Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: prrsQNZIw1deu9lmiAIRuNHmX8Y0MneVmQh2ryBlg1Y=
Subject key identifier: 7C:78:9C:D2:B8:20:A8:D0:FC:26:87:BE:A3:52:5F:39:3D:1B:0D:43
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6523B69E973F9E1B98CED683134918E80D9F004E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Sat 02 May 2026 16:27:04 +0000
ROA not before: Sat 02 May 2026 16:22:04 +0000
ROA not after: Sat 01 May 2027 16:27:04 +0000
asID: 14618
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.95.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:23:b6:9e:97:3f:9e:1b:98:ce:d6:83:13:49:18:e8:0d:9f:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 2 16:22:04 2026 GMT
Not After : May 1 16:27:04 2027 GMT
Subject: CN=7C789CD2B820A8D0FC2687BEA3525F393D1B0D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0e:a7:27:1a:e2:77:76:bb:ff:bb:cb:e6:c1:
82:d6:73:7c:cc:0f:38:5d:eb:84:2d:78:27:04:af:
ab:2b:a1:71:fe:fb:78:e9:f6:a1:43:e5:d6:cb:d1:
f7:06:2d:91:4e:2e:3d:cd:54:fb:88:5e:a9:7a:a0:
75:e8:b9:79:7a:2d:bb:86:bf:b8:ad:83:f7:50:ed:
6f:0c:eb:49:59:f7:3e:f4:89:d6:d8:56:8c:9f:95:
95:22:2e:85:4b:93:63:8b:30:9b:7d:a8:52:96:fe:
78:64:de:7e:1b:b0:72:06:53:16:58:ba:ec:c6:55:
e7:a7:2e:89:ab:e9:e8:cc:92:47:d8:e1:f7:4a:51:
ef:aa:e9:61:6a:dc:0f:d5:33:c4:c4:10:9d:95:17:
8d:f9:96:1f:f5:e1:32:31:f6:32:35:92:cf:f0:40:
b5:e7:b0:07:43:ec:27:77:84:76:dd:d6:91:42:1d:
7e:f6:58:6f:61:8b:e6:df:d2:3e:65:04:27:f1:64:
1f:d2:f8:18:4b:0d:79:cd:1e:e5:a7:69:6b:71:55:
32:d0:4e:70:6a:11:36:d0:09:3c:45:8a:37:e7:4b:
cd:35:11:f1:24:ea:63:ba:ea:24:3c:ee:1c:cd:d1:
95:01:ff:0d:ad:6e:48:84:8c:71:06:ba:61:a2:da:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:9C:D2:B8:20:A8:D0:FC:26:87:BE:A3:52:5F:39:3D:1B:0D:43
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.42.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.135.202.0/24
178.92.101.0/24
178.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
07:65:05:ae:0e:b7:8e:a2:8a:00:30:cf:26:50:22:3a:1e:e4:
04:45:5d:a1:3a:23:16:5d:f1:52:52:01:ac:3e:58:45:30:51:
83:8b:f2:93:28:0c:01:79:66:5d:3d:27:0b:ec:93:c1:c4:2b:
32:b6:f7:6f:6e:07:f7:70:5f:37:3e:1d:22:8c:0c:c8:e7:5e:
38:7a:7a:db:06:1d:ba:a0:6d:9d:c2:69:b1:53:0d:f6:07:20:
d8:aa:cb:32:a6:f4:73:80:43:e1:80:d9:1b:59:9f:80:f6:51:
67:82:97:14:94:d9:f7:42:2c:11:9a:94:dd:f3:2d:99:b2:11:
a1:89:6d:e9:ff:a9:7b:48:b5:45:de:94:7c:96:33:ea:b8:55:
b4:24:7c:2a:58:57:ac:65:8b:60:cb:4d:d6:a8:00:b2:cf:06:
68:0c:b2:51:6c:32:7a:8f:f1:f8:21:79:7b:68:9f:b8:40:85:
fa:66:5e:af:74:2f:7e:c1:78:bd:da:d1:28:04:12:3f:9d:44:
85:d9:43:03:65:d3:dc:2e:53:ba:dc:d7:a0:09:de:61:11:64:
10:58:70:dc:f6:81:ff:cd:32:4d:79:cb:24:7e:a7:08:d8:51:
d2:e6:66:cf:f4:1a:a6:ec:e4:dc:92:ab:5f:47:37:b4:d7:30:
17:44:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:37:40 2026 by rpki-client