This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          v5mLhAnB2yTF7xDZI9E7A2VVg6CiW4rBUamN7dn2O0U=
Subject key identifier:   40:AC:14:B0:1E:52:AA:BF:3C:66:CB:72:0B:82:2A:DB:A5:36:4C:CE
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       3533E98DE92225624B6F8FCD2D146C1F155F4E68
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time:             Thu 22 Jan 2026 13:42:06 +0000
ROA not before:           Thu 22 Jan 2026 13:37:06 +0000
ROA not after:            Thu 21 Jan 2027 13:42:06 +0000
asID:                     14618
IP address blocks:        45.139.182.0/24 maxlen: 24
                          181.214.94.0/24 maxlen: 24
                          181.214.110.0/24 maxlen: 24
                          181.215.206.0/23 maxlen: 24
                          185.137.13.0/24 maxlen: 24
                          191.96.204.0/24 maxlen: 24
                          191.101.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:e9:8d:e9:22:25:62:4b:6f:8f:cd:2d:14:6c:1f:15:5f:4e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jan 22 13:37:06 2026 GMT
            Not After : Jan 21 13:42:06 2027 GMT
        Subject: CN=40AC14B01E52AABF3C66CB720B822ADBA5364CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:13:e8:a1:ad:b2:ea:33:c0:ad:bd:08:b2:
                    a7:e7:b9:3d:a7:85:98:e4:10:36:2f:1b:3f:f3:36:
                    8e:0d:75:f7:0f:7c:ba:54:3a:61:ef:32:c1:6d:aa:
                    29:ad:0c:98:3b:f4:43:fb:c8:42:ef:26:53:b7:de:
                    19:35:5b:11:bf:d8:70:b8:21:1e:ce:50:d6:2b:d3:
                    3b:93:d1:16:2d:8f:bf:b1:36:11:ea:21:eb:ea:3b:
                    2a:96:47:43:f3:9b:3e:ea:ee:c9:69:b1:72:5a:8d:
                    90:fb:08:0c:3a:10:b4:0f:8f:76:e3:37:61:6e:2c:
                    e7:2a:c2:7d:71:a6:85:67:46:09:99:61:92:a5:d7:
                    12:4b:85:e3:02:54:ef:cc:ae:50:22:71:bf:ef:f6:
                    6c:83:ff:2b:9b:d8:3b:7a:6a:dd:88:61:c3:b5:fa:
                    05:30:0d:6d:d9:11:c4:9f:63:66:d2:d9:44:66:4d:
                    d0:2a:58:8d:31:e2:4e:2c:bf:b7:a6:a0:65:5e:fd:
                    2a:74:f9:80:8f:fb:96:f8:4b:25:a3:8f:03:41:dd:
                    2f:6e:42:ab:fa:1f:12:62:61:4a:b4:f3:99:27:e7:
                    23:1f:a5:f8:f0:cf:7d:5b:bf:aa:3b:c0:0b:ba:f9:
                    86:1c:3a:4d:0f:ce:11:2b:cc:85:8a:e5:63:4f:1e:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AC:14:B0:1E:52:AA:BF:3C:66:CB:72:0B:82:2A:DB:A5:36:4C:CE
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.182.0/24
                  181.214.94.0/24
                  181.214.110.0/24
                  181.215.206.0/23
                  185.137.13.0/24
                  191.96.204.0/24
                  191.101.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:91:26:99:7a:36:bf:6d:ab:9a:74:06:ad:96:cd:07:d4:92:
         ef:66:ff:e8:fe:7e:05:36:45:4e:2e:11:07:b5:a9:30:07:ae:
         8e:93:96:2e:0e:6b:31:5b:99:40:96:17:5f:3d:c9:4d:be:56:
         79:cd:b1:3b:dd:4b:f2:40:4c:ba:e9:5e:69:26:9b:66:13:c8:
         8a:74:69:53:0b:bc:ce:09:e5:bc:83:02:29:ae:dd:16:a1:28:
         b7:44:86:d9:2a:ed:5b:fb:cd:2e:bc:bc:8b:d8:29:10:55:1b:
         67:4d:6a:cc:f3:1c:ee:62:cb:56:22:bb:e6:d2:56:85:b7:57:
         9e:d0:75:da:cc:e9:41:cd:96:f9:d3:eb:c5:11:c8:cf:a2:b8:
         01:e0:8c:e2:7e:f8:bc:3a:65:da:9c:2c:59:ad:ee:1f:c9:a5:
         10:d4:91:b1:fe:3a:4b:5d:dd:2d:ee:bd:dc:94:05:a4:e2:5b:
         b3:13:5b:8e:85:27:bb:6d:24:3a:43:94:07:81:13:31:88:da:
         c1:75:ed:73:17:52:c3:80:ca:b0:72:bb:9a:e2:86:14:ef:ff:
         89:16:3b:a9:26:b6:61:ab:ab:0a:be:e1:ac:af:f5:c0:6d:b7:
         bc:fc:48:c9:76:fd:90:91:3d:b3:ac:f1:19:1c:a6:de:27:8a:
         89:6e:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:43:09 2026 by rpki-client