Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: DKUxPFg0pBt1pth8vTcqDSDRzTBpEFZE0VArVL/C5Eg=
Subject key identifier: 73:B0:06:2F:5A:7D:AE:B2:8B:13:A7:2C:3E:C9:DC:EA:D2:5A:82:96
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 45F6107C8E379AB9A8C8DDFCFE4FD7A27625D344
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
Signing time: Wed 22 Jul 2026 05:11:42 +0000
ROA not before: Wed 22 Jul 2026 05:06:42 +0000
ROA not after: Wed 21 Jul 2027 05:11:42 +0000
asID: 14618
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f6:10:7c:8e:37:9a:b9:a8:c8:dd:fc:fe:4f:d7:a2:76:25:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 22 05:06:42 2026 GMT
Not After : Jul 21 05:11:42 2027 GMT
Subject: CN=73B0062F5A7DAEB28B13A72C3EC9DCEAD25A8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:4b:87:7d:c1:61:3b:df:e8:92:6e:43:db:
36:b7:2e:95:a9:aa:bf:91:3f:f3:eb:d0:de:c3:ee:
87:be:30:2f:73:1e:d4:7a:be:20:bc:be:12:d7:5f:
dc:14:52:25:5f:be:a2:15:f7:c0:5d:8b:4f:6a:d5:
65:f9:a8:5b:9e:b3:0d:4e:34:6a:8a:e6:15:74:e0:
b4:de:85:02:d6:79:c9:43:9a:f4:dc:78:a3:79:5d:
0d:2a:0b:ce:dd:5a:9c:0f:bd:2f:2d:1c:41:13:2a:
b5:07:2d:bd:c4:40:48:a9:20:81:d3:89:63:c0:58:
b9:c8:95:d3:1e:b7:0d:5c:a2:f0:f5:b4:86:7d:08:
e2:1c:b5:25:d4:a8:f7:a0:f2:25:5d:94:da:3e:36:
15:20:cb:7e:68:e8:20:12:a1:31:95:5d:77:a2:45:
2a:93:b4:a9:88:95:a3:dd:cb:42:2f:86:33:46:2a:
01:34:a2:8d:d2:dd:bd:0c:b8:1e:9e:65:05:0a:79:
ed:76:ec:43:a1:0c:27:25:8f:9d:9b:59:2f:b4:a4:
68:48:22:c2:aa:57:89:bf:f2:2f:60:64:10:ae:9c:
a4:8a:8a:19:13:da:6d:46:ac:0b:d2:4e:0a:d9:8a:
ee:da:cb:fa:e2:a6:59:5b:3d:88:17:07:52:b2:55:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:06:2F:5A:7D:AE:B2:8B:13:A7:2C:3E:C9:DC:EA:D2:5A:82:96
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.239.0/24
212.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ce:31:5e:03:47:40:20:81:36:a5:17:00:11:8f:ec:cc:0f:
12:53:d7:5d:ad:4f:cc:e6:ca:5b:71:a1:2f:8b:b7:cf:ed:5d:
58:09:3b:ca:09:69:7e:6d:40:53:27:16:13:d8:f8:03:d7:6c:
0b:2d:dd:2d:73:60:39:c6:bf:a0:70:fa:6a:f1:75:39:ea:04:
6d:5e:d5:ec:0a:7c:9e:39:a5:55:c3:8c:10:20:5b:58:96:95:
06:f7:49:67:56:9c:8a:d8:25:52:3a:97:07:b5:d2:be:46:18:
96:93:6e:c0:09:7b:05:10:9d:27:17:e0:61:5b:9d:55:31:34:
b5:95:0c:e3:f2:a3:a6:9a:c0:db:bf:f2:72:99:88:21:f9:d0:
c0:0e:4c:6a:37:77:cc:7f:8d:8f:f6:e0:b1:e5:f9:7b:9b:f4:
12:5c:4a:21:41:c9:93:ed:ed:aa:0c:82:de:57:5c:17:13:2a:
da:9f:3a:4c:ac:e8:dd:63:37:72:18:8b:43:08:31:19:03:6d:
a6:6a:db:8c:c0:13:d0:32:86:4e:9e:55:39:47:b3:ee:b0:d1:
ab:b7:5d:f5:ff:ae:3e:6e:04:fa:98:3b:e5:28:4b:18:35:2d:
c3:ee:f2:af:ff:93:ce:2b:df:fa:94:43:8a:1c:89:51:f5:af:
26:90:5b:66
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIURfYQfI43mrmoyN38/k/XonYl00QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA3MjIwNTA2NDJaFw0yNzA3MjEwNTExNDJaMDMxMTAvBgNV
BAMTKDczQjAwNjJGNUE3REFFQjI4QjEzQTcyQzNFQzlEQ0VBRDI1QTgyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Q0uHfcFhO9/okm5D2za3LpWp
qr+RP/Pr0N7D7oe+MC9zHtR6viC8vhLXX9wUUiVfvqIV98Bdi09q1WX5qFuesw1O
NGqK5hV04LTehQLWeclDmvTceKN5XQ0qC87dWpwPvS8tHEETKrUHLb3EQEipIIHT
iWPAWLnIldMetw1covD1tIZ9COIctSXUqPeg8iVdlNo+NhUgy35o6CASoTGVXXei
RSqTtKmIlaPdy0IvhjNGKgE0oo3S3b0MuB6eZQUKee127EOhDCclj52bWS+0pGhI
IsKqV4m/8i9gZBCunKSKihkT2m1GrAvSTgrZiu7ay/ripllbPYgXB1KyVYSlAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUc7AGL1p9rrKLE6csPsnc6tJagpYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABOKTAD
BABSi+8DBALUEeQwDQYJKoZIhvcNAQELBQADggEBADPOMV4DR0AggTalFwARj+zM
DxJT112tT8zmyltxoS+Lt8/tXVgJO8oJaX5tQFMnFhPY+APXbAst3S1zYDnGv6Bw
+mrxdTnqBG1e1ewKfJ45pVXDjBAgW1iWlQb3SWdWnIrYJVI6lwe10r5GGJaTbsAJ
ewUQnScX4GFbnVUxNLWVDOPyo6aawNu/8nKZiCH50MAOTGo3d8x/jY/24LHl+Xub
9BJcSiFByZPt7aoMgt5XXBcTKtqfOkys6N1jN3IYi0MIMRkDbaZq24zAE9Ayhk6e
VTlHs+6w0au3XfX/rj5uBPqYO+UoSxg1LcPu8q//k84r3/qUQ4ociVH1ryaQW2Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:15 2026 by rpki-client