Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: XMe7j2QHgRGzL2VAGEc+L/iJ+TPvOjiz0ej/fTTH9WQ=
Subject key identifier: FB:ED:E4:0F:08:BB:CA:65:47:39:91:E3:90:01:CC:DF:E3:64:5A:5F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 66D841F467BE0796F3E4F43E0DDB1F404D98497E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
Signing time: Tue 08 Sep 2026 18:03:35 +0000
ROA not before: Tue 08 Sep 2026 17:58:35 +0000
ROA not after: Tue 07 Sep 2027 18:03:35 +0000
asID: 14618
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.134.127.0/24 maxlen: 24
95.134.161.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
178.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d8:41:f4:67:be:07:96:f3:e4:f4:3e:0d:db:1f:40:4d:98:49:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 17:58:35 2026 GMT
Not After : Sep 7 18:03:35 2027 GMT
Subject: CN=FBEDE40F08BBCA65473991E39001CCDFE3645A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:65:5b:e6:45:de:34:67:f8:4f:ee:66:bb:
c2:8c:2d:67:91:4d:58:83:1b:2a:da:ef:7b:51:16:
a4:e0:c3:c6:d5:15:de:c8:ec:bf:4e:1e:0b:45:72:
20:00:20:03:0b:06:ec:39:98:8e:92:9e:9c:60:ca:
de:35:65:8c:d8:79:2e:08:20:e2:61:dc:6b:f1:29:
8b:c0:2b:9a:2b:5c:9f:25:28:c1:af:d6:e5:08:06:
d3:2c:da:59:3c:5d:bb:a3:75:87:66:60:74:d1:b2:
09:26:f4:ce:c7:f2:60:66:fd:90:e0:de:ed:a4:05:
84:62:d6:e3:37:73:c1:3f:4f:af:39:eb:df:24:57:
67:45:59:3e:f4:e7:22:b0:90:09:3e:57:ab:a6:7f:
de:f7:5a:75:e8:5b:9d:bf:e3:96:ea:9c:ae:e7:3a:
3f:68:11:2d:f3:7b:0c:01:be:47:10:03:5e:50:46:
91:77:8f:f9:ed:76:ed:09:d7:14:01:d0:7b:97:9e:
f2:5c:ad:b4:fb:68:d9:7d:07:0a:8b:40:e4:40:a1:
77:30:e4:29:d8:48:a2:f7:c8:01:e5:03:6c:31:70:
20:a4:53:a7:92:ae:e2:65:43:18:b6:8d:1e:32:8e:
06:b4:09:7e:89:d0:4a:80:46:fb:ef:21:a7:52:e3:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:ED:E4:0F:08:BB:CA:65:47:39:91:E3:90:01:CC:DF:E3:64:5A:5F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.134.127.0/24
95.134.161.0/24
95.135.160.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
178.95.43.0/24
Signature Algorithm: sha256WithRSAEncryption
04:37:97:16:cc:58:1b:a3:99:7e:67:a8:cf:e7:5e:59:74:ed:
61:17:84:58:df:0c:2b:4b:e0:11:ff:ad:d1:a4:0f:b4:a1:05:
d1:12:13:1d:70:d9:ed:47:93:19:06:24:f0:e9:0d:7f:4c:5d:
9c:5f:81:30:77:f6:db:7d:37:76:68:c1:e7:a3:14:9a:46:13:
ca:ee:91:43:8d:4f:5e:fd:46:9a:81:8b:90:f5:03:cf:a6:65:
95:c1:6c:96:c6:a2:73:6e:e4:bb:98:23:06:48:5e:c2:04:14:
e2:10:46:ab:e2:af:23:54:f0:69:f8:6a:08:25:52:e3:1d:00:
43:61:4b:1d:91:b3:30:02:87:1e:d0:91:0b:7b:a4:09:71:26:
2a:e0:2f:5f:2a:db:71:35:3d:cd:de:74:62:b4:bf:34:66:2c:
50:d0:cc:62:c8:f9:f4:25:c8:e7:5b:9a:58:0a:d3:d6:4a:c5:
91:b0:08:1a:91:8b:1d:df:2c:f2:18:3f:2e:ef:33:09:94:8c:
e2:2a:8a:47:c6:61:d7:9e:65:0a:90:60:69:71:85:f6:52:cc:
8f:1b:1b:eb:1d:61:54:96:13:94:a7:69:40:be:6b:73:73:0d:
01:5f:46:46:79:2e:e4:1c:03:7b:d8:00:50:91:ce:b3:b5:7a:
17:8d:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:01:57 2026 by rpki-client