Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
File: AS14445.roa (raw, json)
Hash identifier: 0IEJCBbnEfw61ZHjGx1CEWfePsGiBuNcjlRJV/9a8UA=
Subject key identifier: 37:C7:B7:07:B5:F9:2B:E3:CC:EF:EB:18:3D:F7:2D:18:94:3C:AB:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 67BAE079C87DA486AEFF7B3256E684C881186EA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
Signing time: Sat 01 Nov 2025 00:09:02 +0000
ROA not before: Sat 01 Nov 2025 00:04:02 +0000
ROA not after: Sat 31 Oct 2026 00:09:02 +0000
asID: 14445
IP address blocks: 82.25.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ba:e0:79:c8:7d:a4:86:ae:ff:7b:32:56:e6:84:c8:81:18:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 1 00:04:02 2025 GMT
Not After : Oct 31 00:09:02 2026 GMT
Subject: CN=37C7B707B5F92BE3CCEFEB183DF72D18943CAB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:bd:15:84:4a:9b:e5:40:2c:8c:5b:a4:8f:
e9:7c:4e:01:c4:3a:e9:9f:b0:5b:8a:4c:11:ff:92:
c3:d2:d1:de:ea:82:e6:b5:12:d1:79:7e:fc:4e:5e:
16:b9:54:ee:bf:93:5f:0d:b3:ee:c2:2f:f3:85:8f:
3b:62:46:68:44:21:e8:6e:5a:5a:2e:24:8e:38:c8:
03:81:bd:4b:f1:00:37:dd:16:62:a7:be:0f:ca:cd:
48:29:5c:85:43:c1:03:db:02:6a:4e:77:11:cb:7f:
98:70:98:23:f6:59:7f:ed:3f:e8:5a:cb:94:f7:3f:
d6:25:71:62:9c:35:44:69:21:4a:d8:0b:0b:d3:97:
40:18:0a:19:4b:4f:97:9e:48:6e:02:e0:21:7f:d5:
71:1b:41:0d:94:ac:61:98:2a:16:b9:c6:9d:9d:ff:
b7:e7:66:97:05:2a:46:f4:4b:ee:ab:4c:8c:20:4f:
c6:f4:d6:fb:57:ef:7a:c4:62:82:fb:a0:9e:d1:32:
54:05:16:3e:14:b3:2f:20:45:e2:7b:53:47:53:a0:
19:b9:6c:d5:33:69:ef:56:24:aa:ef:4e:03:6d:9b:
ae:2d:5b:bd:ee:f0:c1:c3:93:7b:0d:66:af:59:5d:
0f:6e:9c:4d:00:00:41:4a:cf:03:ee:dd:5d:a7:09:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C7:B7:07:B5:F9:2B:E3:CC:EF:EB:18:3D:F7:2D:18:94:3C:AB:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
31:cf:9c:d6:75:13:20:88:0a:dd:39:9c:48:5d:eb:9d:86:28:
63:96:9a:70:e4:f3:ec:86:99:29:d0:a2:63:47:1b:8b:4d:f5:
6d:fe:04:ac:42:e4:3b:cc:4f:a6:dc:cf:1e:ba:2d:e8:84:9e:
26:44:95:39:05:7a:36:9b:c5:45:18:b3:84:11:e0:da:5f:ab:
ec:b7:f6:aa:5a:d3:5a:7b:c5:87:d6:59:a3:cd:d4:44:c9:ed:
3e:45:fb:1f:9f:7d:de:96:83:4f:dc:17:35:49:92:c1:a8:98:
ed:f6:22:f2:bf:9c:e7:68:43:60:04:e9:13:dc:3b:dd:f9:3d:
0d:12:ce:2f:da:23:8f:e5:ec:2a:e0:7c:9b:4d:63:0f:4c:d3:
08:d0:02:6a:90:d2:bc:8d:59:f2:9e:1f:c6:ce:27:d6:c6:91:
73:04:6e:7a:26:fa:ec:b5:db:cb:6d:59:f7:99:cf:bc:3d:78:
05:4f:82:4c:2a:6b:e8:30:fc:4b:7f:2d:31:28:b2:11:9c:40:
ea:57:1e:0b:cb:1c:59:ba:f6:94:43:56:d2:48:8a:97:db:9d:
12:7d:31:04:26:5b:8c:72:dc:a2:b8:80:56:95:27:b2:15:b6:
5a:7e:9a:e2:bb:87:2c:f9:a9:7a:0a:59:c3:b8:a4:5e:a8:90:
67:86:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:21:25 2025 by rpki-client