Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: z5YbdMcvK0twncMFRB2OHHLT5+PKDKAyeZXHFld7Tis=
Subject key identifier: EB:3B:4A:55:75:61:24:A8:0D:D9:F4:48:B9:9F:D5:C7:6E:3D:9E:6D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 628677EC0230FE5A5604106224FE7D8A691EA30E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Wed 14 Oct 2026 15:23:27 +0000
ROA not before: Wed 14 Oct 2026 15:18:27 +0000
ROA not after: Wed 13 Oct 2027 15:23:27 +0000
asID: 2914
IP address blocks: 51.146.14.0/24 maxlen: 24
51.146.88.0/24 maxlen: 24
51.146.108.0/24 maxlen: 24
51.194.148.0/22 maxlen: 24
51.241.51.0/24 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
51.241.236.0/22 maxlen: 24
188.220.7.0/24 maxlen: 24
188.220.65.0/24 maxlen: 24
188.220.76.0/24 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
188.220.108.0/24 maxlen: 24
188.220.213.0/24 maxlen: 24
188.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:86:77:ec:02:30:fe:5a:56:04:10:62:24:fe:7d:8a:69:1e:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 14 15:18:27 2026 GMT
Not After : Oct 13 15:23:27 2027 GMT
Subject: CN=EB3B4A55756124A80DD9F448B99FD5C76E3D9E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:e6:d2:f3:a3:b4:ca:85:aa:93:de:16:36:
cf:48:f8:9b:76:cd:98:45:7a:2a:23:84:81:f5:9c:
a8:91:ca:5b:c9:f6:c3:0d:45:8e:8a:e9:a6:e2:01:
d2:20:c9:e3:cb:5c:35:8d:6c:fe:bc:0d:93:a0:b9:
d6:cf:ac:85:3a:c6:e1:fd:a2:ad:9d:b0:29:f2:bd:
63:af:c4:3c:6b:8e:74:dd:7b:19:fa:a5:6d:61:22:
dd:22:57:7f:7e:7d:54:d6:9d:05:14:66:58:11:e5:
e2:3a:fd:69:19:10:74:0c:10:70:b7:bf:4d:6b:c8:
42:84:e8:45:cd:57:12:96:bf:99:07:f4:28:24:0c:
b2:fc:3a:a2:ce:a7:6e:45:17:4d:94:c6:d0:de:4b:
48:61:df:fd:a5:24:5b:1d:2f:d6:47:0c:69:82:81:
c4:1a:51:b2:71:3e:47:ad:94:75:5d:53:1a:e7:43:
5a:cc:11:69:40:7f:4c:2b:8b:05:50:2c:cc:d1:55:
c7:dd:73:65:c5:3d:d7:ff:4a:73:ec:f4:21:ae:36:
30:f3:cd:41:9b:74:06:1f:74:dd:8a:1e:55:c5:c3:
51:df:a1:f1:d2:75:ed:ee:80:70:28:61:e5:69:fb:
42:25:4d:b2:9f:b6:05:ee:d4:8f:6e:52:8f:da:27:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:4A:55:75:61:24:A8:0D:D9:F4:48:B9:9F:D5:C7:6E:3D:9E:6D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.14.0/24
51.146.88.0/24
51.146.108.0/24
51.194.148.0/22
51.241.51.0/24
51.241.100.0/22
51.241.156.0-51.241.158.255
51.241.236.0/22
188.220.7.0/24
188.220.65.0/24
188.220.76.0/24
188.220.89.0/24
188.220.100.0/24
188.220.108.0/24
188.220.213.0/24
188.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
16:89:06:2a:2d:08:73:b1:7c:71:75:ae:99:2c:b5:7c:34:02:
07:20:9c:b0:51:be:c1:3e:ad:2d:2e:da:1b:1d:e9:2f:a4:a1:
55:d6:1d:bc:91:01:5a:9e:48:34:81:f7:19:2a:e4:20:a8:60:
ad:02:06:5f:54:a4:0a:2a:7e:e1:f0:6c:d5:57:32:d6:45:5d:
95:b0:7a:d1:29:36:59:f7:f9:d7:21:8b:28:f2:bd:79:a1:f8:
ed:64:26:8a:bf:96:92:4d:87:26:73:68:74:db:68:57:7e:c6:
52:c5:07:8e:5f:a5:cb:34:9e:62:34:5c:80:fb:7e:a3:d7:3f:
27:28:27:8a:b4:29:33:a0:ad:59:83:80:12:1f:19:39:a0:58:
30:81:9f:ee:73:3c:2a:47:33:a6:35:03:cd:e9:cb:e3:40:9e:
da:26:85:a9:63:f0:be:25:f8:7c:7f:33:b5:d3:13:89:7f:07:
33:95:25:eb:44:6a:93:2d:8c:db:2d:d1:4e:a9:6c:3b:02:d6:
d0:49:7f:b5:0a:3d:7c:e7:16:d7:84:f7:a9:c2:d9:32:db:72:
86:3e:fb:a9:2e:49:69:45:4f:83:8a:e6:26:87:20:62:78:97:
8a:19:7a:84:61:54:40:4e:c8:76:c1:e2:5e:03:0a:c9:12:cf:
7b:62:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:13:22 2026 by rpki-client