Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: SciLeh8Iq7mcyIuYelHxeghYrz0Uji838cAj+WmqliI=
Subject key identifier: BD:1B:34:49:C5:95:BE:5E:3D:48:51:93:4B:B3:89:B4:73:1C:10:63
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 74A5EF759470849FBDA54C573A213D00414B3391
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Wed 22 Jul 2026 07:21:51 +0000
ROA not before: Wed 22 Jul 2026 07:16:51 +0000
ROA not after: Wed 21 Jul 2027 07:21:51 +0000
asID: 14618
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a5:ef:75:94:70:84:9f:bd:a5:4c:57:3a:21:3d:00:41:4b:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 22 07:16:51 2026 GMT
Not After : Jul 21 07:21:51 2027 GMT
Subject: CN=BD1B3449C595BE5E3D4851934BB389B4731C1063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:80:3b:9c:b7:25:cd:30:df:51:1c:54:3c:
fc:81:f9:e7:31:d0:6f:4f:a4:ca:35:5c:82:5a:07:
b4:69:ab:6e:c9:23:f6:22:23:12:d6:c3:0d:1a:3c:
19:19:8d:83:ba:f9:88:74:11:8d:87:15:fb:e0:5d:
73:40:61:09:4b:66:56:0e:ef:36:2d:db:8d:b5:14:
15:5f:66:41:25:90:b7:49:ae:70:b0:08:f1:57:08:
94:f7:3e:f2:66:a2:4c:b4:c9:ea:33:c8:ef:74:2b:
b4:ce:bf:7f:72:0c:95:b6:fd:64:fc:e6:29:f2:48:
63:64:24:6c:4a:54:b4:82:4e:e6:89:71:4a:3e:95:
aa:e2:5e:44:15:42:66:80:f0:63:90:2f:30:72:97:
49:41:90:d0:b5:ea:78:1c:2a:fb:f7:a4:8f:86:bb:
75:a2:73:1c:a4:92:45:b8:15:92:33:c6:08:6d:ca:
cf:43:e5:70:c3:4f:88:7a:32:38:8a:b3:ee:98:06:
b2:ae:f0:bf:7d:70:47:6b:01:d6:58:41:60:ff:28:
9b:ea:b6:db:5c:c8:1a:e5:da:b8:6d:5f:6d:84:09:
89:24:fb:86:be:81:68:f4:1b:bb:46:16:3b:c4:09:
0f:7c:46:d2:f4:c1:ba:67:9c:61:bd:0a:10:e4:73:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:34:49:C5:95:BE:5E:3D:48:51:93:4B:B3:89:B4:73:1C:10:63
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
181.215.206.0/23
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
a4:b4:c7:70:99:07:0f:b7:53:85:19:6c:4a:57:c3:16:88:79:
f7:af:a7:6c:de:20:db:2e:76:fb:97:6f:2f:22:9d:8f:92:cc:
ab:04:7b:51:e4:9b:c1:ea:fa:d4:46:76:24:10:e6:74:1d:10:
5e:c3:3b:3a:49:63:0e:42:f7:c0:df:7a:68:6c:42:57:a5:6d:
2e:d3:50:e7:28:19:af:1b:bf:70:10:68:4e:2f:55:f7:6c:a8:
38:ef:6a:e5:8e:c6:92:1e:2d:a8:b4:6e:45:48:7a:3d:7f:22:
7d:4f:89:72:b9:e0:a7:45:ac:09:03:63:20:b9:9b:48:d9:1a:
97:62:27:8b:ce:50:c5:39:0f:8e:c2:9b:9a:15:f5:dd:4d:ae:
a9:89:0e:ad:6a:27:06:52:97:4d:ae:06:eb:0e:1d:71:e9:b0:
42:80:3c:ee:b6:29:45:77:e1:3a:98:b2:97:46:cb:2f:08:df:
3d:f6:c6:4b:4d:14:e5:98:95:95:83:96:c5:5c:cf:3c:6f:48:
4b:fd:87:aa:6c:88:e0:f1:22:68:7c:8a:d7:23:9c:8f:f1:33:
9b:0a:0a:53:1e:39:57:09:6c:ef:ef:85:62:dd:89:f2:94:97:
99:ec:be:7f:e8:fb:a6:41:f6:30:b6:2f:03:5c:14:72:3e:e6:
fd:6d:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:11:43 2026 by rpki-client