Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: w22mwSIgKZB+NUNUXrACcvMl78ENfFCo9KIYBo6ipdk=
Subject key identifier: 7E:07:98:CC:63:A1:23:10:31:00:C2:75:77:B9:E1:45:72:90:7F:3C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6DAE44D30697D36D89F15414CE0A8297E7DE60F3
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
Signing time: Fri 30 Oct 2026 02:06:47 +0000
ROA not before: Fri 30 Oct 2026 02:01:47 +0000
ROA not after: Fri 29 Oct 2027 02:06:47 +0000
asID: 14618
IP address blocks: 2a14:7580:ff9f::/48 maxlen: 48
2a14:7583:e400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ae:44:d3:06:97:d3:6d:89:f1:54:14:ce:0a:82:97:e7:de:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 30 02:01:47 2026 GMT
Not After : Oct 29 02:06:47 2027 GMT
Subject: CN=7E0798CC63A123103100C27577B9E14572907F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:69:d4:d8:d0:b9:24:a4:a3:7f:ad:c7:8d:
a6:b5:6f:37:44:74:4a:ff:bf:2a:a6:29:5d:7f:bf:
80:f0:15:a3:fe:98:57:10:b6:c5:aa:06:ae:cc:03:
a6:c1:01:4e:ff:d2:7a:a3:cf:6f:77:f2:27:a8:e3:
40:6a:29:6e:fb:9c:47:0d:66:c2:d0:6b:ec:95:43:
5d:9f:ab:46:25:7a:1f:9d:95:6e:5d:fb:83:ce:e8:
23:0c:9f:77:4f:58:ed:f0:9d:4f:b6:eb:56:da:35:
0f:13:49:28:6e:ab:21:52:ee:14:ad:2d:e6:c9:8f:
f8:94:81:af:23:08:1c:7f:d6:05:e8:39:45:96:f5:
ed:76:0e:7d:84:15:ff:30:85:9e:01:01:1f:83:fc:
57:a7:dc:24:79:a6:9b:a9:62:7a:ab:b5:70:75:8b:
07:b3:fb:57:d4:6f:a8:04:a8:93:2f:82:38:a2:c0:
4b:0b:ce:28:6d:14:d7:d6:dd:0a:69:0b:7f:7b:85:
52:61:38:4e:ed:31:16:be:08:fc:05:3c:43:31:89:
f2:58:0a:5f:28:76:dd:62:c9:cf:63:a7:a0:d1:cb:
5d:e3:8c:dd:3c:fa:55:59:f5:66:57:1d:af:fa:f2:
2e:5e:4d:6f:f4:79:47:b5:90:22:34:9e:af:c0:fa:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:98:CC:63:A1:23:10:31:00:C2:75:77:B9:E1:45:72:90:7F:3C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9f::/48
2a14:7583:e400::/40
Signature Algorithm: sha256WithRSAEncryption
28:90:3a:9f:d1:2c:e7:fa:23:40:40:94:22:19:48:53:66:2d:
a3:b8:1f:c1:a5:9b:b0:75:10:50:24:ef:a5:31:ef:bd:3a:68:
16:ae:fd:b8:f9:36:e2:25:2e:50:75:30:1a:4a:05:19:ef:75:
5a:7d:da:93:6c:d8:71:61:56:40:d0:4c:79:1a:3f:ed:49:7e:
32:3c:d0:8a:2b:15:6e:1e:e1:05:d4:f7:aa:ee:ef:f1:ff:82:
24:24:16:2a:cc:74:ce:2e:aa:b4:3f:73:95:05:7c:75:74:78:
08:c6:00:7d:88:52:66:af:65:b5:bf:7c:26:2a:3c:40:df:8c:
91:ea:0c:76:17:ed:82:ad:77:9f:49:c0:25:b8:f5:83:42:c4:
80:59:d3:aa:e9:a5:68:6a:cd:97:f6:d9:da:50:33:15:d5:c2:
5c:bd:df:c5:b1:58:f4:3e:97:dc:da:9b:f5:53:9f:a8:56:0c:
84:27:be:c8:fc:33:48:d4:6f:a2:c4:8e:44:83:0d:8e:66:12:
e2:93:b5:51:8e:8a:a4:e1:d7:93:9d:20:7a:f1:93:49:1e:8e:
3b:11:35:4d:a8:ec:14:6f:3a:fd:c2:fb:18:13:1e:82:b0:ca:
74:6b:cd:21:e4:fe:98:50:27:f9:d2:af:d1:b6:51:6a:97:ba:
c9:ec:ba:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 7 14:20:48 2026 by rpki-client