Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: unfLnOPGYWSZKGThDLjBonRuvpmdc2jcLd5SqWtHViw=
Subject key identifier: 14:71:B5:80:49:71:E7:75:CC:90:38:97:72:5A:D1:52:BC:7B:FF:4C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 17BFC70D63D18D1ED7BFDDA0A52AA115444548CC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
Signing time: Wed 16 Sep 2026 07:00:03 +0000
ROA not before: Wed 16 Sep 2026 06:55:03 +0000
ROA not after: Wed 15 Sep 2027 07:00:03 +0000
asID: 14618
IP address blocks: 51.241.200.0/24 maxlen: 24
87.81.32.0/19 maxlen: 24
188.220.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bf:c7:0d:63:d1:8d:1e:d7:bf:dd:a0:a5:2a:a1:15:44:45:48:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 06:55:03 2026 GMT
Not After : Sep 15 07:00:03 2027 GMT
Subject: CN=1471B5804971E775CC903897725AD152BC7BFF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:78:24:99:48:58:62:42:6d:f1:88:49:9e:
ba:d0:7a:60:98:e9:0e:e5:38:c1:52:07:85:6a:d6:
b0:a0:aa:77:8b:a7:b5:d8:e6:c8:67:bc:9b:84:87:
78:51:11:aa:23:55:35:2e:7d:81:79:83:9b:52:09:
e3:e8:b2:0d:91:bd:ae:8b:6c:a6:37:2f:8f:11:6d:
0f:45:30:87:c5:67:ea:87:d7:d2:6d:4f:23:49:2a:
48:c5:eb:0b:75:26:6f:5d:a7:22:ef:6d:d4:78:9f:
a6:d6:47:b8:09:aa:56:7f:0b:1e:4f:47:30:fc:31:
ca:03:f6:1c:f9:36:2c:cb:2a:8f:af:64:dc:7e:88:
d7:1f:59:6e:24:49:5c:52:13:df:95:74:3f:7a:cf:
93:76:34:90:59:f4:c8:c4:99:31:81:e4:9b:c0:96:
bc:34:91:cb:c9:9e:b3:3e:a8:2d:7b:8e:08:b4:d3:
bd:55:0f:10:65:d9:05:14:15:33:16:8e:1f:88:75:
de:c0:03:8a:4b:35:5c:96:61:d7:cc:97:cb:ab:e6:
22:05:79:77:c7:7b:0d:b6:02:3e:87:17:90:bc:f7:
16:ed:4a:d2:af:92:d9:f2:3f:74:db:f0:2a:32:4c:
a2:e2:cd:0e:2a:61:5c:f3:f4:55:7e:94:ac:ac:4e:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:B5:80:49:71:E7:75:CC:90:38:97:72:5A:D1:52:BC:7B:FF:4C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.200.0/24
87.81.32.0/19
188.220.80.0/22
Signature Algorithm: sha256WithRSAEncryption
80:12:e8:47:7a:30:62:69:6b:7e:55:97:c5:dc:84:f3:1c:a8:
2c:ab:af:37:0d:53:c1:f6:b6:9a:20:78:40:ef:06:68:be:3b:
1f:61:55:64:cc:5b:c6:62:e9:e7:77:c8:01:91:1b:62:7d:be:
3e:3c:87:ee:f5:51:7f:8b:94:d1:f8:3f:24:5b:4e:01:fa:ea:
aa:7b:60:34:7a:c9:e1:de:01:de:04:88:b8:9b:e0:80:b3:7d:
cb:b6:72:21:75:54:26:27:db:cb:71:0e:e5:7a:89:89:b7:e7:
ee:01:88:d0:68:37:d5:64:da:95:39:84:43:da:37:15:a5:41:
66:aa:3a:ef:2d:37:62:89:11:75:91:3a:a6:6c:76:d5:20:07:
6d:3c:f1:54:d9:45:eb:75:21:fe:13:1d:4d:e6:59:1c:ed:02:
c5:cd:00:40:d3:f2:f2:09:f0:68:70:a0:68:44:eb:f2:31:40:
73:d9:2b:23:dc:04:df:d1:46:a2:c2:ea:51:fc:ff:4f:f3:14:
7c:29:8d:ec:a6:a8:b2:01:ed:25:33:28:5e:a9:f8:cd:a1:be:
24:a1:71:7e:73:9d:b7:ed:67:39:37:1e:2d:25:79:84:74:48:
1c:e1:7c:eb:21:3d:ef:14:2c:c0:38:e2:ce:da:c1:5e:fd:8c:
27:8e:89:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:03:31 2026 by rpki-client