Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: YVknDta1gM1EUisZugacW1r94+NTT+IuxVRervUshJo=
Subject key identifier: 35:90:19:F1:1C:F6:74:39:B1:10:AC:B1:5C:48:97:40:55:42:6A:06
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3C8ACCDEB8770E1155F50952834624DB2FB90355
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
Signing time: Fri 24 Jul 2026 12:32:52 +0000
ROA not before: Fri 24 Jul 2026 12:27:52 +0000
ROA not after: Fri 23 Jul 2027 12:32:52 +0000
asID: 2914
IP address blocks: 82.21.98.0/24 maxlen: 24
82.21.99.0/24 maxlen: 24
82.26.139.0/24 maxlen: 24
82.26.143.0/24 maxlen: 24
82.26.144.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.38.12.0/24 maxlen: 24
82.38.62.0/24 maxlen: 24
82.38.93.0/24 maxlen: 24
82.38.94.0/24 maxlen: 24
82.38.95.0/24 maxlen: 24
82.38.98.0/24 maxlen: 24
82.38.113.0/24 maxlen: 24
82.38.120.0/24 maxlen: 24
82.38.131.0/24 maxlen: 24
82.38.144.0/24 maxlen: 24
82.38.145.0/24 maxlen: 24
82.38.146.0/24 maxlen: 24
82.38.151.0/24 maxlen: 24
82.38.169.0/24 maxlen: 24
82.38.172.0/24 maxlen: 24
82.38.175.0/24 maxlen: 24
82.38.181.0/24 maxlen: 24
82.39.164.0/24 maxlen: 24
82.47.30.0/24 maxlen: 24
82.47.40.0/24 maxlen: 24
82.47.43.0/24 maxlen: 24
82.47.44.0/24 maxlen: 24
82.47.53.0/24 maxlen: 24
82.47.107.0/24 maxlen: 24
82.47.110.0/24 maxlen: 24
82.47.111.0/24 maxlen: 24
82.47.113.0/24 maxlen: 24
82.47.116.0/24 maxlen: 24
82.47.118.0/24 maxlen: 24
82.47.119.0/24 maxlen: 24
82.47.122.0/24 maxlen: 24
82.47.135.0/24 maxlen: 24
82.47.151.0/24 maxlen: 24
82.47.156.0/24 maxlen: 24
82.47.163.0/24 maxlen: 24
82.47.173.0/24 maxlen: 24
82.47.178.0/24 maxlen: 24
82.47.183.0/24 maxlen: 24
82.47.209.0/24 maxlen: 24
82.47.210.0/24 maxlen: 24
82.47.213.0/24 maxlen: 24
82.47.215.0/24 maxlen: 24
82.47.223.0/24 maxlen: 24
82.47.248.0/24 maxlen: 24
84.75.128.0/24 maxlen: 24
84.75.131.0/24 maxlen: 24
84.75.136.0/24 maxlen: 24
84.75.137.0/24 maxlen: 24
84.75.147.0/24 maxlen: 24
84.75.163.0/24 maxlen: 24
84.75.167.0/24 maxlen: 24
84.75.168.0/24 maxlen: 24
84.75.173.0/24 maxlen: 24
84.75.208.0/24 maxlen: 24
84.75.244.0/24 maxlen: 24
84.75.245.0/24 maxlen: 24
178.83.116.0/24 maxlen: 24
178.83.119.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.160.0/24 maxlen: 24
178.83.162.0/24 maxlen: 24
178.83.170.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
178.83.179.0/24 maxlen: 24
178.83.184.0/24 maxlen: 24
178.83.189.0/24 maxlen: 24
178.83.193.0/24 maxlen: 24
178.83.194.0/24 maxlen: 24
178.83.202.0/24 maxlen: 24
178.83.204.0/24 maxlen: 24
178.83.212.0/24 maxlen: 24
178.83.213.0/24 maxlen: 24
178.83.214.0/24 maxlen: 24
178.83.223.0/24 maxlen: 24
178.83.227.0/24 maxlen: 24
178.83.241.0/24 maxlen: 24
178.83.246.0/24 maxlen: 24
178.83.247.0/24 maxlen: 24
178.83.253.0/24 maxlen: 24
178.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8a:cc:de:b8:77:0e:11:55:f5:09:52:83:46:24:db:2f:b9:03:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 12:27:52 2026 GMT
Not After : Jul 23 12:32:52 2027 GMT
Subject: CN=359019F11CF67439B110ACB15C48974055426A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:9f:e1:25:8d:86:1e:4c:b1:e4:de:77:8f:
df:7e:3c:e7:62:1b:59:80:c9:1b:58:41:61:c0:e9:
40:b5:1f:b4:3e:98:c0:ef:9b:0f:43:6d:71:9e:7d:
e4:24:02:6a:7c:00:a7:6d:56:df:43:43:e9:fa:f3:
c0:d2:cc:0c:b2:94:2c:53:ca:26:be:fb:35:3b:f8:
97:b7:1b:5e:4f:69:47:b5:c4:08:37:7d:a0:a7:ca:
ad:a2:67:18:e6:a7:76:0c:ee:3b:80:cb:9d:12:42:
de:fc:5f:40:a8:59:08:e6:37:af:b7:55:aa:f5:0e:
97:a2:88:8d:6d:ae:db:ec:e9:d7:e2:2b:80:0c:ab:
e6:68:5d:ba:9e:d3:65:d6:1f:b1:6e:ab:9b:fc:45:
6a:d7:8e:05:31:7a:f5:a5:15:d4:14:4b:50:9d:49:
e4:2a:6f:51:76:4d:7a:bf:6f:8f:8a:e6:cd:79:2a:
b1:95:4a:d4:9e:ed:d2:9d:20:b7:c5:5f:57:84:96:
3d:b5:53:23:8d:29:42:9f:71:fb:d7:1c:e9:ce:b7:
aa:33:82:e0:42:f2:ba:45:59:8f:03:07:38:86:f6:
e3:11:8b:31:77:b0:6b:23:7b:7d:f1:dd:ba:96:1a:
6b:0c:44:89:7b:44:fa:80:5e:c1:8d:6d:6c:9b:7e:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:19:F1:1C:F6:74:39:B1:10:AC:B1:5C:48:97:40:55:42:6A:06
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.98.0/23
82.26.139.0/24
82.26.143.0-82.26.144.255
82.29.48.0/24
82.38.12.0/24
82.38.62.0/24
82.38.93.0-82.38.95.255
82.38.98.0/24
82.38.113.0/24
82.38.120.0/24
82.38.131.0/24
82.38.144.0-82.38.146.255
82.38.151.0/24
82.38.169.0/24
82.38.172.0/24
82.38.175.0/24
82.38.181.0/24
82.39.164.0/24
82.47.30.0/24
82.47.40.0/24
82.47.43.0-82.47.44.255
82.47.53.0/24
82.47.107.0/24
82.47.110.0/23
82.47.113.0/24
82.47.116.0/24
82.47.118.0/23
82.47.122.0/24
82.47.135.0/24
82.47.151.0/24
82.47.156.0/24
82.47.163.0/24
82.47.173.0/24
82.47.178.0/24
82.47.183.0/24
82.47.209.0-82.47.210.255
82.47.213.0/24
82.47.215.0/24
82.47.223.0/24
82.47.248.0/24
84.75.128.0/24
84.75.131.0/24
84.75.136.0/23
84.75.147.0/24
84.75.163.0/24
84.75.167.0-84.75.168.255
84.75.173.0/24
84.75.208.0/24
84.75.244.0/23
178.83.116.0/24
178.83.119.0/24
178.83.155.0/24
178.83.160.0/24
178.83.162.0/24
178.83.170.0/24
178.83.177.0/24
178.83.179.0/24
178.83.184.0/24
178.83.189.0/24
178.83.193.0-178.83.194.255
178.83.202.0/24
178.83.204.0/24
178.83.212.0-178.83.214.255
178.83.223.0/24
178.83.227.0/24
178.83.241.0/24
178.83.246.0/23
178.83.253.0-178.83.254.255
Signature Algorithm: sha256WithRSAEncryption
62:17:cc:c3:42:7e:89:d2:f7:19:8d:ab:e0:8e:61:6a:d9:9c:
95:21:aa:06:b2:17:f7:3d:d2:5a:ed:71:7e:b7:82:ed:49:fe:
0a:19:ad:e3:2a:80:3e:d5:8a:f1:eb:ce:c8:d8:2a:ba:20:4e:
31:11:86:12:38:f4:8e:2b:f5:5d:af:4f:ff:d8:07:e9:66:5c:
f4:d1:6c:52:5f:88:2c:31:b8:38:68:1d:d4:39:1b:a6:27:5c:
73:55:40:18:06:36:6f:89:36:cb:98:df:13:d4:aa:63:0b:ee:
f7:4d:e7:17:22:3a:87:b0:3d:85:ac:a2:86:13:95:b4:b3:8d:
83:4e:e3:92:50:a1:4c:de:f7:3e:e4:ee:78:f9:dd:de:91:75:
13:da:15:35:1a:37:3c:f7:21:b5:91:c6:f5:6d:48:43:eb:ef:
55:d6:b7:26:e2:28:e5:3c:8f:ea:e1:f5:e1:fb:ef:ea:df:4d:
c9:2f:97:4f:8a:5f:81:0c:62:c3:7a:36:ca:00:f3:03:aa:2e:
ec:68:cf:44:74:78:21:43:48:82:fa:7c:03:c2:8d:f0:5d:90:
c0:98:7c:fb:7c:a4:42:45:12:62:40:e8:69:36:b2:8a:44:ea:
61:25:89:1b:e3:67:9e:98:01:ef:dd:30:d1:57:9a:bb:79:32:
a4:87:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:44 2026 by rpki-client