Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: SP1YLafg0BfyjUNEYfL1rBNQezAei/8FufgF5KKbavI=
Subject key identifier: 20:01:6A:04:3F:28:28:C3:D6:09:07:8B:EA:D3:5E:6F:06:B5:44:5B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 69BA2B111D034814F0D2DE0E1E15B5FE8DDA7081
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Tue 09 Jun 2026 09:07:10 +0000
ROA not before: Tue 09 Jun 2026 09:02:10 +0000
ROA not after: Tue 08 Jun 2027 09:07:10 +0000
asID: 14618
IP address blocks: 91.124.28.0/24 maxlen: 24
91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ba:2b:11:1d:03:48:14:f0:d2:de:0e:1e:15:b5:fe:8d:da:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 9 09:02:10 2026 GMT
Not After : Jun 8 09:07:10 2027 GMT
Subject: CN=20016A043F2828C3D609078BEAD35E6F06B5445B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:61:cd:ca:fd:32:02:0b:0b:7f:bf:1c:a1:
32:1f:31:86:90:dd:32:68:87:39:be:df:30:f3:f9:
f9:a2:39:9e:d5:6c:28:88:79:cb:9b:c3:da:ec:e2:
dd:84:d7:9b:06:eb:dc:49:5a:31:0a:ec:a6:97:f5:
d5:d0:78:b5:9d:1b:b4:ce:4b:85:df:07:52:63:6e:
17:0b:3c:50:ca:5b:fb:ea:f7:0e:3b:10:31:a1:9d:
28:7b:95:10:a1:fc:01:f3:fd:93:0e:6a:c2:11:bf:
68:88:56:88:ae:02:2e:21:08:89:a2:2d:6a:e5:d7:
da:7b:98:20:9a:57:63:c0:58:aa:1c:2d:cf:2b:36:
dd:4e:97:f6:b7:cb:b2:17:b5:45:2c:01:70:2c:77:
75:ef:3e:9b:58:1e:fe:95:06:b3:4f:4f:41:94:2d:
b8:cb:8b:eb:cd:aa:18:50:d9:d7:f6:c2:b9:40:4d:
a7:01:cf:d5:36:ae:3c:dd:d9:fd:9d:71:b0:75:8c:
d4:cd:67:c6:0c:3a:c6:10:40:44:41:fa:07:63:38:
9c:b0:2e:d4:55:b9:0d:5e:b6:13:0b:52:e4:fa:e7:
57:b3:42:1b:3c:3c:f3:c9:07:ab:ff:b3:b8:8b:a2:
90:03:18:a6:8a:b8:61:1d:b0:b2:26:92:61:b1:c1:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:6A:04:3F:28:28:C3:D6:09:07:8B:EA:D3:5E:6F:06:B5:44:5B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.28.0/24
91.124.34.0/24
91.124.38.0/24
91.124.42.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3a:90:6d:9b:a7:4d:f9:f7:a3:21:d9:b1:07:45:e9:cb:5b:
b1:f8:12:01:5b:b3:46:a3:19:b9:4a:bb:06:2f:73:ef:1c:ef:
7a:77:cf:48:b6:51:dc:12:e4:e7:26:f3:00:d6:fa:fd:41:68:
7e:66:10:8d:d4:85:c6:f0:1b:c5:78:d6:f6:82:73:fd:e9:4c:
80:5d:ae:72:01:4f:66:aa:da:7a:98:96:65:67:c2:d7:60:b8:
c4:bc:4b:e4:66:95:03:9c:0c:cd:7b:2d:fd:8b:bd:2d:1c:26:
37:e5:d2:45:a0:7b:5c:ad:e5:9c:5b:32:bb:3c:3e:be:7d:a9:
01:39:5f:36:e1:67:c8:0a:bd:be:28:d4:55:d4:c5:bb:20:4e:
8f:cd:5d:72:c4:e1:2c:1c:cd:47:31:e9:9b:50:7c:cc:0f:46:
28:e0:de:ce:18:25:ff:d2:32:37:ad:51:20:ec:13:c0:04:04:
ba:df:7a:34:7e:b5:74:db:80:91:e1:bc:69:f8:c4:0f:80:3f:
bd:ea:05:0c:83:b5:48:09:43:5c:35:dc:de:fc:5a:51:09:83:
6b:2d:72:d6:80:4e:85:51:c8:c7:25:65:08:61:4f:24:a8:7d:
4e:bb:f0:33:d0:f2:31:07:d4:f9:a1:ff:09:0e:bc:9a:61:ac:
38:ec:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:03:52 2026 by rpki-client