:8f:31:bb:15:c3:a7:af:f6:26:
02:a6:73:9b:20:40:71:0b:18:5b:82:6a:61:29:95:ae:9e:b9:
42:30:67:7d:d6:24:5a:8d:5b:f8:5b:42:63:05:bc:83:93:36:
9e:5a:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:29:19 2026 by rpki-client