Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: 12GuonpTz34iUQdwOlnX1A7nk0ccmv+mCMF2ew0hyok=
Subject key identifier: B7:F2:F8:AA:E7:9F:32:F3:68:E1:51:6E:27:4E:78:52:51:63:AE:E0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0823DF6B10D5217384F8C5A559E842A2608774E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Fri 22 Aug 2025 00:06:39 +0000
ROA not before: Fri 22 Aug 2025 00:01:39 +0000
ROA not after: Fri 21 Aug 2026 00:06:39 +0000
asID: 14618
IP address blocks: 91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:23:df:6b:10:d5:21:73:84:f8:c5:a5:59:e8:42:a2:60:87:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 22 00:01:39 2025 GMT
Not After : Aug 21 00:06:39 2026 GMT
Subject: CN=B7F2F8AAE79F32F368E1516E274E78525163AEE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:da:2c:a9:4c:ba:9b:ef:57:3d:fc:26:6f:
c6:75:50:e7:45:ee:22:ed:70:d7:c2:7e:7b:27:9b:
ce:2f:9b:fa:19:9e:29:e2:4d:28:e2:18:8c:63:29:
db:3e:10:d8:1c:7e:07:58:f2:d7:a4:82:12:fb:df:
18:20:86:72:a7:92:db:41:fd:35:21:30:13:e1:13:
05:5f:e4:36:f3:e7:09:c3:64:14:19:b1:f1:43:3d:
65:b1:b8:6d:74:f8:45:60:91:cc:55:00:e7:33:0f:
1a:f1:9e:c6:cc:42:b2:c7:46:a0:96:cd:82:aa:5f:
83:5e:4b:f9:cc:95:57:ff:af:24:49:cb:95:ad:4d:
b5:a8:14:42:cf:2c:99:ca:ca:98:f2:45:99:e5:d8:
14:40:bf:14:02:08:f2:99:ce:29:2b:6c:1b:81:06:
76:e8:03:98:de:de:eb:61:9d:ae:0f:19:f8:b2:3a:
54:f9:af:6e:f2:95:71:7c:60:3a:65:45:cf:18:c1:
b6:d9:4d:49:e8:d0:e3:3d:76:74:a1:d8:fa:11:e7:
64:43:46:08:a1:43:f5:b2:10:59:78:71:74:1d:b6:
f9:11:3d:75:4d:4a:7b:5e:06:47:22:8e:71:1a:c2:
12:70:6c:50:15:b6:bd:1a:1c:66:b5:56:0a:25:2f:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:F8:AA:E7:9F:32:F3:68:E1:51:6E:27:4E:78:52:51:63:AE:E0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
Signature Algorithm: sha256WithRSAEncryption
53:fc:fd:1c:01:21:76:1e:75:65:e6:6e:ee:9d:e4:3d:42:25:
5c:f0:a0:d1:de:0d:21:c9:0d:4a:a8:4d:8f:e8:b8:9c:54:06:
ac:16:a3:7b:a2:08:4e:60:70:f3:1c:86:75:fc:25:c9:a2:11:
90:f7:0f:23:1f:e1:32:d0:e2:e9:86:43:0e:4e:e8:24:a5:a0:
be:9f:a4:c6:bf:af:40:7c:dd:db:9d:9e:a8:32:20:a4:0b:70:
32:e1:ca:92:aa:a1:b0:dd:45:2c:8a:de:82:1e:80:48:68:8a:
6f:c8:ab:66:e7:1a:b3:73:84:16:a4:c2:fe:f9:d0:ff:57:1a:
7a:d7:d3:36:5b:fe:96:2d:47:61:72:99:f2:07:d5:d9:7b:c2:
5d:c8:ca:55:83:53:c8:ea:c7:f2:d9:b6:9e:fc:11:e0:c7:69:
50:98:e0:fb:d9:a2:e1:7f:69:62:06:37:28:34:27:40:aa:b8:
eb:3f:bb:1a:60:ff:36:81:ba:ba:7d:6c:f0:e0:84:85:a9:1f:
48:89:e9:dd:4c:79:d2:cf:dc:1f:c3:a7:58:05:fc:07:82:b0:
53:1d:ee:ae:be:12:87:b3:31:55:72:8c:c3:cf:b7:03:bf:09:
3c:34:c1:e8:25:8e:be:f4:c6:6a:ad:17:cc:c6:de:5e:9e:45:
9c:18:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:35:10 2025 by rpki-client