Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: FwF7pwyCc9EjVBMibUt4BVlTx+yWy3tinHjMfNrjAac=
Subject key identifier: E0:2C:BD:78:FD:94:B4:D2:F5:3D:AB:B8:03:AD:FB:25:B1:DA:97:71
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 61A145644EEEE488751AECE94B50B85BEB64FF29
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Thu 04 Sep 2025 07:11:23 +0000
ROA not before: Thu 04 Sep 2025 07:06:23 +0000
ROA not after: Thu 03 Sep 2026 07:11:23 +0000
asID: 14618
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a1:45:64:4e:ee:e4:88:75:1a:ec:e9:4b:50:b8:5b:eb:64:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 4 07:06:23 2025 GMT
Not After : Sep 3 07:11:23 2026 GMT
Subject: CN=E02CBD78FD94B4D2F53DABB803ADFB25B1DA9771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:14:d6:9d:82:dd:3d:ca:d4:e8:f2:08:ac:
7a:11:37:2e:b2:5e:e0:28:1c:31:2a:25:7c:bb:95:
a0:70:8c:b3:e6:47:19:8e:44:ff:11:59:b1:89:9a:
94:71:ac:5d:f3:72:d2:1b:7b:c8:ea:3e:01:40:b9:
fa:f3:d0:db:4d:9f:4e:5b:37:62:7e:c5:1b:a7:86:
8b:f5:f8:3d:6a:63:ac:7d:99:2f:64:01:46:b5:b6:
e0:6a:5f:0a:95:be:e5:86:ea:06:5e:1f:54:79:d8:
66:97:e7:76:9b:16:36:17:55:c4:e8:6a:96:64:7f:
66:8f:86:0a:82:00:dc:07:41:fe:69:63:3b:a4:45:
8f:f5:a6:35:58:28:ce:d6:4a:f8:cb:7e:3b:33:09:
0e:19:88:7c:af:fd:41:51:aa:a7:2a:24:a3:03:d2:
12:b5:a9:a4:19:fd:ee:9a:82:8c:0c:1c:c5:92:bd:
f7:d0:f6:84:4a:7f:eb:eb:0f:a4:59:96:63:11:01:
04:c2:62:3d:52:07:13:81:a5:ee:d0:97:88:cd:b6:
b4:a7:92:65:b2:c9:d4:61:cc:4b:8d:a9:90:17:a4:
b9:97:00:83:7d:e8:d9:dc:6b:1f:4b:d0:58:eb:7f:
47:04:a2:ac:5b:3c:d2:d5:3a:0e:ce:38:d7:8e:52:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:BD:78:FD:94:B4:D2:F5:3D:AB:B8:03:AD:FB:25:B1:DA:97:71
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:04:9c:98:0f:52:24:c4:cc:8e:1f:d4:4f:63:70:43:c9:f1:
00:ad:c0:64:0a:d0:44:7b:2d:2e:d8:4f:7c:ae:5b:e0:70:2b:
67:dd:7f:5a:bd:e6:96:ee:6e:a7:e2:4b:22:83:d3:9b:ac:46:
17:46:27:0c:d0:79:16:a2:de:76:cd:60:dd:1a:96:76:a1:2d:
b0:24:e9:ad:9b:e3:38:09:6a:23:8c:59:59:df:80:37:d4:04:
82:b9:60:b9:d2:a1:b5:f1:6c:51:aa:0b:96:36:34:b2:cf:cf:
be:40:44:71:b7:c2:f2:8b:80:c1:c3:e4:d8:29:00:e8:ae:1c:
0b:17:15:fc:16:e7:58:32:a4:db:cc:ca:71:97:39:f7:c9:b5:
26:5d:2d:50:b7:43:89:57:d2:68:a2:01:3a:7b:1c:15:bc:40:
1c:a6:fb:58:dd:0f:c7:1e:86:09:dc:ee:3e:a0:91:2f:ca:47:
f0:22:86:a7:05:8b:b2:70:9c:ef:93:7f:88:56:60:fd:86:99:
f8:c1:2c:85:f4:13:c9:6f:72:81:c5:61:97:ed:52:d4:71:58:
45:46:7b:99:2a:ba:61:a3:33:b4:3f:3c:35:44:d5:d3:26:21:
90:e0:18:ed:28:a8:cc:0a:44:79:98:c9:0a:bf:7f:6a:ed:90:
df:86:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:32:23 2025 by rpki-client