Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 6DMrr1ngzvb1RLHMcmWoWN+vrWUw4GEg/+r4+O1nWzA=
Subject key identifier: 5F:00:40:62:58:4E:EB:55:9D:8C:DB:A6:8A:A3:EB:6D:40:76:A2:3C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 50A84C59B36F479F09A6D219054C8809B82E0924
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Wed 10 Jun 2026 10:43:32 +0000
ROA not before: Wed 10 Jun 2026 10:38:32 +0000
ROA not after: Wed 09 Jun 2027 10:43:32 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
51.194.224.0/24 maxlen: 24
51.194.243.0/24 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
188.220.59.0/24 maxlen: 24
188.220.86.0/24 maxlen: 24
188.220.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a8:4c:59:b3:6f:47:9f:09:a6:d2:19:05:4c:88:09:b8:2e:09:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 10 10:38:32 2026 GMT
Not After : Jun 9 10:43:32 2027 GMT
Subject: CN=5F004062584EEB559D8CDBA68AA3EB6D4076A23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:c2:c3:36:ca:dd:88:75:bf:36:49:89:42:
08:79:4b:78:3d:b3:70:52:87:9b:9b:e9:cb:c2:57:
bd:34:91:56:7c:30:75:47:b6:60:f6:69:40:5c:f9:
0c:ea:4e:96:50:c2:7b:ee:fd:81:01:eb:48:1e:bc:
4d:95:cb:b2:61:75:cd:05:96:9c:58:f1:b9:4c:17:
df:47:d6:af:3d:8a:64:db:b8:a7:22:a8:95:b9:fc:
88:e9:97:fb:8f:70:a5:ba:e4:88:b4:57:f6:9f:2d:
09:f3:14:ad:14:4e:1a:ce:70:1d:4d:cf:8b:01:66:
9a:b7:d2:c0:e7:b4:47:a7:47:a4:f6:d5:50:c2:48:
4c:55:f9:6e:0c:cf:14:84:63:9b:78:3a:c0:1b:12:
87:2d:18:b9:01:55:8c:17:3c:93:f2:5a:4b:ef:67:
08:66:66:7f:fc:dc:55:55:bd:fe:bc:46:ba:60:3f:
7d:3f:47:a9:bd:fd:16:82:4a:7e:a2:ea:b9:68:ca:
e0:a7:55:b1:4a:fa:93:d6:68:78:a2:95:a9:1c:da:
f5:41:f3:a4:a3:09:2e:31:90:b0:34:9d:83:2c:b7:
f2:35:43:7e:fd:d2:08:f5:aa:a5:a7:96:50:8b:7d:
7f:7f:bf:0a:df:61:cf:0c:3e:ca:58:ac:02:e4:9d:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:40:62:58:4E:EB:55:9D:8C:DB:A6:8A:A3:EB:6D:40:76:A2:3C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
51.194.224.0/24
51.194.243.0/24
51.241.156.0-51.241.158.255
188.220.59.0/24
188.220.86.0/24
188.220.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ba:dd:a0:b7:f5:b1:d0:34:b3:30:9b:82:65:ec:32:a4:dd:
ce:17:d2:03:35:70:52:2e:85:55:fb:03:1d:da:67:64:fb:b2:
6f:41:f3:65:f5:e6:da:0b:62:1c:47:2b:35:7e:ca:cc:de:80:
ad:29:e7:4c:ca:85:e2:3b:09:56:8f:15:c2:c1:66:21:30:7f:
cd:e1:0d:d3:a5:b9:bf:01:3f:66:cc:75:b7:16:f4:76:49:81:
fd:f8:bc:83:85:a9:d4:b9:e9:08:26:32:45:50:94:11:18:6a:
f8:41:57:ad:95:6e:79:6f:dc:b3:fa:7a:6f:81:91:d5:55:21:
21:a2:fd:a4:05:26:45:be:aa:a8:5d:77:99:67:e4:04:ab:87:
02:34:5e:91:13:e7:27:cc:b9:89:26:c3:5e:37:7b:35:c9:19:
e9:34:d1:29:07:ee:f0:3b:cd:6a:b7:6f:9c:d7:43:18:14:93:
ef:59:e5:a1:a5:29:85:9d:3f:ce:19:23:c7:05:a4:40:84:66:
3e:c7:c1:1e:69:4d:f5:69:44:32:c3:8d:93:fe:03:4a:64:77:
ee:b4:cb:ac:fb:97:fe:bc:65:b9:ad:b5:df:d1:76:1c:7a:54:
6a:5c:51:b1:57:8f:7a:03:02:22:c7:6b:7b:03:48:26:ae:2e:
b4:a0:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:38 2026 by rpki-client