Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: zdr43oyKzCVnCIaK5e/iqLe4a+8lRiwlnZUWbvjRfsM=
Subject key identifier: 7D:BE:55:EF:2D:07:CF:8B:4B:0C:19:EE:FA:62:67:A8:D7:92:C2:CE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 72CDA10E3809A79C02F57C60061B358191779E80
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Wed 23 Sep 2026 08:08:10 +0000
ROA not before: Wed 23 Sep 2026 08:03:10 +0000
ROA not after: Wed 22 Sep 2027 08:08:10 +0000
asID: 14618
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cd:a1:0e:38:09:a7:9c:02:f5:7c:60:06:1b:35:81:91:77:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 23 08:03:10 2026 GMT
Not After : Sep 22 08:08:10 2027 GMT
Subject: CN=7DBE55EF2D07CF8B4B0C19EEFA6267A8D792C2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:eb:b4:09:23:73:5b:f5:81:45:2a:d0:b0:
69:b1:51:e5:29:13:a5:29:cc:97:6f:ce:82:e9:88:
85:69:bc:f1:c2:1b:8f:75:4f:fc:6a:f3:c0:c0:06:
10:02:63:5f:d4:5b:ea:27:64:3d:20:a1:fe:bc:e4:
16:f3:f7:55:61:62:2f:cb:08:14:0f:4f:79:39:ff:
23:0a:d3:bd:b8:43:55:ec:59:fc:af:54:86:b9:7b:
88:c3:de:ca:51:d0:dc:90:3e:57:80:70:ef:a2:c4:
1b:56:a5:8b:0c:ad:89:02:e2:f8:cb:9d:97:ab:5d:
d9:7a:91:23:30:09:ae:8c:16:4e:0a:f0:3b:5b:71:
2a:d6:a1:91:a3:f1:24:8c:ca:c9:4e:4c:85:3a:ee:
49:9f:d6:27:ae:ec:b3:91:95:18:9a:fe:10:2b:6f:
2c:47:4d:6a:83:86:e6:8f:40:96:2c:a2:6e:cb:b8:
3b:18:ee:22:ad:ef:a6:a8:26:b2:44:df:17:43:cb:
3e:f7:82:78:bf:84:42:15:e2:72:62:bc:3b:bf:1a:
6b:e3:ff:ad:4f:23:a8:6c:43:d9:ab:df:bf:10:cd:
5e:29:f2:60:16:cb:a0:ef:aa:53:91:b0:55:35:f5:
f7:55:3c:5d:98:ff:75:45:5c:ef:aa:5f:9c:57:df:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BE:55:EF:2D:07:CF:8B:4B:0C:19:EE:FA:62:67:A8:D7:92:C2:CE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
181.215.206.0/23
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
4d:81:f3:dc:35:60:57:e0:7b:a4:72:64:47:f5:b0:e7:45:4a:
67:dd:d0:05:b4:92:9b:c2:25:dd:ee:b9:ee:8c:ca:11:e4:de:
54:89:6e:12:60:45:fa:61:9b:86:61:23:30:62:31:81:81:ff:
54:cc:db:e2:1e:44:6f:de:c5:5e:64:b3:82:64:7b:de:bd:f5:
5d:a2:3a:52:b5:ef:7d:d1:94:a5:f1:d9:9a:36:ff:9a:6a:40:
02:a6:b1:36:bc:a3:ad:47:79:9c:fc:d4:2f:0c:29:76:08:f1:
64:6b:22:d3:3f:73:be:85:30:66:b2:eb:4d:02:b8:97:91:fc:
de:fd:05:9e:8a:35:18:9b:f0:93:fd:d2:d0:0f:d1:0a:97:37:
53:5b:5b:4d:da:24:77:bb:7f:ca:66:80:98:72:88:e2:94:75:
26:24:78:33:22:ce:38:e3:d6:75:eb:1f:70:58:34:87:d7:40:
07:92:18:33:f9:c8:ee:0e:9f:c1:55:fc:6a:e7:49:66:33:dc:
20:cb:fa:f2:8c:ef:62:3e:98:2e:a6:0e:20:e1:e9:d0:33:ed:
df:e1:25:98:ec:5d:c1:00:31:9b:7f:de:a0:03:98:b2:58:d3:
50:27:e1:c0:94:89:46:1d:24:21:83:b4:b7:65:9e:26:51:42:
0b:f5:30:b2
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUcs2hDjgJp5wC9XxgBhs1gZF3noAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MjMwODAzMTBaFw0yNzA5MjIwODA4MTBaMDMxMTAvBgNV
BAMTKDdEQkU1NUVGMkQwN0NGOEI0QjBDMTlFRUZBNjI2N0E4RDc5MkMyQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKuu0CSNzW/WBRSrQsGmxUeUp
E6UpzJdvzoLpiIVpvPHCG491T/xq88DABhACY1/UW+onZD0gof685Bbz91VhYi/L
CBQPT3k5/yMK0724Q1XsWfyvVIa5e4jD3spR0NyQPleAcO+ixBtWpYsMrYkC4vjL
nZerXdl6kSMwCa6MFk4K8DtbcSrWoZGj8SSMyslOTIU67kmf1ieu7LORlRia/hAr
byxHTWqDhuaPQJYsom7LuDsY7iKt76aoJrJE3xdDyz73gni/hEIV4nJivDu/Gmvj
/61PI6hsQ9mr378QzV4p8mAWy6DvqlORsFU19fdVPF2Y/3VFXO+qX5xX31aDAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUfb5V7y0Hz4tLDBnu+mJnqNeSws4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUHAQcBAf8EPzA9MCoEAgABMCQDBAC11l4D
BAC11m4DBAG1184DBAC5iQ0DBAC/YMwDBAC/ZW8wDwQCAAIwCQMHASoA0aAAEDAN
BgkqhkiG9w0BAQsFAAOCAQEATYHz3DVgV+B7pHJkR/Ww50VKZ93QBbSSm8Il3e65
7ozKEeTeVIluEmBF+mGbhmEjMGIxgYH/VMzb4h5Eb97FXmSzgmR73r31XaI6UrXv
fdGUpfHZmjb/mmpAAqaxNryjrUd5nPzULwwpdgjxZGsi0z9zvoUwZrLrTQK4l5H8
3v0Fnoo1GJvwk/3S0A/RCpc3U1tbTdokd7t/ymaAmHKI4pR1JiR4MyLOOOPWdesf
cFg0h9dAB5IYM/nI7g6fwVX8audJZjPcIMv68ozvYj6YLqYOIOHp0DPt3+ElmOxd
wQAxm3/eoAOYsljTUCfhwJSJRh0kIYO0t2WeJlFCC/Uwsg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:30:35 2026 by rpki-client