Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: OqyhlWortJZWZn412elE/TujLYeY1lg5k86zPbGks0M=
Subject key identifier: CD:AE:10:E1:CD:F8:00:16:26:8B:52:39:2E:90:3D:5F:9E:82:FE:76
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 70C2C410D83257D7315F47D7F771B18D9FF58419
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
Signing time: Thu 29 Oct 2026 09:14:04 +0000
ROA not before: Thu 29 Oct 2026 09:09:04 +0000
ROA not after: Thu 28 Oct 2027 09:14:04 +0000
asID: 14618
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c2:c4:10:d8:32:57:d7:31:5f:47:d7:f7:71:b1:8d:9f:f5:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 29 09:09:04 2026 GMT
Not After : Oct 28 09:14:04 2027 GMT
Subject: CN=CDAE10E1CDF80016268B52392E903D5F9E82FE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:a7:9a:08:af:02:a6:b7:da:62:8b:7e:60:
d5:96:d0:17:f9:74:f5:42:18:08:d4:c4:28:37:fa:
4e:71:e0:3f:9f:2e:a9:3a:b0:ed:ea:62:3b:99:93:
b2:75:d0:fb:5e:1e:f9:bb:9b:71:22:03:02:98:50:
08:71:ec:99:fc:78:63:7e:d3:e9:48:55:87:27:8c:
8c:d1:e0:49:21:4d:f7:3c:92:e5:68:10:f7:8f:45:
6a:a0:6c:01:7b:77:1d:f5:58:26:8a:c6:60:3a:db:
15:6c:6f:b5:9f:6e:98:c1:9e:3a:53:0e:03:ee:3e:
6b:62:aa:c5:69:51:dd:41:49:d2:da:cb:9f:61:2b:
0c:f2:1a:61:d3:c5:65:a5:84:bb:de:c5:b1:f3:a5:
64:19:a2:7f:eb:51:e4:01:92:dc:80:47:70:df:2b:
3e:c3:1f:c6:11:d3:ee:77:d8:1d:75:3c:ab:39:d3:
aa:7a:0b:82:81:14:3c:9b:94:4e:cc:52:bf:70:96:
f7:0a:94:68:63:fb:a6:29:d0:88:43:d5:c5:e2:6d:
60:c2:73:c2:6c:9a:71:ac:cf:cb:fe:a4:db:4b:b7:
6c:db:08:54:1f:23:4e:97:e2:cb:8c:e3:86:05:35:
2f:6f:73:67:39:91:93:e2:39:0f:cd:06:06:10:ea:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:10:E1:CD:F8:00:16:26:8B:52:39:2E:90:3D:5F:9E:82:FE:76
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
3d:c3:91:71:70:e5:09:f8:5b:75:11:c5:25:50:4c:21:f1:03:
cb:b4:61:04:9a:d2:5b:6b:18:5a:55:84:86:7b:8c:84:a5:e1:
04:1e:5f:4d:40:17:ff:3b:cc:44:36:24:9e:a3:b4:f6:14:2c:
ef:c5:cf:31:ae:66:e8:99:cb:94:cb:8e:1d:67:a5:40:92:07:
66:21:a0:14:c6:ef:bb:ef:d7:d5:cc:8f:46:fb:4f:14:63:26:
b9:55:9c:37:02:3e:a7:cd:0e:66:ef:64:29:cd:b1:e1:b9:d2:
5c:24:5b:1f:4d:d2:40:7f:80:7f:43:18:f3:55:ff:e3:10:e3:
82:ff:79:f0:fe:b5:86:f5:06:bf:1a:03:48:e6:0d:15:27:d6:
c3:63:d5:9b:8c:40:a0:52:02:ad:88:f6:4a:63:3d:bb:36:dc:
9d:4c:1c:b3:0f:28:fb:87:61:2e:b3:7b:d6:d2:90:c0:51:91:
5f:5d:53:3f:8f:74:8f:4e:6e:ba:37:25:18:1c:85:53:6c:ec:
ce:b9:61:78:33:6d:91:8c:d8:a7:ae:be:97:64:37:da:54:5a:
9d:ba:1e:49:69:20:ee:69:32:1a:d4:87:30:43:de:9b:6f:5f:
64:cb:f4:da:1c:78:56:34:9b:fb:1b:14:f9:93:cc:b3:eb:f5:
20:a5:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:44 2026 by rpki-client