Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 3CSz2rUPWkRUWELd85ZfE6KybLxSuNWppcVZw6qcuhk=
Subject key identifier: 08:4C:C4:68:DA:0A:49:2D:EB:98:7F:C4:1F:FA:C7:96:E6:7F:34:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2FC2E4187FC56C38DD2F54FD39572B3371C8E049
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Tue 24 Feb 2026 00:26:59 +0000
ROA not before: Tue 24 Feb 2026 00:21:59 +0000
ROA not after: Tue 23 Feb 2027 00:26:59 +0000
asID: 2914
IP address blocks: 96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.144.0/23 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
143.14.60.0/24 maxlen: 24
143.14.61.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.84.0/24 maxlen: 24
143.14.85.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.109.0/24 maxlen: 24
143.14.154.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.101.0/24 maxlen: 24
155.117.104.0/24 maxlen: 24
155.117.160.0/24 maxlen: 24
162.141.16.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.45.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.81.0/24 maxlen: 24
162.141.89.0/24 maxlen: 24
162.141.99.0/24 maxlen: 24
162.141.102.0/24 maxlen: 24
162.141.132.0/24 maxlen: 24
162.141.143.0/24 maxlen: 24
162.141.154.0/24 maxlen: 24
162.141.162.0/24 maxlen: 24
162.141.176.0/24 maxlen: 24
162.141.177.0/24 maxlen: 24
162.141.182.0/24 maxlen: 24
167.148.7.0/24 maxlen: 24
167.148.9.0/24 maxlen: 24
167.148.11.0/24 maxlen: 24
167.148.13.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.34.0/24 maxlen: 24
167.148.47.0/24 maxlen: 24
167.148.71.0/24 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.73.0/24 maxlen: 24
167.148.74.0/24 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.101.0/24 maxlen: 24
167.148.103.0/24 maxlen: 24
167.148.107.0/24 maxlen: 24
167.148.113.0/24 maxlen: 24
167.148.114.0/24 maxlen: 24
167.148.124.0/24 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.132.0/24 maxlen: 24
167.148.133.0/24 maxlen: 24
167.148.137.0/24 maxlen: 24
167.148.142.0/24 maxlen: 24
167.148.143.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.151.0/24 maxlen: 24
167.148.155.0/24 maxlen: 24
167.148.160.0/24 maxlen: 24
167.148.174.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c2:e4:18:7f:c5:6c:38:dd:2f:54:fd:39:57:2b:33:71:c8:e0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 24 00:21:59 2026 GMT
Not After : Feb 23 00:26:59 2027 GMT
Subject: CN=084CC468DA0A492DEB987FC41FFAC796E67F347E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:d3:67:dc:1e:cb:28:a1:3a:16:f7:17:42:
6e:e2:08:81:a4:61:23:9b:3c:8c:1f:e6:f5:e6:8c:
fe:61:7f:4b:7e:bf:8c:be:fd:e0:00:99:16:f7:db:
f3:c5:1b:cb:a8:62:19:44:d0:54:b6:f8:52:7c:5c:
b9:70:1b:5e:c7:8b:e4:ac:cd:70:b1:29:f2:c6:9e:
d4:72:d8:f2:cf:d2:f7:11:e7:45:e4:d2:56:38:a0:
7d:6e:d0:45:b8:93:ba:d9:fa:5a:a1:f7:f3:6f:91:
2f:1b:51:e2:65:68:1f:27:3f:39:9e:84:d9:a7:9d:
b5:9c:81:06:36:3d:ba:7d:7a:37:1e:63:b6:a4:5d:
bc:1c:1d:08:6c:1d:31:bd:71:2f:3d:bd:1c:e3:42:
12:83:5f:14:38:59:3b:cc:ef:6d:49:11:c7:bf:40:
0b:2c:38:ff:ad:d6:00:78:0f:be:d5:ec:d5:fb:78:
36:44:ac:df:91:87:32:03:52:d6:27:ac:66:5a:4a:
b9:10:23:5a:9b:ae:08:98:b5:9c:b9:c5:33:eb:0d:
93:03:8f:dc:a4:6f:84:a7:6c:f6:ff:f7:d2:26:b2:
13:60:3b:6d:52:7a:3c:48:a8:32:51:0f:40:eb:3e:
aa:15:b1:58:4b:43:23:11:5f:6b:f1:ac:29:69:76:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:C4:68:DA:0A:49:2D:EB:98:7F:C4:1F:FA:C7:96:E6:7F:34:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.32.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.147.255
96.62.156.0-96.62.175.255
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
143.14.60.0/23
143.14.72.0/24
143.14.84.0/23
143.14.108.0/23
143.14.154.0/24
150.241.130.0/24
155.117.101.0/24
155.117.104.0/24
155.117.160.0/24
162.141.16.0/24
162.141.18.0/24
162.141.20.0/24
162.141.45.0/24
162.141.53.0/24
162.141.81.0/24
162.141.89.0/24
162.141.99.0/24
162.141.102.0/24
162.141.132.0/24
162.141.143.0/24
162.141.154.0/24
162.141.162.0/24
162.141.176.0/23
162.141.182.0/24
167.148.7.0/24
167.148.9.0/24
167.148.11.0/24
167.148.13.0/24
167.148.31.0-167.148.32.255
167.148.34.0/24
167.148.47.0/24
167.148.71.0-167.148.74.255
167.148.99.0/24
167.148.101.0/24
167.148.103.0/24
167.148.107.0/24
167.148.113.0-167.148.114.255
167.148.124.0/24
167.148.129.0/24
167.148.132.0/23
167.148.137.0/24
167.148.142.0/23
167.148.146.0/24
167.148.151.0/24
167.148.155.0/24
167.148.160.0/24
167.148.174.0/24
167.148.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:df:92:91:16:58:71:b8:ed:83:46:ba:e1:28:40:e6:78:6b:
27:99:a2:31:8f:fd:21:f3:2b:f6:bb:b5:1e:1f:4b:bd:63:14:
2e:b4:6a:87:70:05:82:19:81:dd:f3:b2:8e:64:be:0c:7b:58:
3c:d2:e2:f6:1e:3d:f0:0f:d6:4b:07:56:b5:35:7f:9e:84:11:
3d:bc:c8:87:70:76:29:ca:f8:a6:c8:c0:35:18:87:cf:b1:ba:
13:ba:40:ce:17:76:01:ae:e6:ff:38:7e:cd:db:af:74:c5:83:
68:6c:1c:40:7c:b7:97:1f:f0:17:7e:04:20:15:7d:20:4b:25:
b6:74:54:d8:89:ca:39:0e:aa:0b:41:3f:79:d4:56:4b:da:1c:
27:1a:09:ef:ca:a2:18:9c:92:60:8b:1c:5c:65:03:9e:47:f1:
fe:a9:a9:98:8d:d0:3e:2e:42:ee:18:0c:4c:31:73:bd:64:11:
af:72:b2:25:01:c4:47:13:5f:45:14:ac:f1:94:24:37:8b:f5:
4f:86:24:69:30:e5:3c:ac:62:cb:d2:a7:77:99:04:97:7a:44:
fa:0f:d1:5b:28:70:9c:d5:30:19:58:48:96:55:4e:59:99:36:
5c:22:cd:1c:04:e4:95:92:c5:db:21:37:e4:d8:1e:ad:2a:72:
66:8d:2f:dd
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgIUL8LkGH/FbDjdL1T9OVcrM3HI4EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMjQwMDIxNTlaFw0yNzAyMjMwMDI2NTlaMDMxMTAvBgNV
BAMTKDA4NENDNDY4REEwQTQ5MkRFQjk4N0ZDNDFGRkFDNzk2RTY3RjM0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXetNn3B7LKKE6FvcXQm7iCIGk
YSObPIwf5vXmjP5hf0t+v4y+/eAAmRb32/PFG8uoYhlE0FS2+FJ8XLlwG17Hi+Ss
zXCxKfLGntRy2PLP0vcR50Xk0lY4oH1u0EW4k7rZ+lqh9/NvkS8bUeJlaB8nPzme
hNmnnbWcgQY2Pbp9ejceY7akXbwcHQhsHTG9cS89vRzjQhKDXxQ4WTvM721JEce/
QAssOP+t1gB4D77V7NX7eDZErN+RhzIDUtYnrGZaSrkQI1qbrgiYtZy5xTPrDZMD
j9ykb4SnbPb/99ImshNgO21SejxIqDJRD0DrPqoVsVhLQyMRX2vxrClpdqNJAgMB
AAGjggQ6MIIENjAdBgNVHQ4EFgQUCEzEaNoKSS3rmH/EH/rHluZ/NH4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAk8GCCsGAQUFBwEHAQH/BIICPjCCAjowggI2BAIAATCC
Ai4wDAMEBWA+IAMEAGA+JDAMAwQBYD4mAwQAYD4sAwQAYD4uMAwDBAZgPkADBABg
PkQDBABgPkYDBABgPmYDBABgPmgwDAMEAWA+agMEAGA+bgMEAWA+cDAMAwQCYD50
AwQAYD5+MAwDBAJgPoQDBABgPoYDBAJgPogwDAMEAGA+jQMEAmA+kDAMAwQCYD6c
AwQEYD6gMAwDBABgPrEDBAJgPrADBAFgPrwDBABgPsQDBAFgPsYDBAFgPtQDBABg
PtcwDAMEAGA+4QMEAGA+4gMEAGA+5jAMAwQCYD7sAwQBYD7wMAwDBABgPvUDBABg
PvYDBABgPvwDBAGPDjwDBACPDkgDBAGPDlQDBAGPDmwDBACPDpoDBACW8YIDBACb
dWUDBACbdWgDBACbdaADBACijRADBACijRIDBACijRQDBACijS0DBACijTUDBACi
jVEDBACijVkDBACijWMDBACijWYDBACijYQDBACijY8DBACijZoDBACijaIDBAGi
jbADBACijbYDBACnlAcDBACnlAkDBACnlAsDBACnlA0wDAMEAKeUHwMEAKeUIAME
AKeUIgMEAKeULzAMAwQAp5RHAwQAp5RKAwQAp5RjAwQAp5RlAwQAp5RnAwQAp5Rr
MAwDBACnlHEDBACnlHIDBACnlHwDBACnlIEDBAGnlIQDBACnlIkDBAGnlI4DBACn
lJIDBACnlJcDBACnlJsDBACnlKADBACnlK4DBACnlLAwDQYJKoZIhvcNAQELBQAD
ggEBAHrfkpEWWHG47YNGuuEoQOZ4ayeZojGP/SHzK/a7tR4fS71jFC60aodwBYIZ
gd3zso5kvgx7WDzS4vYePfAP1ksHVrU1f56EET28yIdwdinK+KbIwDUYh8+xuhO6
QM4XdgGu5v84fs3br3TFg2hsHEB8t5cf8Bd+BCAVfSBLJbZ0VNiJyjkOqgtBP3nU
VkvaHCcaCe/KohickmCLHFxlA55H8f6pqZiN0D4uQu4YDEwxc71kEa9ysiUBxEcT
X0UUrPGUJDeL9U+GJGkw5TysYsvSp3eZBJd6RPoP0VsocJzVMBlYSJZVTlmZNlwi
zRwE5JWSxdshN+TYHq0qcmaNL90=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:29:33 2026 by rpki-client