Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: vC8lZ+3Lt3oer9FzByRS6Cs3w96EIm00KP1CTcC5eyY=
Subject key identifier: 96:00:60:A0:DF:48:C6:BF:8D:BA:01:03:D8:53:F0:96:F1:7B:02:B2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2B823D7F392521D415A58D6DD00D2F526632FA80
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
Signing time: Wed 23 Jul 2025 21:49:15 +0000
ROA not before: Wed 23 Jul 2025 21:44:15 +0000
ROA not after: Wed 22 Jul 2026 21:49:15 +0000
asID: 14618
IP address blocks: 45.155.17.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
193.164.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:82:3d:7f:39:25:21:d4:15:a5:8d:6d:d0:0d:2f:52:66:32:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 23 21:44:15 2025 GMT
Not After : Jul 22 21:49:15 2026 GMT
Subject: CN=960060A0DF48C6BF8DBA0103D853F096F17B02B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:8f:0c:9b:8e:e0:5e:b0:5d:18:07:ca:02:
0f:43:96:3a:e5:66:45:68:ae:cf:5d:d8:da:ce:ad:
5c:b0:2b:a2:f2:d3:66:11:d6:50:e5:44:17:b8:1a:
7b:f2:36:c0:23:3c:31:cc:70:81:cb:95:d0:a8:60:
63:7f:16:0b:b1:0c:58:5b:82:9f:de:72:69:7d:a2:
24:7b:6b:96:bc:93:ab:71:66:67:0f:47:17:e0:64:
c2:bf:28:31:6a:e2:af:e6:d0:ea:0c:9a:95:9e:d6:
d3:2c:aa:62:31:11:ff:03:f7:70:21:2c:15:2b:e0:
08:ca:4a:b5:b6:09:22:6b:ef:58:c4:c8:73:a5:e4:
77:f5:51:3b:f8:0e:37:47:13:a9:8e:83:8d:5b:81:
fb:b6:3f:cd:cc:09:e0:cc:81:94:af:b7:a1:8a:e6:
56:5a:ce:7d:84:dc:9f:f1:f3:ec:0c:7e:c4:40:42:
c6:10:12:ec:e1:35:97:7a:87:59:0b:9c:28:63:cb:
0e:76:26:cb:30:f5:6c:53:bb:99:83:87:6d:e6:99:
c6:64:7f:99:13:b5:23:fe:0b:8a:e2:08:16:11:88:
42:9f:ef:b2:c8:29:d8:c6:93:46:bc:e8:9f:0b:d4:
5d:c5:e5:36:17:76:71:29:e0:4b:02:86:27:88:01:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:60:A0:DF:48:C6:BF:8D:BA:01:03:D8:53:F0:96:F1:7B:02:B2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.17.0/24
193.151.181.0/24
193.164.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:01:b8:b2:da:59:9a:7c:ce:ac:c3:1b:c6:e8:0f:fb:0e:cb:
ee:98:86:29:12:50:e8:c4:1b:ef:72:18:24:3f:b0:c6:7c:1b:
65:bf:2c:5a:fa:68:f3:66:b8:1e:51:a4:5f:7d:74:a1:72:54:
16:4f:99:98:f7:b7:43:74:a9:60:78:40:a4:31:89:fb:26:c5:
7e:29:9a:12:fc:96:d6:69:84:31:2f:31:59:5e:84:d4:ad:b1:
ca:f9:d7:03:d1:5e:5c:6f:5e:ff:9a:24:22:96:b4:aa:7c:23:
d7:92:ec:79:b9:f4:13:14:33:44:4c:c0:24:39:fa:c4:4d:d3:
1b:7e:a2:ed:1e:d1:ce:b8:2e:89:6f:b3:a4:57:90:d0:a9:5a:
f5:0c:64:fa:80:4f:49:7e:2e:9e:03:36:20:1a:28:8a:bf:96:
79:1b:79:18:1b:04:5f:9d:8e:6f:b3:60:07:a8:1f:1e:23:5e:
49:b4:45:a8:af:3f:cb:84:fa:c7:d8:03:a6:29:bd:59:be:8c:
c0:00:dd:00:cd:1c:06:00:2d:da:00:bc:97:33:1a:6b:78:1b:
fa:16:a5:92:7a:0d:e4:3b:63:87:63:a3:20:42:a8:e5:88:72:
cc:6f:70:a2:a2:ed:04:df:f3:29:81:ce:43:4f:03:7b:46:31:
2c:e7:67:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:52 2025 by rpki-client