Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: g0HL6QZ/89p30gqCtt0pfM6Jl4NSkAOwD3RKECJ98M4=
Subject key identifier: 86:A0:AD:73:9E:D8:30:76:1E:96:83:E9:C1:A4:2E:1A:24:41:1A:90
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 45524E12372783DE08DB24525E79F29E742F9CC6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Sat 08 Aug 2026 11:32:53 +0000
ROA not before: Sat 08 Aug 2026 11:27:53 +0000
ROA not after: Sat 07 Aug 2027 11:32:53 +0000
asID: 14618
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
178.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:52:4e:12:37:27:83:de:08:db:24:52:5e:79:f2:9e:74:2f:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 8 11:27:53 2026 GMT
Not After : Aug 7 11:32:53 2027 GMT
Subject: CN=86A0AD739ED830761E9683E9C1A42E1A24411A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:1d:dd:e5:91:bb:15:ae:4c:04:52:c4:a7:
f7:8f:64:25:00:a7:39:10:e6:02:17:30:70:fc:af:
fd:8d:05:e0:90:d0:a0:11:1b:c9:6b:55:b4:37:c0:
ff:13:d4:bd:78:ef:2f:94:05:f6:f0:ca:69:21:04:
fb:2c:f0:04:62:78:5e:23:88:92:1c:42:5b:71:79:
38:3e:3d:81:4b:4b:0f:34:63:00:6f:45:f0:13:aa:
f7:cc:94:97:9f:e3:60:b9:d6:2d:ce:0c:08:f2:39:
e7:f7:31:5e:08:56:15:7d:53:6e:d2:d8:5f:e0:a9:
ef:e8:d3:ad:2a:98:ed:9e:46:d6:cd:25:f6:f2:9c:
c1:58:d9:f6:8c:19:6d:0a:7a:6a:bf:f8:d9:28:97:
99:fd:dd:e0:d1:dd:76:ee:3d:60:b8:4b:d1:d3:be:
96:95:8e:89:c6:b5:00:be:0b:b3:eb:5f:45:a1:0b:
82:ad:7b:7a:b3:76:ea:2d:4f:fc:92:20:21:1b:95:
05:49:7f:44:9d:df:79:11:89:7d:14:20:75:4c:b1:
64:00:96:bd:80:f3:30:a0:bf:b2:d2:a4:0d:be:16:
b9:2a:8c:f5:54:86:97:7a:c7:4c:70:89:94:5c:92:
1f:bf:e6:75:16:3d:09:8b:ad:5b:43:10:f2:5e:74:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:AD:73:9E:D8:30:76:1E:96:83:E9:C1:A4:2E:1A:24:41:1A:90
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.42.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.135.160.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
178.95.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:18:bb:21:83:0b:32:85:33:e7:fa:28:c7:b8:c9:89:fd:22:
ce:f8:a9:24:15:7e:86:ed:9c:f1:f9:98:2e:fc:af:78:3e:60:
76:2a:88:d7:e6:0f:5c:13:f3:64:32:f2:cc:48:2d:60:3a:f7:
e5:76:53:dd:21:7e:8d:02:f9:e0:3e:26:77:13:da:85:93:48:
c4:9b:96:b7:1a:41:94:19:b2:03:70:3c:aa:50:39:36:75:92:
86:4a:87:4f:2c:68:98:79:34:81:90:35:e9:e6:11:c1:11:88:
4e:22:15:79:c3:b3:b0:e2:7b:d6:e6:a7:56:79:c3:a3:de:27:
b9:5b:ea:55:6d:1b:7c:6b:5e:b3:73:ec:48:ce:c3:ca:e0:80:
a1:36:cb:d2:69:9a:9c:6a:4b:5d:2c:0b:9d:5e:3a:07:d4:ce:
a8:50:0b:0b:b9:dc:be:88:84:66:33:8d:36:38:66:16:96:c9:
c1:c7:44:20:16:48:7a:80:3b:aa:b0:1d:9e:55:41:12:31:a1:
40:fc:bd:50:8a:66:ea:08:d1:00:44:e5:ef:c2:dd:2b:5a:65:
6e:8a:be:b9:b0:c9:26:89:aa:cd:c4:63:8a:ed:4e:86:10:ed:
48:fb:af:23:92:11:94:f9:c8:f8:cf:2d:63:8d:64:f2:ef:0b:
9d:94:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:16:44 2026 by rpki-client