Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: pa9p5+vFOAi1asQcuxtYMsSivktvm8ulpksM+u/HPDE=
Subject key identifier: 5E:89:70:43:7D:BC:85:0A:52:4B:49:5A:3F:E9:8E:F0:01:55:5F:7B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 27CA3411538E43321F79751F624F6DC040E1892C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2914.roa
Signing time: Tue 27 Oct 2026 14:34:30 +0000
ROA not before: Tue 27 Oct 2026 14:29:30 +0000
ROA not after: Tue 26 Oct 2027 14:34:30 +0000
asID: 2914
IP address blocks: 143.20.36.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ca:34:11:53:8e:43:32:1f:79:75:1f:62:4f:6d:c0:40:e1:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 27 14:29:30 2026 GMT
Not After : Oct 26 14:34:30 2027 GMT
Subject: CN=5E8970437DBC850A524B495A3FE98EF001555F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:84:cb:30:e5:e0:e7:29:b1:d7:82:e2:09:
f8:30:56:62:7a:45:05:59:c8:64:fa:4d:3d:23:69:
d4:5c:3f:4e:45:95:33:54:3e:d4:78:ca:7a:ab:0a:
7e:22:19:56:28:0d:f0:b9:b5:dd:bc:59:58:30:ea:
4a:99:8e:c1:95:b9:53:11:60:c0:27:4b:25:2a:0c:
6d:40:85:53:0c:d8:2b:98:30:74:f2:7e:a7:b6:2c:
75:eb:e5:5d:6e:8d:ac:f9:01:b1:26:63:c2:03:5c:
ba:6b:1e:8a:50:f3:b8:ec:cc:f4:25:88:03:2d:35:
01:81:a3:f4:eb:ad:70:af:c3:e6:88:ea:cc:26:0e:
5c:d2:8a:30:3b:21:85:ca:0f:30:b3:dd:de:91:fe:
be:c2:c6:a6:0d:bc:d1:11:d9:80:9a:64:41:84:15:
07:4b:65:9a:0e:a0:33:41:d5:9d:52:17:cd:25:17:
92:f7:cd:71:33:f6:67:c5:94:2f:8c:74:94:51:ea:
80:bd:78:dc:28:64:9a:66:ae:e7:ab:a0:7e:88:6a:
bd:9d:40:aa:2c:3e:82:ee:10:5f:df:cd:35:fa:84:
a8:c1:2f:b5:a2:fd:81:bc:17:8d:9b:47:b7:13:81:
18:db:63:94:b6:c2:06:48:1e:10:bf:2b:0d:6c:d6:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:70:43:7D:BC:85:0A:52:4B:49:5A:3F:E9:8E:F0:01:55:5F:7B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.36.0/24
143.20.65.0/24
143.20.74.0/24
143.20.118.0/24
143.20.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2b:64:fb:4d:92:1f:86:5f:97:2c:de:d5:4e:ed:b0:7b:76:
93:f8:21:c4:25:b1:9a:72:0b:18:c0:e0:9a:7d:1b:bf:50:48:
92:c8:18:d8:bc:7f:ef:6f:f8:40:ac:35:d3:0a:2b:73:2f:b0:
c4:b5:49:ca:52:76:b5:79:e4:e2:76:dd:27:76:a0:77:08:4d:
d1:b5:df:53:95:d3:74:19:3d:49:3c:e3:e5:5a:c3:2f:9f:29:
30:e9:2f:1b:50:e1:fd:35:e8:56:61:b6:a2:dc:04:ea:05:95:
76:7a:1c:58:e2:c9:20:38:e8:57:2b:48:07:37:7f:48:b7:f3:
30:4d:95:eb:a5:da:84:e2:6f:12:29:44:4a:90:28:99:21:ce:
d0:46:75:d7:b7:ca:9b:7b:28:02:39:be:88:c1:ba:a5:03:a8:
47:70:30:62:64:3d:d3:d4:c2:50:5d:05:6b:5f:f4:82:b6:d9:
39:33:f8:67:57:0a:7f:48:aa:88:f0:66:6b:25:9d:83:d3:d9:
93:20:05:e3:50:ef:83:8a:6d:f0:28:49:b4:14:0b:cf:bc:9a:
1d:d0:1d:eb:07:16:48:c2:c5:f0:2d:18:77:6b:85:63:53:0f:
91:5d:5b:c9:75:dc:5c:d9:68:02:ea:a7:e8:25:79:3c:4c:19:
76:56:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:15:43 2026 by rpki-client