Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 18IOCcM6eKVPKyV9PzvfakHUHEN7n2q0ow44lhUXVNY=
Subject key identifier: E5:E5:75:CE:CB:B5:C9:5E:14:5E:A4:CE:10:89:A6:41:A9:9F:32:D9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 30F4E16B6057BD3CADBA4B94D275B8DC5051CB57
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Tue 25 Aug 2026 02:13:19 +0000
ROA not before: Tue 25 Aug 2026 02:08:19 +0000
ROA not after: Tue 24 Aug 2027 02:13:19 +0000
asID: 2914
IP address blocks: 96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.144.0/23 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
140.150.153.0/24 maxlen: 24
143.14.60.0/24 maxlen: 24
143.14.61.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.84.0/24 maxlen: 24
143.14.85.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.109.0/24 maxlen: 24
143.14.146.0/24 maxlen: 24
143.14.148.0/24 maxlen: 24
143.14.153.0/24 maxlen: 24
143.14.154.0/24 maxlen: 24
143.14.155.0/24 maxlen: 24
143.14.195.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.101.0/24 maxlen: 24
155.117.104.0/24 maxlen: 24
155.117.160.0/24 maxlen: 24
162.141.10.0/24 maxlen: 24
162.141.16.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.37.0/24 maxlen: 24
162.141.45.0/24 maxlen: 24
162.141.51.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.54.0/24 maxlen: 24
162.141.81.0/24 maxlen: 24
162.141.89.0/24 maxlen: 24
162.141.99.0/24 maxlen: 24
162.141.102.0/24 maxlen: 24
162.141.103.0/24 maxlen: 24
162.141.129.0/24 maxlen: 24
162.141.132.0/24 maxlen: 24
162.141.143.0/24 maxlen: 24
162.141.154.0/24 maxlen: 24
162.141.155.0/24 maxlen: 24
162.141.162.0/24 maxlen: 24
162.141.176.0/24 maxlen: 24
162.141.177.0/24 maxlen: 24
162.141.182.0/24 maxlen: 24
167.148.7.0/24 maxlen: 24
167.148.9.0/24 maxlen: 24
167.148.11.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.13.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.34.0/24 maxlen: 24
167.148.47.0/24 maxlen: 24
167.148.71.0/24 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.73.0/24 maxlen: 24
167.148.74.0/24 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.101.0/24 maxlen: 24
167.148.103.0/24 maxlen: 24
167.148.107.0/24 maxlen: 24
167.148.113.0/24 maxlen: 24
167.148.114.0/24 maxlen: 24
167.148.124.0/24 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.132.0/24 maxlen: 24
167.148.133.0/24 maxlen: 24
167.148.135.0/24 maxlen: 24
167.148.137.0/24 maxlen: 24
167.148.138.0/24 maxlen: 24
167.148.142.0/24 maxlen: 24
167.148.143.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.147.0/24 maxlen: 24
167.148.150.0/24 maxlen: 24
167.148.151.0/24 maxlen: 24
167.148.153.0/24 maxlen: 24
167.148.155.0/24 maxlen: 24
167.148.160.0/24 maxlen: 24
167.148.174.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f4:e1:6b:60:57:bd:3c:ad:ba:4b:94:d2:75:b8:dc:50:51:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 25 02:08:19 2026 GMT
Not After : Aug 24 02:13:19 2027 GMT
Subject: CN=E5E575CECBB5C95E145EA4CE1089A641A99F32D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:77:7b:fe:03:74:d7:59:5e:44:8e:68:4f:
85:70:53:7d:b8:f2:67:44:ec:fb:07:64:98:10:04:
8a:96:5e:05:ff:14:ec:3a:ee:5d:40:4a:b1:9f:16:
8b:02:8e:d6:a9:85:7b:e6:63:fe:ea:bf:87:d1:e1:
80:00:28:ec:6b:97:b3:f2:cd:37:f4:52:47:d1:f0:
ef:89:b2:ed:09:34:3f:39:cb:1b:7f:02:09:70:5b:
1a:b9:7c:68:fb:21:98:d3:f3:e9:0f:39:17:c9:ab:
b6:53:66:8d:6f:f8:b7:8b:2d:5d:62:1d:42:c5:47:
2b:57:6a:17:a8:a1:16:0d:fc:68:78:b3:05:24:62:
41:40:48:c2:48:57:03:fa:53:90:ff:1d:2d:f3:9a:
94:6a:e1:ab:15:53:92:8f:7a:a1:83:36:b0:2d:a5:
20:ae:1b:47:71:4c:13:1d:ee:33:f6:9d:bd:f2:9f:
74:10:fb:93:19:be:af:43:a1:9c:f6:5e:a0:50:3d:
fa:0c:60:c6:8d:bb:72:7d:eb:8d:ea:24:0b:0d:06:
7c:aa:cd:fe:5d:31:ee:47:5f:ad:51:10:24:7a:7c:
07:bb:da:ee:22:28:9f:33:9c:7e:77:5c:0d:f4:25:
ec:76:53:a5:06:21:a8:86:d2:f3:ef:f9:28:eb:2d:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E5:75:CE:CB:B5:C9:5E:14:5E:A4:CE:10:89:A6:41:A9:9F:32:D9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.32.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.147.255
96.62.156.0-96.62.175.255
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
140.150.153.0/24
143.14.60.0/23
143.14.72.0/24
143.14.84.0/23
143.14.108.0/23
143.14.146.0/24
143.14.148.0/24
143.14.153.0-143.14.155.255
143.14.195.0/24
143.14.197.0/24
150.241.130.0/24
155.117.101.0/24
155.117.104.0/24
155.117.160.0/24
162.141.10.0/24
162.141.16.0/24
162.141.18.0/24
162.141.37.0/24
162.141.45.0/24
162.141.51.0/24
162.141.53.0-162.141.54.255
162.141.81.0/24
162.141.89.0/24
162.141.99.0/24
162.141.102.0/23
162.141.129.0/24
162.141.132.0/24
162.141.143.0/24
162.141.154.0/23
162.141.162.0/24
162.141.176.0/23
162.141.182.0/24
167.148.7.0/24
167.148.9.0/24
167.148.11.0-167.148.13.255
167.148.30.0-167.148.32.255
167.148.34.0/24
167.148.47.0/24
167.148.71.0-167.148.74.255
167.148.99.0/24
167.148.101.0/24
167.148.103.0/24
167.148.107.0/24
167.148.113.0-167.148.114.255
167.148.124.0/24
167.148.129.0/24
167.148.132.0/23
167.148.135.0/24
167.148.137.0-167.148.138.255
167.148.142.0/23
167.148.146.0/23
167.148.150.0/23
167.148.153.0/24
167.148.155.0/24
167.148.160.0/24
167.148.174.0/24
167.148.176.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1c:30:33:70:a6:34:02:df:1b:e7:5e:9f:f7:fe:7b:cd:ae:
45:ec:5a:c4:60:d7:46:fb:9f:20:e6:4c:4e:65:c2:2c:55:4c:
ae:73:82:bf:61:b3:ff:32:0b:09:43:38:1d:1c:3c:41:a7:7a:
49:3a:48:19:f7:f4:01:7d:22:ee:d0:6d:6b:e3:44:16:96:12:
23:d7:4f:60:cc:ab:84:78:49:f0:28:17:b9:1e:8b:d2:e6:43:
7c:5c:ed:c8:fe:3a:c3:11:c6:b6:81:35:b3:de:54:f8:01:86:
b2:c5:17:ab:05:7b:07:97:28:e0:9e:34:db:77:10:8e:12:27:
a2:51:52:a6:2e:e1:c0:8f:92:9f:a9:64:30:6b:03:e6:0c:ae:
a9:59:5c:90:a4:46:f3:6d:d5:de:77:75:1e:8e:bb:30:69:bd:
94:00:89:52:56:eb:d2:8f:44:b0:62:95:a1:78:d2:33:b0:13:
a5:e3:e9:46:f6:f9:41:db:89:a5:03:02:9d:4b:e8:a3:0a:21:
4e:86:70:f0:fc:ce:24:ff:f3:b6:5a:9d:9c:4f:d1:f1:03:a0:
f6:43:6b:1c:01:77:2b:8b:ec:30:de:a2:4f:b7:7a:ea:22:44:
f5:71:0b:bb:cb:4f:61:be:bf:fa:45:bb:bf:2f:c2:84:d4:81:
55:2b:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:39 2026 by rpki-client