Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: +ZCMcc09GOGvH+RPQywhAOM/4k0Qko/J6RijUH1Gf1A=
Subject key identifier: C3:FC:D1:88:35:5C:CD:52:32:AB:94:B7:E0:24:C8:A3:46:1F:C3:1B
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 4CC56D70C4B9C86D6A7C532E80A085EE16421B66
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS14618.roa
Signing time: Mon 21 Sep 2026 16:43:25 +0000
ROA not before: Mon 21 Sep 2026 16:38:25 +0000
ROA not after: Mon 20 Sep 2027 16:43:25 +0000
asID: 14618
IP address blocks: 177.28.8.0/24 maxlen: 24
177.28.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c5:6d:70:c4:b9:c8:6d:6a:7c:53:2e:80:a0:85:ee:16:42:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 21 16:38:25 2026 GMT
Not After : Sep 20 16:43:25 2027 GMT
Subject: CN=C3FCD188355CCD5232AB94B7E024C8A3461FC31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:8d:5c:64:99:f4:55:01:38:7d:22:d8:73:
cf:fd:4d:de:0a:f3:2e:7e:57:92:7c:60:6f:1e:e4:
b0:0d:07:b9:fe:4d:fe:b9:91:41:06:4e:a0:5b:12:
54:b6:e8:2a:61:be:71:5e:19:99:36:e4:3b:f7:6f:
06:5c:44:55:8b:2f:ce:0a:8b:a1:17:e9:c9:fd:df:
7e:92:c6:fb:85:b5:a2:3f:62:98:6f:f9:2a:b0:16:
60:6a:1a:4c:29:76:1f:35:d9:99:12:46:b7:90:ee:
7f:63:42:1b:c3:ee:44:c8:b9:f3:92:d6:3e:a7:99:
19:47:29:80:a6:1b:1e:aa:70:1c:d9:3f:43:bd:da:
f9:a0:f1:b4:8f:81:90:84:09:50:1a:7c:6b:fa:9a:
3e:49:8e:80:cd:fc:dc:75:fa:42:f5:4b:8b:60:d5:
1a:7f:bb:09:2f:f7:29:e5:ba:6b:62:ce:59:45:8d:
a8:a6:3e:81:86:89:30:5f:b9:f1:2d:e1:b9:94:66:
70:1d:ee:15:e6:57:27:0e:8c:60:20:97:19:a7:35:
93:e5:71:13:19:ad:29:75:13:1e:82:4b:94:c5:e9:
0b:7e:73:62:e1:1a:b7:57:8e:37:cb:0b:39:c0:dc:
08:5d:20:e7:ce:f1:7a:8f:28:e9:21:0a:54:93:4b:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:D1:88:35:5C:CD:52:32:AB:94:B7:E0:24:C8:A3:46:1F:C3:1B
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.8.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ed:15:f9:1d:2f:c5:5d:83:ec:f4:55:df:c2:f2:52:af:dc:
80:09:11:2e:ee:a0:e2:db:9a:d9:f8:40:04:46:1c:a1:56:ce:
52:75:79:57:63:8c:82:ac:4e:84:92:90:b6:19:69:a3:e3:5f:
ed:16:37:63:9c:05:d7:f9:9c:d4:47:6e:22:41:02:88:64:d1:
71:e4:05:97:9c:c9:14:5a:0a:f3:ba:13:21:21:ca:47:2e:ec:
9b:79:37:54:ef:25:e3:3e:86:5c:c8:46:57:1b:af:37:c8:9d:
b8:28:21:ab:8b:5e:b6:90:c0:90:f5:74:56:02:82:15:0c:70:
45:94:a5:5d:af:f4:7a:b3:83:96:e0:f9:26:1a:9e:7d:c9:8e:
30:0d:79:0d:0f:23:7a:7a:da:ea:00:9d:bb:5c:ab:66:02:17:
12:64:d4:2c:61:ff:39:e5:17:5d:f2:c8:b9:c1:53:d1:62:60:
6c:ef:9d:f9:c4:43:23:82:72:42:72:05:a1:5d:9a:dd:ab:f6:
38:bd:14:ab:c6:05:7b:01:db:43:33:f2:d4:7a:fd:f5:70:d7:
ce:7a:4c:e2:c8:3a:a3:dd:fd:b5:12:5f:f8:8e:61:4d:d5:01:
b4:d7:cd:01:63:8f:32:13:12:b2:c9:ab:42:2d:7e:51:86:70:
06:0d:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:27 2026 by rpki-client