Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
File: AS14670.roa (raw, json)
Hash identifier: B+EiRvAUp7r2Icvmbxgh/Bs8CZwVvQk3Q66SdGRzvgQ=
Subject key identifier: B1:27:AE:AB:36:F4:C0:70:00:13:AD:BE:D1:84:91:F4:D2:A9:FB:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5F82FBFA11F2A714E4E87A402848D19ECE6254FE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
Signing time: Tue 15 Sep 2026 15:49:35 +0000
ROA not before: Tue 15 Sep 2026 15:44:35 +0000
ROA not after: Tue 14 Sep 2027 15:49:35 +0000
asID: 14670
IP address blocks: 179.61.137.0/24 maxlen: 24
179.61.192.0/24 maxlen: 24
179.61.232.0/24 maxlen: 24
181.214.31.0/24 maxlen: 24
181.214.83.0/24 maxlen: 24
181.214.142.0/24 maxlen: 24
181.214.156.0/24 maxlen: 24
191.96.133.0/24 maxlen: 24
191.96.151.0/24 maxlen: 24
191.96.165.0/24 maxlen: 24
191.101.33.0/24 maxlen: 24
191.101.50.0/24 maxlen: 24
191.101.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:82:fb:fa:11:f2:a7:14:e4:e8:7a:40:28:48:d1:9e:ce:62:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 15 15:44:35 2026 GMT
Not After : Sep 14 15:49:35 2027 GMT
Subject: CN=B127AEAB36F4C0700013ADBED18491F4D2A9FB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:87:34:08:9f:f6:54:94:87:ae:5c:e5:1f:
ea:75:6b:3d:1f:d6:bf:72:e4:85:a9:29:5d:3a:3c:
3d:ac:71:bc:40:7a:23:01:04:2e:c3:70:42:e9:68:
e4:ae:f8:d0:a6:39:02:9a:a0:e5:ad:db:fe:b6:56:
31:15:42:8a:80:ad:0e:8a:fc:07:e0:1a:1e:11:c8:
1b:31:4f:58:39:71:d9:99:d5:91:c2:06:31:01:e7:
0a:fa:cc:68:74:00:3a:7d:1b:fa:3f:73:83:29:12:
b6:f1:10:c4:12:cf:2e:6f:f7:43:30:25:7c:4e:17:
e4:eb:0c:14:84:ac:86:ce:cb:cc:2b:a6:dd:9f:bd:
5b:7a:d0:30:ab:14:1b:37:8d:4e:2c:c9:e2:30:26:
cc:7c:55:cc:60:22:60:30:d2:b5:c5:15:ba:5a:1d:
0e:1f:2c:66:3a:35:00:bd:0d:a8:8b:35:47:98:28:
12:cc:e5:6d:59:b0:7d:96:6f:5f:a2:0e:b7:5d:c8:
13:36:74:aa:00:b3:e2:ca:bb:2f:93:98:aa:65:e0:
6f:fa:77:9d:0d:6d:ad:14:6c:b8:3e:c3:e9:77:7a:
9b:2b:99:87:8e:ac:98:fd:f0:5b:c4:b6:ec:f1:7c:
29:0b:4f:23:0f:f9:99:bd:3b:f5:64:47:94:8a:13:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:27:AE:AB:36:F4:C0:70:00:13:AD:BE:D1:84:91:F4:D2:A9:FB:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.137.0/24
179.61.192.0/24
179.61.232.0/24
181.214.31.0/24
181.214.83.0/24
181.214.142.0/24
181.214.156.0/24
191.96.133.0/24
191.96.151.0/24
191.96.165.0/24
191.101.33.0/24
191.101.50.0/24
191.101.241.0/24
Signature Algorithm: sha256WithRSAEncryption
95:63:3f:20:3b:42:a4:20:1a:96:c4:d2:34:2f:20:5d:4d:ee:
37:42:a3:35:f8:9d:cc:1e:23:87:af:99:c6:7e:f5:2d:f9:6e:
2d:a2:a1:7b:72:fa:43:de:84:e3:32:5f:aa:e2:11:ad:34:13:
e8:04:97:1e:21:a7:7f:8a:70:70:7c:c2:c8:96:ed:51:d1:11:
e0:78:4e:70:b0:3a:90:d4:c2:f8:97:76:c6:97:b6:be:01:be:
8d:5c:03:89:19:b5:8a:4b:fc:2d:a6:4c:1a:2c:1c:d6:8c:b6:
ff:4c:3a:e1:0c:0b:0c:a5:51:e3:3b:d3:e3:a6:27:bf:3d:ed:
99:2a:ea:05:da:ce:12:57:ae:2f:fe:ed:d3:d3:76:26:b3:26:
08:db:8c:bc:52:4c:22:ef:e0:fb:06:24:bf:53:d7:87:ac:03:
81:ab:ec:24:a0:b5:2a:1f:68:7f:88:48:33:c4:67:03:2b:7b:
63:61:a4:0d:9f:4a:17:34:71:02:6e:71:4b:e6:ea:46:18:55:
e9:d3:1a:e3:3b:41:03:c1:42:de:db:5a:ba:5c:40:29:a4:1c:
3b:be:40:71:91:3a:dd:1e:0e:1a:bf:8a:96:e1:12:f9:bc:f7:
27:05:cd:2b:6f:de:74:60:f2:e1:e5:0e:b0:78:10:1b:87:7f:
dc:85:fd:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX4L7+hHypxTk6HpAKEjRns5iVP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MTUxNTQ0MzVaFw0yNzA5MTQxNTQ5MzVaMDMxMTAvBgNV
BAMTKEIxMjdBRUFCMzZGNEMwNzAwMDEzQURCRUQxODQ5MUY0RDJBOUZCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCJIc0CJ/2VJSHrlzlH+p1az0f
1r9y5IWpKV06PD2scbxAeiMBBC7DcELpaOSu+NCmOQKaoOWt2/62VjEVQoqArQ6K
/AfgGh4RyBsxT1g5cdmZ1ZHCBjEB5wr6zGh0ADp9G/o/c4MpErbxEMQSzy5v90Mw
JXxOF+TrDBSErIbOy8wrpt2fvVt60DCrFBs3jU4syeIwJsx8VcxgImAw0rXFFbpa
HQ4fLGY6NQC9DaiLNUeYKBLM5W1ZsH2Wb1+iDrddyBM2dKoAs+LKuy+TmKpl4G/6
d50Nba0UbLg+w+l3epsrmYeOrJj98FvEtuzxfCkLTyMP+Zm9O/VkR5SKE1krAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsSeuqzb0wHAAE62+0YSR9NKp+w8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ2NzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4DBACzPYkD
BACzPcADBACzPegDBAC11h8DBAC11lMDBAC11o4DBAC11pwDBAC/YIUDBAC/YJcD
BAC/YKUDBAC/ZSEDBAC/ZTIDBAC/ZfEwDQYJKoZIhvcNAQELBQADggEBAJVjPyA7
QqQgGpbE0jQvIF1N7jdCozX4ncweI4evmcZ+9S35bi2ioXty+kPehOMyX6riEa00
E+gElx4hp3+KcHB8wsiW7VHREeB4TnCwOpDUwviXdsaXtr4Bvo1cA4kZtYpL/C2m
TBosHNaMtv9MOuEMCwylUeM70+OmJ7897Zkq6gXazhJXri/+7dPTdiazJgjbjLxS
TCLv4PsGJL9T14esA4Gr7CSgtSofaH+ISDPEZwMre2NhpA2fShc0cQJucUvm6kYY
VenTGuM7QQPBQt7bWrpcQCmkHDu+QHGROt0eDhq/ipbhEvm89ycFzStv3nRg8uHl
DrB4EBuHf9yF/fw=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:03:34 2026 by rpki-client