Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: rfWKRjiPCNNtk/QM2acPAs9+4J5tG200Od0sBjKsQtA=
Subject key identifier: 92:B3:14:9B:3D:06:46:04:28:03:DE:B6:B5:BE:0E:94:D1:D9:A8:22
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 20AA22A38F7CF9A85BCEBB9C9E97E4DBFC3FCCB2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Tue 01 Sep 2026 11:11:25 +0000
ROA not before: Tue 01 Sep 2026 11:06:25 +0000
ROA not after: Tue 31 Aug 2027 11:11:25 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
51.241.236.0/22 maxlen: 24
188.220.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:aa:22:a3:8f:7c:f9:a8:5b:ce:bb:9c:9e:97:e4:db:fc:3f:cc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 11:06:25 2026 GMT
Not After : Aug 31 11:11:25 2027 GMT
Subject: CN=92B3149B3D0646042803DEB6B5BE0E94D1D9A822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:bf:ab:09:a7:fd:ef:d4:18:5b:9b:39:87:
6c:95:aa:08:52:b9:35:41:b8:12:67:44:d5:b4:ac:
2c:3d:b9:3a:df:46:a3:87:be:3c:49:1e:0e:1b:d2:
43:44:aa:16:ee:f2:36:95:82:7a:28:35:c8:69:c5:
a1:7d:97:03:9f:47:94:1c:d1:96:1e:8f:27:a3:26:
93:b5:4c:b4:61:34:3c:f3:96:f3:d2:cb:14:db:3f:
f9:94:9b:46:36:ae:d6:02:59:b4:68:28:cc:8a:f5:
63:2e:cd:0b:a3:5a:63:9f:d9:c0:fa:90:7c:20:4d:
2a:3b:9f:fd:0e:84:16:4e:71:44:50:98:06:af:60:
23:75:e2:ff:74:d4:9d:d7:14:d2:0c:8e:3c:6d:f4:
cf:b1:79:f9:f6:5c:8c:8a:47:f2:9f:9f:a2:10:30:
08:52:18:83:cc:6c:cd:bf:a7:e4:60:0c:8b:ec:b4:
4b:fc:1d:d3:6d:af:b8:b3:84:36:7b:30:fd:31:5c:
87:b0:ef:3d:75:14:79:af:19:dd:f8:90:5c:e0:c8:
4f:95:0c:c0:b5:a3:66:29:bc:06:08:21:d4:33:5b:
7d:dc:7a:2d:c3:33:87:b2:d2:83:c0:a4:b2:ea:c2:
b3:39:e6:3c:a7:a6:c6:aa:3a:18:58:e7:40:28:45:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:14:9B:3D:06:46:04:28:03:DE:B6:B5:BE:0E:94:D1:D9:A8:22
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
51.241.100.0/22
51.241.156.0-51.241.158.255
51.241.236.0/22
188.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:38:e9:24:c9:61:98:43:88:15:5a:41:57:f0:f8:24:8f:3a:
01:10:47:db:67:e5:c0:f9:f0:b4:08:82:43:2c:51:42:2e:e3:
10:3c:9b:ab:ce:ac:a5:35:3e:57:13:b8:f0:33:09:ce:4a:98:
3d:29:43:e3:f3:c0:4b:ec:52:50:df:f6:60:1d:46:c2:35:b0:
bc:e1:82:75:99:54:1f:cb:18:b3:b0:79:0f:17:b3:5d:65:4c:
29:38:f4:f1:1d:0d:37:f9:0a:2b:7d:22:ba:e6:ce:54:ba:07:
f1:ba:f3:11:a5:d7:5f:77:66:f1:e6:91:72:98:06:6d:a7:68:
46:3c:40:be:a6:12:1c:1b:6b:07:5b:82:9e:88:f0:8c:ed:f2:
bf:61:8f:db:7c:97:3c:bf:f9:99:52:8e:76:23:15:c5:95:26:
de:d8:81:bd:73:f3:b1:13:28:9b:85:dd:f0:1e:87:61:f4:55:
40:c2:84:db:78:01:7b:72:87:76:69:14:5b:66:67:8c:5a:30:
2d:02:86:76:f1:b1:8a:5e:c1:fc:f0:8a:90:1a:51:7c:c9:18:
d2:cc:e0:f2:3c:d1:72:57:70:da:e8:76:45:33:30:eb:db:23:
c8:73:fa:ba:0e:62:bc:87:57:27:1d:a3:63:dd:a4:73:2d:35:
c1:bf:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:57:59 2026 by rpki-client