Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 0Y1DpLbL61669Dwn6di1XOjsn9Hb3EPdVm7VhW8wYFI=
Subject key identifier: 16:A3:7F:A8:19:4D:42:6A:EE:D1:35:2E:61:3F:97:E1:DF:81:33:D5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7C52F4B904C4BEA3A74FD57B8274B616744EB23C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
Signing time: Tue 29 Jul 2025 00:01:10 +0000
ROA not before: Mon 28 Jul 2025 23:56:10 +0000
ROA not after: Tue 28 Jul 2026 00:01:10 +0000
asID: 2914
IP address blocks: 91.124.20.0/22 maxlen: 22
92.112.240.0/24 maxlen: 24
92.112.241.0/24 maxlen: 24
92.112.242.0/24 maxlen: 24
92.112.243.0/24 maxlen: 24
92.112.244.0/24 maxlen: 24
92.112.245.0/24 maxlen: 24
92.112.246.0/24 maxlen: 24
92.112.247.0/24 maxlen: 24
95.134.48.0/24 maxlen: 24
95.134.168.0/23 maxlen: 24
95.134.170.0/23 maxlen: 24
95.134.172.0/23 maxlen: 24
95.134.174.0/24 maxlen: 24
95.134.195.0/24 maxlen: 24
95.134.213.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
178.92.8.0/22 maxlen: 24
178.92.16.0/22 maxlen: 24
178.92.24.0/22 maxlen: 24
178.92.36.0/22 maxlen: 24
178.92.64.0/22 maxlen: 24
178.92.120.0/22 maxlen: 24
178.93.0.0/22 maxlen: 24
178.93.100.0/22 maxlen: 24
178.94.176.0/22 maxlen: 24
178.94.196.0/22 maxlen: 24
178.95.0.0/22 maxlen: 24
178.95.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:52:f4:b9:04:c4:be:a3:a7:4f:d5:7b:82:74:b6:16:74:4e:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 28 23:56:10 2025 GMT
Not After : Jul 28 00:01:10 2026 GMT
Subject: CN=16A37FA8194D426AEED1352E613F97E1DF8133D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:92:9b:09:ba:68:47:ef:76:28:a1:14:1f:
c5:79:ed:9a:20:b1:5b:a6:75:d2:23:1c:55:c5:ec:
ef:b6:ca:b3:e7:ce:57:ee:8a:13:16:3f:4f:72:64:
a0:c5:fb:46:87:ef:12:8e:93:be:ac:8c:d0:1d:7d:
d7:de:65:29:f6:b2:34:e3:cf:8e:55:ec:f8:a2:91:
75:14:88:4e:1e:7c:30:08:1e:c8:8f:9e:44:d7:6f:
32:8e:8b:2b:a2:4b:41:3c:03:68:31:16:8b:f9:0c:
ac:cd:e6:a0:13:02:a3:8b:65:ad:f7:6c:8b:5d:d7:
63:57:ed:77:08:be:88:9c:1c:80:09:ba:77:8e:d1:
f7:7d:14:19:e7:0e:0f:24:8e:76:45:48:8f:55:67:
1a:02:cc:7f:72:f5:ff:c5:f7:68:fe:08:d4:76:53:
66:bf:a2:46:4e:d1:ac:4a:49:6b:c1:1b:d3:f4:35:
3b:6a:f8:f7:aa:73:b9:8e:62:0a:f9:aa:87:f3:55:
ca:8a:e6:28:6c:1e:b4:c3:a0:7a:71:58:0a:b3:9f:
81:b4:cf:df:9c:cc:5b:23:7a:5d:53:ed:95:cf:3c:
0c:e6:f0:a5:c3:39:50:f6:cb:6d:85:1e:0e:29:a9:
90:a1:03:47:a2:15:b8:45:de:6d:58:5e:10:c5:19:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A3:7F:A8:19:4D:42:6A:EE:D1:35:2E:61:3F:97:E1:DF:81:33:D5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.20.0/22
92.112.240.0/21
95.134.48.0/24
95.134.168.0-95.134.174.255
95.134.195.0/24
95.134.213.0/24
95.135.50.0/24
178.92.8.0/22
178.92.16.0/22
178.92.24.0/22
178.92.36.0/22
178.92.64.0/22
178.92.120.0/22
178.93.0.0/22
178.93.100.0/22
178.94.176.0/22
178.94.196.0/22
178.95.0.0/22
178.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:ee:d1:9c:95:ad:92:48:54:e9:96:4d:6f:f3:40:17:08:34:
40:f9:ca:2e:60:0c:58:e2:b4:cd:b7:46:d5:17:89:4b:80:ba:
44:5e:5b:3c:4c:be:84:af:a2:24:47:96:53:5b:d2:fa:32:08:
2e:00:91:ee:f6:03:1d:bb:30:6a:5d:5d:b7:5d:90:6d:6f:50:
4e:c4:65:f2:4c:85:ed:f0:21:eb:5f:15:8a:e4:f2:f5:a0:63:
41:1f:02:74:91:8a:9c:3d:72:5b:91:4b:a9:7b:56:22:c3:e8:
d7:0b:cc:ce:e6:91:13:d0:f8:fc:48:a8:6c:f0:a1:cb:c7:9d:
e2:d9:f4:31:73:3e:e9:91:e2:bc:d5:ae:f2:0a:bf:2f:7c:15:
21:48:e1:0f:b3:b4:87:65:80:4f:12:de:05:7d:96:2f:4e:b2:
52:de:16:10:b0:e9:7d:a8:b4:2a:a5:80:53:ef:46:c3:c8:13:
53:2a:8c:28:0b:dc:5e:17:28:cc:83:30:3f:17:d9:fa:b7:97:
21:5a:1a:28:99:96:ca:e5:a8:6c:ae:79:70:49:29:32:11:bf:
33:f1:36:03:fb:14:7c:5a:06:44:4a:ba:fd:30:d3:15:2b:39:
33:86:b2:b7:31:b7:59:2d:30:cc:c5:43:11:5c:f4:49:ea:9a:
e7:f1:92:e0
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIUfFL0uQTEvqOnT9V7gnS2FnROsjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MjgyMzU2MTBaFw0yNjA3MjgwMDAxMTBaMDMxMTAvBgNV
BAMTKDE2QTM3RkE4MTk0RDQyNkFFRUQxMzUyRTYxM0Y5N0UxREY4MTMzRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwO5KbCbpoR+92KKEUH8V57Zog
sVumddIjHFXF7O+2yrPnzlfuihMWP09yZKDF+0aH7xKOk76sjNAdfdfeZSn2sjTj
z45V7PiikXUUiE4efDAIHsiPnkTXbzKOiyuiS0E8A2gxFov5DKzN5qATAqOLZa33
bItd12NX7XcIvoicHIAJuneO0fd9FBnnDg8kjnZFSI9VZxoCzH9y9f/F92j+CNR2
U2a/okZO0axKSWvBG9P0NTtq+Peqc7mOYgr5qofzVcqK5ihsHrTDoHpxWAqzn4G0
z9+czFsjel1T7ZXPPAzm8KXDOVD2y22FHg4pqZChA0eiFbhF3m1YXhDFGSKpAgMB
AAGjggKAMIICfDAdBgNVHQ4EFgQUFqN/qBlNQmru0TUuYT+X4d+BM9UwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBlgYIKwYBBQUHAQcBAf8EgYYwgYMwgYAEAgABMHoDBAJb
fBQDBANccPADBABfhjAwDAMEA1+GqAMEAF+GrgMEAF+GwwMEAF+G1QMEAF+HMgME
ArJcCAMEArJcEAMEArJcGAMEArJcJAMEArJcQAMEArJceAMEArJdAAMEArJdZAME
ArJesAMEArJexAMEArJfAAMEArJfFDANBgkqhkiG9w0BAQsFAAOCAQEAbu7RnJWt
kkhU6ZZNb/NAFwg0QPnKLmAMWOK0zbdG1ReJS4C6RF5bPEy+hK+iJEeWU1vS+jII
LgCR7vYDHbswal1dt12QbW9QTsRl8kyF7fAh618ViuTy9aBjQR8CdJGKnD1yW5FL
qXtWIsPo1wvMzuaRE9D4/EiobPChy8ed4tn0MXM+6ZHivNWu8gq/L3wVIUjhD7O0
h2WATxLeBX2WL06yUt4WELDpfai0KqWAU+9Gw8gTUyqMKAvcXhcozIMwPxfZ+reX
IVoaKJmWyuWobK55cEkpMhG/M/E2A/sUfFoGREq6/TDTFSs5M4aytzG3WS0wzMVD
EVz0Seqa5/GS4A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:48 2025 by rpki-client