Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 9Hk5AAQ4QrDkwlir4xA4yizUdXMEUoDzLfxzNeAXTZU=
Subject key identifier: 94:CA:31:A6:78:F6:E1:D0:4D:6C:68:89:99:70:43:C1:A5:43:F5:01
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 63CE20C6A25E4CCAE181C4C5B3FABC914EC0796E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Sun 02 Nov 2025 15:31:13 +0000
ROA not before: Sun 02 Nov 2025 15:26:13 +0000
ROA not after: Sun 01 Nov 2026 15:31:13 +0000
asID: 2914
IP address blocks: 96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.144.0/23 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
143.14.60.0/24 maxlen: 24
143.14.61.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.84.0/24 maxlen: 24
143.14.85.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.109.0/24 maxlen: 24
143.14.154.0/24 maxlen: 24
155.117.101.0/24 maxlen: 24
155.117.104.0/24 maxlen: 24
155.117.160.0/24 maxlen: 24
162.141.16.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.21.0/24 maxlen: 24
162.141.45.0/24 maxlen: 24
162.141.46.0/24 maxlen: 24
162.141.47.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.81.0/24 maxlen: 24
162.141.82.0/24 maxlen: 24
162.141.89.0/24 maxlen: 24
162.141.90.0/24 maxlen: 24
162.141.93.0/24 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.99.0/24 maxlen: 24
162.141.100.0/24 maxlen: 24
162.141.102.0/24 maxlen: 24
162.141.113.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.132.0/24 maxlen: 24
162.141.143.0/24 maxlen: 24
162.141.154.0/24 maxlen: 24
162.141.162.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
162.141.167.0/24 maxlen: 24
162.141.176.0/24 maxlen: 24
162.141.177.0/24 maxlen: 24
162.141.182.0/24 maxlen: 24
167.148.6.0/24 maxlen: 24
167.148.7.0/24 maxlen: 24
167.148.9.0/24 maxlen: 24
167.148.11.0/24 maxlen: 24
167.148.13.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.34.0/24 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.47.0/24 maxlen: 24
167.148.71.0/24 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.73.0/24 maxlen: 24
167.148.74.0/24 maxlen: 24
167.148.101.0/24 maxlen: 24
167.148.103.0/24 maxlen: 24
167.148.107.0/24 maxlen: 24
167.148.113.0/24 maxlen: 24
167.148.114.0/24 maxlen: 24
167.148.124.0/24 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.132.0/24 maxlen: 24
167.148.133.0/24 maxlen: 24
167.148.137.0/24 maxlen: 24
167.148.142.0/24 maxlen: 24
167.148.143.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.151.0/24 maxlen: 24
167.148.155.0/24 maxlen: 24
167.148.160.0/24 maxlen: 24
167.148.174.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ce:20:c6:a2:5e:4c:ca:e1:81:c4:c5:b3:fa:bc:91:4e:c0:79:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 2 15:26:13 2025 GMT
Not After : Nov 1 15:31:13 2026 GMT
Subject: CN=94CA31A678F6E1D04D6C6889997043C1A543F501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:13:f5:00:d6:a1:07:68:61:ab:1e:90:f3:
d6:54:c3:cd:69:c4:24:4d:89:27:f4:98:4b:57:45:
2d:af:f3:81:a2:84:10:0e:d6:21:a2:66:c5:94:60:
94:63:7f:86:fa:15:9e:8a:4d:4b:9c:83:0d:ee:2d:
ae:0f:5d:4e:ce:8c:bd:fd:0f:d2:69:4d:53:28:cd:
21:aa:42:b0:c5:34:60:d3:0a:d8:c6:12:81:af:e2:
dc:4d:8b:6f:96:f9:3f:2b:86:38:18:88:ab:ea:9c:
1a:a4:39:7c:bd:fe:b5:8b:49:7d:d1:ac:31:2b:32:
eb:d6:13:cb:a1:ae:08:f2:9d:5c:d4:48:d3:9f:6c:
7d:82:94:98:52:98:4e:f2:27:8c:fa:bb:c8:c9:db:
8a:86:1b:70:f8:10:a8:88:c6:8b:b5:3e:52:cc:94:
6e:5f:80:d2:b3:75:da:a7:bc:08:9c:74:b0:bb:e7:
71:f2:e4:39:3e:99:3c:37:b4:08:89:85:29:87:c0:
d8:58:1f:82:58:65:f9:56:6f:bc:ba:7f:4a:37:bf:
51:e3:47:03:48:73:74:69:8a:6d:fd:af:c2:ad:32:
55:1f:41:3c:aa:8e:02:3c:4d:e7:9e:e5:87:fb:30:
aa:0f:bb:11:63:47:21:40:24:52:fd:94:aa:d3:2d:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:31:A6:78:F6:E1:D0:4D:6C:68:89:99:70:43:C1:A5:43:F5:01
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.32.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.147.255
96.62.156.0-96.62.175.255
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
143.14.60.0/23
143.14.72.0/24
143.14.84.0/23
143.14.108.0/23
143.14.154.0/24
155.117.101.0/24
155.117.104.0/24
155.117.160.0/24
162.141.16.0/24
162.141.18.0/24
162.141.20.0/23
162.141.45.0-162.141.47.255
162.141.50.0/24
162.141.53.0/24
162.141.70.0/24
162.141.81.0-162.141.82.255
162.141.89.0-162.141.90.255
162.141.93.0/24
162.141.97.0/24
162.141.99.0-162.141.100.255
162.141.102.0/24
162.141.113.0/24
162.141.116.0/24
162.141.132.0/24
162.141.143.0/24
162.141.154.0/24
162.141.162.0/23
162.141.167.0/24
162.141.176.0/23
162.141.182.0/24
167.148.6.0/23
167.148.9.0/24
167.148.11.0/24
167.148.13.0/24
167.148.31.0-167.148.32.255
167.148.34.0/24
167.148.43.0/24
167.148.47.0/24
167.148.71.0-167.148.74.255
167.148.101.0/24
167.148.103.0/24
167.148.107.0/24
167.148.113.0-167.148.114.255
167.148.124.0/24
167.148.129.0/24
167.148.132.0/23
167.148.137.0/24
167.148.142.0/23
167.148.146.0/24
167.148.151.0/24
167.148.155.0/24
167.148.160.0/24
167.148.174.0/24
167.148.176.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c7:e9:b1:08:4b:00:6e:af:4f:18:34:30:4c:b2:82:81:b2:
b8:61:ca:af:39:a9:b7:72:84:da:ce:c9:ce:fd:ad:34:3f:1b:
fc:d0:d3:a0:fc:30:50:4b:79:ed:58:3b:b4:4f:b5:33:e1:69:
f2:7e:38:c4:b9:88:a6:1c:26:82:04:ff:64:c3:fa:b1:e5:37:
e7:3f:13:27:cf:e3:53:bf:fa:5f:c2:7e:dd:16:23:cf:2b:2e:
df:b7:07:48:ae:be:f8:a4:a6:86:2f:f6:b7:01:f3:ed:ae:e3:
a5:79:1b:ef:1f:08:c0:e2:c7:4a:a2:ed:08:64:6a:ec:66:1a:
a4:16:87:c9:7f:b1:e0:cb:b0:8a:a6:9d:68:fa:8c:13:ba:79:
fe:bb:cf:2f:22:c7:88:4a:92:9d:b6:14:bc:54:68:fb:9d:78:
1a:04:7f:4c:4d:4c:8b:79:42:89:f3:bb:21:13:75:b0:76:eb:
f9:8e:e0:3a:69:8a:94:ce:75:5d:00:6b:34:77:59:16:f2:d7:
29:25:ab:75:18:17:a0:92:fe:14:af:c9:eb:0f:3b:0a:d9:d6:
9d:0b:0d:4c:79:73:c1:b6:4c:5c:3f:90:1f:d0:1b:f3:e8:92:
78:ed:25:bc:13:2f:aa:66:53:32:2f:80:e7:a0:78:5e:e0:eb:
fa:66:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:36 2025 by rpki-client