Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: wFCttlkvyv09Ncs3uo1CiNUOriJr4us5d1QrQKPG6Bo=
Subject key identifier: A9:FD:A8:7C:88:5F:87:D5:FE:3C:48:32:84:5B:98:92:83:EA:2E:EA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 279A0F3AF50D9A5810F6A03D0F50812423453816
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
Signing time: Mon 04 May 2026 07:07:44 +0000
ROA not before: Mon 04 May 2026 07:02:44 +0000
ROA not after: Mon 03 May 2027 07:07:44 +0000
asID: 14618
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.92.0/24 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:9a:0f:3a:f5:0d:9a:58:10:f6:a0:3d:0f:50:81:24:23:45:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 4 07:02:44 2026 GMT
Not After : May 3 07:07:44 2027 GMT
Subject: CN=A9FDA87C885F87D5FE3C4832845B989283EA2EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:96:4b:a0:f7:04:89:b2:7b:f4:43:97:67:
1d:56:32:8b:99:19:97:47:fd:49:ba:2a:55:5b:55:
48:6e:1b:ff:e2:91:db:a6:d3:58:b0:04:8a:18:bd:
21:a9:d5:c9:be:8c:0a:48:4f:d3:f4:af:30:4d:04:
73:fd:21:dd:86:c0:ec:62:73:0e:b4:35:aa:43:1b:
a2:2f:a4:13:34:1f:69:d3:51:2e:e0:f1:1e:f6:32:
71:83:55:aa:da:42:34:61:c4:5e:7b:c4:18:76:3c:
f0:b7:5e:b0:04:f2:7e:cf:31:5d:59:df:27:4a:2f:
a7:d9:0a:93:cb:c5:bc:37:36:40:af:2e:95:d8:09:
e7:be:c2:f5:71:2a:d0:7f:48:f6:e4:d0:88:b4:49:
6f:72:f9:fd:3c:9b:f5:c1:43:1e:2c:65:91:34:5c:
87:33:b8:2f:62:31:14:02:8e:29:69:98:ee:67:d1:
04:d4:4e:45:ca:8d:67:3e:eb:74:9b:1f:53:a9:a5:
38:bc:aa:c2:d5:b4:98:a1:8e:8b:8a:e9:a0:22:8c:
41:9c:68:51:32:16:fd:9a:95:61:ac:51:39:6c:2e:
e9:36:15:c9:b1:e0:43:9d:b3:cf:9d:04:d9:70:5b:
3e:7e:06:5c:85:77:60:33:2b:53:c4:d4:c6:70:da:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:A8:7C:88:5F:87:D5:FE:3C:48:32:84:5B:98:92:83:EA:2E:EA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.92.0/24
141.11.112.0/24
141.11.115.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2d:f1:c5:d1:90:8c:37:93:9e:94:b0:93:ea:2a:b6:73:cb:
80:27:5d:ff:b9:2e:8c:0c:95:b1:1f:71:2c:2a:c9:e3:eb:00:
18:65:03:95:4a:eb:e9:4b:b9:99:7a:e4:9f:36:4f:92:13:53:
53:d3:21:00:9a:27:56:10:c9:e4:a7:41:67:c6:87:72:fe:a1:
80:6c:b8:8f:5e:f2:e1:c7:6a:a5:b3:8a:f5:55:ab:48:21:7e:
60:f8:5a:f7:37:60:8a:20:47:79:19:52:a5:4d:bf:b1:ad:7c:
dd:e7:f4:47:e0:21:02:d9:18:5e:c9:88:45:b9:c6:de:93:77:
74:8d:3c:ce:81:38:ce:64:90:b1:95:7b:89:dd:37:b6:79:0a:
c5:b1:cc:47:56:d7:99:ab:f4:e0:ee:86:0e:b1:35:ce:10:38:
50:16:93:80:ec:54:d0:63:04:b0:9c:7a:bf:7c:7d:f1:e8:b8:
41:dc:00:b8:02:ff:64:b1:55:50:8d:3b:19:38:e6:47:33:49:
ed:b5:14:2f:6b:b0:f1:07:4e:6e:6b:d5:35:2f:2b:f7:0e:ba:
82:2d:2e:84:8e:35:07:b8:f4:5f:ba:66:51:60:c7:24:1b:7d:
da:35:02:42:c5:f1:41:e2:d4:7e:aa:8b:1e:51:3f:44:13:08:
de:87:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:39 2026 by rpki-client