Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 0x0suGIQJL8cmEeEUVXdaLBTNtnucPLtv0eSvB1C6rA=
Subject key identifier: 53:55:E6:DF:6B:20:72:57:5D:93:41:31:33:A2:29:54:4A:06:35:B6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3837157115DB7141337238F124A2E4BD4268B7A1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
Signing time: Sat 01 Nov 2025 00:15:40 +0000
ROA not before: Sat 01 Nov 2025 00:10:40 +0000
ROA not after: Sat 31 Oct 2026 00:15:40 +0000
asID: 2914
IP address blocks: 46.202.51.0/24 maxlen: 24
46.202.53.0/24 maxlen: 24
46.203.197.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
46.203.223.0/24 maxlen: 24
46.203.225.0/24 maxlen: 24
91.124.20.0/22 maxlen: 22
92.112.240.0/24 maxlen: 24
92.112.241.0/24 maxlen: 24
92.112.242.0/24 maxlen: 24
92.112.243.0/24 maxlen: 24
92.112.244.0/24 maxlen: 24
92.112.245.0/24 maxlen: 24
92.112.246.0/24 maxlen: 24
92.112.247.0/24 maxlen: 24
95.134.83.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.134.168.0/23 maxlen: 24
95.134.170.0/23 maxlen: 24
95.134.172.0/23 maxlen: 24
95.134.174.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
178.92.16.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.92.226.0/24 maxlen: 24
178.92.235.0/24 maxlen: 24
178.92.237.0/24 maxlen: 24
178.92.251.0/24 maxlen: 24
178.93.0.0/22 maxlen: 24
178.93.37.0/24 maxlen: 24
178.94.0.0/24 maxlen: 24
178.94.4.0/24 maxlen: 24
178.94.6.0/24 maxlen: 24
178.94.7.0/24 maxlen: 24
178.94.21.0/24 maxlen: 24
178.94.27.0/24 maxlen: 24
178.94.32.0/24 maxlen: 24
178.94.66.0/24 maxlen: 24
178.94.73.0/24 maxlen: 24
178.94.77.0/24 maxlen: 24
178.94.79.0/24 maxlen: 24
178.94.103.0/24 maxlen: 24
178.94.110.0/24 maxlen: 24
178.94.120.0/24 maxlen: 24
178.94.189.0/24 maxlen: 24
178.94.210.0/24 maxlen: 24
178.94.212.0/24 maxlen: 24
178.94.220.0/24 maxlen: 24
178.94.223.0/24 maxlen: 24
178.94.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:37:15:71:15:db:71:41:33:72:38:f1:24:a2:e4:bd:42:68:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:10:40 2025 GMT
Not After : Oct 31 00:15:40 2026 GMT
Subject: CN=5355E6DF6B2072575D93413133A229544A0635B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:2a:62:2b:54:8e:ac:61:21:25:3a:18:58:
51:01:50:15:fb:fe:28:e7:a5:fb:32:92:ae:d8:70:
a0:09:a2:4a:11:b1:fb:ff:29:81:3c:20:59:6e:ff:
1d:bd:61:03:cb:50:2c:da:98:74:1c:a1:62:ed:67:
97:df:a9:02:7b:b2:5c:f7:4a:26:3d:bf:06:0f:72:
da:e9:b6:d2:fb:61:9c:9e:c2:b7:62:48:42:a0:54:
86:d3:33:99:23:44:ae:55:d0:47:87:d6:db:3a:22:
61:71:62:6f:7a:30:37:e3:6b:d9:b9:3b:9a:40:7d:
d0:5a:5c:eb:03:ed:e5:f7:7b:12:83:7f:82:49:a5:
1e:cb:b6:e0:68:2b:42:28:6c:99:7b:8e:0c:eb:bd:
98:51:82:37:d0:d3:a5:f1:aa:4f:43:df:9e:51:a0:
3a:4f:fd:73:fd:c8:88:49:90:b6:b3:ca:28:56:78:
80:10:01:28:da:2f:4a:89:f6:02:ac:3e:48:1f:48:
4d:44:1c:99:c4:9e:22:8b:f7:48:ff:17:20:d5:9e:
21:c7:91:35:7b:c1:dd:96:04:60:71:d7:45:85:28:
4a:6f:6a:4b:0e:64:00:37:d3:71:98:0e:9b:34:d3:
78:76:3f:6a:ca:81:ee:2e:6c:46:40:59:07:d5:7f:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:E6:DF:6B:20:72:57:5D:93:41:31:33:A2:29:54:4A:06:35:B6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.51.0/24
46.202.53.0/24
46.203.197.0/24
46.203.205.0/24
46.203.223.0/24
46.203.225.0/24
91.124.20.0/22
92.112.240.0/21
95.134.83.0/24
95.134.148.0/24
95.134.150.0/24
95.134.168.0-95.134.174.255
95.135.194.0/24
95.135.223.0/24
178.92.16.0/22
178.92.36.0/22
178.92.226.0/24
178.92.235.0/24
178.92.237.0/24
178.92.251.0/24
178.93.0.0/22
178.93.37.0/24
178.94.0.0/24
178.94.4.0/24
178.94.6.0/23
178.94.21.0/24
178.94.27.0/24
178.94.32.0/24
178.94.66.0/24
178.94.73.0/24
178.94.77.0/24
178.94.79.0/24
178.94.103.0/24
178.94.110.0/24
178.94.120.0/24
178.94.189.0/24
178.94.210.0/24
178.94.212.0/24
178.94.220.0/24
178.94.223.0/24
178.94.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:14:ad:5b:8c:07:f4:ee:14:3c:bc:ea:91:91:4a:47:19:15:
42:3a:4f:72:ea:ea:46:8b:2c:d2:cc:95:b0:f1:d8:a9:c0:df:
d7:47:df:f9:39:23:26:a3:57:70:cd:c7:b2:b4:74:52:9e:23:
07:bb:f5:6c:d7:90:43:be:91:09:01:81:7c:eb:64:c9:9a:ed:
49:cd:73:67:f2:a8:93:99:60:c6:31:92:40:cb:3a:af:a1:92:
f3:12:00:91:2d:d1:64:fb:92:9c:da:2a:fb:0b:b7:be:32:b9:
5b:48:b4:56:43:c8:da:19:7c:b9:a3:df:72:ba:ec:86:f9:29:
c0:27:20:d6:5a:5e:e5:a6:08:56:5b:ea:f3:50:9c:6c:8d:0d:
ed:8e:cb:14:23:5e:c8:83:5c:f4:d2:0a:32:9f:dc:e0:2f:f2:
99:2d:7b:78:6e:55:58:6e:b8:c5:0c:74:fb:7b:87:75:c5:6e:
54:bd:38:b4:27:ea:cb:97:45:58:ec:39:de:ba:5d:2a:29:91:
4f:80:28:8d:98:d8:96:1b:5a:75:1c:e1:1a:8f:cd:7c:28:0c:
d7:8d:1d:14:e8:80:58:5c:f3:5b:a1:69:34:74:31:cf:1f:ca:
c2:02:43:8d:5e:42:62:72:73:c2:72:38:07:f1:22:df:ab:4e:
0f:07:3f:49
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIUODcVcRXbcUEzcjjxJKLkvUJot6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTExMDEwMDEwNDBaFw0yNjEwMzEwMDE1NDBaMDMxMTAvBgNV
BAMTKDUzNTVFNkRGNkIyMDcyNTc1RDkzNDEzMTMzQTIyOTU0NEEwNjM1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBipiK1SOrGEhJToYWFEBUBX7
/ijnpfsykq7YcKAJokoRsfv/KYE8IFlu/x29YQPLUCzamHQcoWLtZ5ffqQJ7slz3
SiY9vwYPctrpttL7YZyewrdiSEKgVIbTM5kjRK5V0EeH1ts6ImFxYm96MDfja9m5
O5pAfdBaXOsD7eX3exKDf4JJpR7LtuBoK0IobJl7jgzrvZhRgjfQ06Xxqk9D355R
oDpP/XP9yIhJkLazyihWeIAQASjaL0qJ9gKsPkgfSE1EHJnEniKL90j/FyDVniHH
kTV7wd2WBGBx10WFKEpvaksOZAA303GYDps003h2P2rKge4ubEZAWQfVf0JrAgMB
AAGjggMJMIIDBTAdBgNVHQ4EFgQUU1Xm32sgclddk0ExM6IpVEoGNbYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAR4GCCsGAQUFBwEHAQH/BIIBDTCCAQkwggEFBAIAATCB
/gMEAC7KMwMEAC7KNQMEAC7LxQMEAC7LzQMEAC7L3wMEAC7L4QMEAlt8FAMEA1xw
8AMEAF+GUwMEAF+GlAMEAF+GljAMAwQDX4aoAwQAX4auAwQAX4fCAwQAX4ffAwQC
slwQAwQCslwkAwQAslziAwQAslzrAwQAslztAwQAslz7AwQCsl0AAwQAsl0lAwQA
sl4AAwQAsl4EAwQBsl4GAwQAsl4VAwQAsl4bAwQAsl4gAwQAsl5CAwQAsl5JAwQA
sl5NAwQAsl5PAwQAsl5nAwQAsl5uAwQAsl54AwQAsl69AwQAsl7SAwQAsl7UAwQA
sl7cAwQAsl7fAwQAsl7+MA0GCSqGSIb3DQEBCwUAA4IBAQAMFK1bjAf07hQ8vOqR
kUpHGRVCOk9y6upGiyzSzJWw8dipwN/XR9/5OSMmo1dwzceytHRSniMHu/Vs15BD
vpEJAYF862TJmu1JzXNn8qiTmWDGMZJAyzqvoZLzEgCRLdFk+5Kc2ir7C7e+Mrlb
SLRWQ8jaGXy5o99yuuyG+SnAJyDWWl7lpghWW+rzUJxsjQ3tjssUI17Ig1z00goy
n9zgL/KZLXt4blVYbrjFDHT7e4d1xW5UvTi0J+rLl0VY7Dneul0qKZFPgCiNmNiW
G1p1HOEaj818KAzXjR0U6IBYXPNboWk0dDHPH8rCAkONXkJicnPCcjgH8SLfq04P
Bz9J
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:04 2025 by rpki-client