Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: Ph3I7ih7YzzF2EtFAr3G+vpDkhm+7aktUy+y/2NHQaI=
Subject key identifier: 12:AF:43:29:DD:71:8F:97:2E:EC:13:62:37:68:CC:E2:77:48:16:F2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 658E1A8C1F335C5DE0DDE1AE8A837E1B02DC4915
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
Signing time: Fri 28 Aug 2026 04:49:30 +0000
ROA not before: Fri 28 Aug 2026 04:44:30 +0000
ROA not after: Fri 27 Aug 2027 04:49:30 +0000
asID: 14618
IP address blocks: 143.20.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8e:1a:8c:1f:33:5c:5d:e0:dd:e1:ae:8a:83:7e:1b:02:dc:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 28 04:44:30 2026 GMT
Not After : Aug 27 04:49:30 2027 GMT
Subject: CN=12AF4329DD718F972EEC13623768CCE2774816F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:7e:5f:ce:59:ed:5a:3e:94:d3:d9:cf:9a:
ee:c2:a4:56:50:ec:08:09:b4:3c:01:46:a7:13:5e:
dc:7f:73:96:43:98:f4:2b:7e:b1:84:8a:f8:28:68:
bc:34:03:cc:fc:6f:8c:81:de:5c:ff:99:d1:9a:1c:
fe:fb:4a:a9:f7:a1:86:ed:66:a4:cb:6d:da:70:11:
21:40:27:f1:74:0a:8c:96:23:99:5f:54:80:6c:0b:
29:6c:47:f4:11:22:3a:19:f1:8e:04:5f:7f:81:00:
f1:0d:ba:33:e3:5c:b7:69:f4:4f:9d:b4:90:28:46:
fe:45:72:60:25:fc:5d:b3:60:a7:a6:7e:3e:39:63:
f1:d7:47:b0:21:38:de:74:4c:f6:d4:22:ca:b1:82:
20:0d:5e:ba:6a:cf:29:7e:fa:38:a5:c6:6b:f9:81:
22:c3:f4:25:43:17:37:5e:bb:c4:5c:ba:46:9d:d1:
96:5b:70:b8:1b:b4:b6:d7:e3:c8:28:4b:b4:30:8f:
cc:c8:fa:31:f3:ed:6b:0a:07:31:0c:9c:43:04:9c:
96:47:ee:14:30:75:c4:4d:0d:c4:ab:71:d0:8b:54:
94:25:65:2f:f8:d0:2e:04:cd:2c:2f:66:06:33:f4:
06:a4:cc:48:9a:23:e1:27:78:d3:92:0e:7e:b7:d2:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:43:29:DD:71:8F:97:2E:EC:13:62:37:68:CC:E2:77:48:16:F2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:a4:87:86:5a:88:be:0e:dd:17:53:32:2c:8c:b1:8d:7c:7e:
74:54:f0:b1:11:ac:08:f9:d9:79:da:32:bf:a4:eb:43:c2:51:
f8:5b:95:df:60:38:44:2b:a8:31:ba:8f:89:73:bb:43:71:b9:
ba:4c:0b:d4:d1:e4:94:a7:5e:0a:67:e7:b6:d5:f6:2f:90:f2:
da:ed:1c:c0:c2:31:cd:6b:35:8a:77:88:e6:9e:d9:9f:62:d5:
c1:88:95:a4:11:80:24:cf:3c:f8:cc:03:9f:a7:dd:46:45:6f:
a8:c1:be:1d:bf:ac:0c:03:c9:2c:91:90:90:3e:dc:ed:a1:ed:
d7:ff:30:2b:04:a2:c4:ab:27:d6:7c:b1:1c:ff:34:c5:14:1b:
5f:b7:d5:25:ce:b8:3d:ab:37:92:5a:1d:ee:ee:3c:74:b9:1a:
e1:ec:9e:ae:6a:9c:33:27:1a:0b:98:e9:ef:99:ce:bd:04:92:
af:31:41:dd:74:9e:db:09:a3:3b:c2:32:0e:4a:36:f7:b8:f4:
ff:87:aa:00:0a:d6:c5:a5:4c:cc:f5:34:00:ed:44:68:49:8c:
ba:c7:77:ac:d8:22:0a:ee:a2:a5:ba:d1:a2:1f:a6:67:82:c5:
bb:e5:94:2a:c6:ff:33:b7:e8:c1:7c:87:6c:96:5e:15:b0:99:
68:5a:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:47 2026 by rpki-client