This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: v5mLhAnB2yTF7xDZI9E7A2VVg6CiW4rBUamN7dn2O0U=
Subject key identifier: 40:AC:14:B0:1E:52:AA:BF:3C:66:CB:72:0B:82:2A:DB:A5:36:4C:CE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3533E98DE92225624B6F8FCD2D146C1F155F4E68
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Thu 22 Jan 2026 13:42:06 +0000
ROA not before: Thu 22 Jan 2026 13:37:06 +0000
ROA not after: Thu 21 Jan 2027 13:42:06 +0000
asID: 14618
IP address blocks: 45.139.182.0/24 maxlen: 24
181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:33:e9:8d:e9:22:25:62:4b:6f:8f:cd:2d:14:6c:1f:15:5f:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 22 13:37:06 2026 GMT
Not After : Jan 21 13:42:06 2027 GMT
Subject: CN=40AC14B01E52AABF3C66CB720B822ADBA5364CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:13:e8:a1:ad:b2:ea:33:c0:ad:bd:08:b2:
a7:e7:b9:3d:a7:85:98:e4:10:36:2f:1b:3f:f3:36:
8e:0d:75:f7:0f:7c:ba:54:3a:61:ef:32:c1:6d:aa:
29:ad:0c:98:3b:f4:43:fb:c8:42:ef:26:53:b7:de:
19:35:5b:11:bf:d8:70:b8:21:1e:ce:50:d6:2b:d3:
3b:93:d1:16:2d:8f:bf:b1:36:11:ea:21:eb:ea:3b:
2a:96:47:43:f3:9b:3e:ea:ee:c9:69:b1:72:5a:8d:
90:fb:08:0c:3a:10:b4:0f:8f:76:e3:37:61:6e:2c:
e7:2a:c2:7d:71:a6:85:67:46:09:99:61:92:a5:d7:
12:4b:85:e3:02:54:ef:cc:ae:50:22:71:bf:ef:f6:
6c:83:ff:2b:9b:d8:3b:7a:6a:dd:88:61:c3:b5:fa:
05:30:0d:6d:d9:11:c4:9f:63:66:d2:d9:44:66:4d:
d0:2a:58:8d:31:e2:4e:2c:bf:b7:a6:a0:65:5e:fd:
2a:74:f9:80:8f:fb:96:f8:4b:25:a3:8f:03:41:dd:
2f:6e:42:ab:fa:1f:12:62:61:4a:b4:f3:99:27:e7:
23:1f:a5:f8:f0:cf:7d:5b:bf:aa:3b:c0:0b:ba:f9:
86:1c:3a:4d:0f:ce:11:2b:cc:85:8a:e5:63:4f:1e:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:14:B0:1E:52:AA:BF:3C:66:CB:72:0B:82:2A:DB:A5:36:4C:CE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.182.0/24
181.214.94.0/24
181.214.110.0/24
181.215.206.0/23
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
Signature Algorithm: sha256WithRSAEncryption
44:91:26:99:7a:36:bf:6d:ab:9a:74:06:ad:96:cd:07:d4:92:
ef:66:ff:e8:fe:7e:05:36:45:4e:2e:11:07:b5:a9:30:07:ae:
8e:93:96:2e:0e:6b:31:5b:99:40:96:17:5f:3d:c9:4d:be:56:
79:cd:b1:3b:dd:4b:f2:40:4c:ba:e9:5e:69:26:9b:66:13:c8:
8a:74:69:53:0b:bc:ce:09:e5:bc:83:02:29:ae:dd:16:a1:28:
b7:44:86:d9:2a:ed:5b:fb:cd:2e:bc:bc:8b:d8:29:10:55:1b:
67:4d:6a:cc:f3:1c:ee:62:cb:56:22:bb:e6:d2:56:85:b7:57:
9e:d0:75:da:cc:e9:41:cd:96:f9:d3:eb:c5:11:c8:cf:a2:b8:
01:e0:8c:e2:7e:f8:bc:3a:65:da:9c:2c:59:ad:ee:1f:c9:a5:
10:d4:91:b1:fe:3a:4b:5d:dd:2d:ee:bd:dc:94:05:a4:e2:5b:
b3:13:5b:8e:85:27:bb:6d:24:3a:43:94:07:81:13:31:88:da:
c1:75:ed:73:17:52:c3:80:ca:b0:72:bb:9a:e2:86:14:ef:ff:
89:16:3b:a9:26:b6:61:ab:ab:0a:be:e1:ac:af:f5:c0:6d:b7:
bc:fc:48:c9:76:fd:90:91:3d:b3:ac:f1:19:1c:a6:de:27:8a:
89:6e:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:43:09 2026 by rpki-client