Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: LvWktpVay3WrKuIJmQJekZtK2rr15OHSepiw97SUc7w=
Subject key identifier: 2F:49:A2:E4:C3:B9:AF:47:B4:97:85:97:EE:A8:98:C1:A5:C1:DB:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 487905AB22F4F1214FA635324EBDF20B8A64F075
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Sun 19 Jul 2026 11:44:13 +0000
ROA not before: Sun 19 Jul 2026 11:39:13 +0000
ROA not after: Sun 18 Jul 2027 11:44:13 +0000
asID: 2914
IP address blocks: 96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.144.0/23 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
140.150.153.0/24 maxlen: 24
143.14.60.0/24 maxlen: 24
143.14.61.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.84.0/24 maxlen: 24
143.14.85.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.109.0/24 maxlen: 24
143.14.154.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.101.0/24 maxlen: 24
155.117.104.0/24 maxlen: 24
155.117.160.0/24 maxlen: 24
162.141.16.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.45.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.81.0/24 maxlen: 24
162.141.89.0/24 maxlen: 24
162.141.99.0/24 maxlen: 24
162.141.102.0/24 maxlen: 24
162.141.113.0/24 maxlen: 24
162.141.132.0/24 maxlen: 24
162.141.143.0/24 maxlen: 24
162.141.154.0/24 maxlen: 24
162.141.162.0/24 maxlen: 24
162.141.176.0/24 maxlen: 24
162.141.177.0/24 maxlen: 24
162.141.182.0/24 maxlen: 24
167.148.7.0/24 maxlen: 24
167.148.9.0/24 maxlen: 24
167.148.11.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.13.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.34.0/24 maxlen: 24
167.148.47.0/24 maxlen: 24
167.148.71.0/24 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.73.0/24 maxlen: 24
167.148.74.0/24 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.101.0/24 maxlen: 24
167.148.103.0/24 maxlen: 24
167.148.107.0/24 maxlen: 24
167.148.113.0/24 maxlen: 24
167.148.114.0/24 maxlen: 24
167.148.124.0/24 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.132.0/24 maxlen: 24
167.148.133.0/24 maxlen: 24
167.148.137.0/24 maxlen: 24
167.148.142.0/24 maxlen: 24
167.148.143.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.151.0/24 maxlen: 24
167.148.155.0/24 maxlen: 24
167.148.160.0/24 maxlen: 24
167.148.174.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:79:05:ab:22:f4:f1:21:4f:a6:35:32:4e:bd:f2:0b:8a:64:f0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 11:39:13 2026 GMT
Not After : Jul 18 11:44:13 2027 GMT
Subject: CN=2F49A2E4C3B9AF47B4978597EEA898C1A5C1DB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:e8:4a:4b:67:53:12:90:0c:ba:13:a7:70:
59:11:29:c3:dc:9f:9c:41:86:9d:15:fa:97:e8:e9:
64:b3:6a:e4:d0:e9:6c:29:9c:86:3e:c6:6d:b8:2b:
05:32:b0:17:b1:10:85:cb:90:8b:ce:89:18:f4:a8:
1e:bc:f9:dc:f5:4b:20:05:44:1e:97:0c:c0:a5:a0:
ad:46:9e:f4:bd:9c:70:69:1e:2e:1e:4a:e1:7c:9d:
a3:cf:66:62:7e:31:f6:a1:7d:03:87:8d:42:54:47:
e7:f3:7c:29:a4:10:8f:e6:bb:95:b4:3d:dc:2e:aa:
ef:85:82:fe:70:7f:78:6d:31:88:13:2b:f3:41:28:
f1:17:ab:6e:8c:4b:d7:1a:02:ba:3a:b6:aa:73:ad:
97:b1:77:a0:ed:9e:db:2f:97:8d:8f:df:62:3a:c4:
7e:04:c4:f2:4b:b8:5a:cb:4e:d5:b3:f0:52:21:bc:
53:57:22:b4:b8:9d:fe:3b:94:b8:94:15:c0:5d:0b:
cb:12:74:09:b7:e0:ae:28:0e:b2:b1:12:7f:40:87:
96:ad:f8:1c:45:03:41:d0:b1:3a:13:36:c6:4c:52:
88:c0:76:65:8b:44:f8:1c:68:a4:84:c7:e7:9c:00:
7c:18:42:ff:18:a8:5f:81:49:16:0e:28:e6:36:5b:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:A2:E4:C3:B9:AF:47:B4:97:85:97:EE:A8:98:C1:A5:C1:DB:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.32.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.147.255
96.62.156.0-96.62.175.255
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
140.150.153.0/24
143.14.60.0/23
143.14.72.0/24
143.14.84.0/23
143.14.108.0/23
143.14.154.0/24
143.14.197.0/24
150.241.130.0/24
155.117.101.0/24
155.117.104.0/24
155.117.160.0/24
162.141.16.0/24
162.141.18.0/24
162.141.20.0/24
162.141.45.0/24
162.141.50.0/24
162.141.53.0/24
162.141.81.0/24
162.141.89.0/24
162.141.99.0/24
162.141.102.0/24
162.141.113.0/24
162.141.132.0/24
162.141.143.0/24
162.141.154.0/24
162.141.162.0/24
162.141.176.0/23
162.141.182.0/24
167.148.7.0/24
167.148.9.0/24
167.148.11.0-167.148.13.255
167.148.30.0-167.148.32.255
167.148.34.0/24
167.148.47.0/24
167.148.71.0-167.148.74.255
167.148.99.0/24
167.148.101.0/24
167.148.103.0/24
167.148.107.0/24
167.148.113.0-167.148.114.255
167.148.124.0/24
167.148.129.0/24
167.148.132.0/23
167.148.137.0/24
167.148.142.0/23
167.148.146.0/24
167.148.151.0/24
167.148.155.0/24
167.148.160.0/24
167.148.174.0/24
167.148.176.0/24
167.148.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2c:e1:43:8d:21:fd:fb:33:ed:27:ad:c1:d9:ac:a1:fe:7f:
d4:e0:e9:22:2c:5b:b7:53:2c:7b:ff:78:c2:a6:14:ba:f4:39:
cd:d9:e4:f8:b6:93:5f:1b:83:ef:82:7e:c2:d0:c5:31:3c:ed:
c6:db:51:8e:6e:e2:34:dd:3f:34:b7:02:4e:7e:b0:cc:1d:a2:
24:07:47:ce:e7:73:b3:05:09:86:e4:a0:74:93:61:79:14:91:
0a:bf:99:80:ee:ea:49:73:8d:8a:43:06:b3:f4:ce:66:71:f5:
73:bc:ae:91:01:49:69:89:c2:b8:c6:30:e9:34:0c:31:63:f6:
18:28:76:41:4c:79:77:45:2a:3f:4f:bd:d1:97:34:43:24:c2:
a4:2d:7a:ea:b2:f4:0b:dc:50:cd:6c:a0:a7:29:f1:f8:b2:1d:
65:51:4c:42:dc:c0:06:33:78:4f:11:11:c7:20:a5:7a:99:37:
c9:6b:1c:1d:d1:2c:ab:77:6f:a9:4c:0c:95:08:17:96:99:93:
03:24:2d:bd:7c:8f:6b:cc:5c:eb:00:35:8b:60:55:09:71:99:
b6:4c:45:f7:c5:ce:34:90:76:27:34:b2:59:58:d8:7e:6e:54:
6a:3c:08:15:0c:ed:bf:bf:3c:20:46:d8:a8:71:f7:d7:ce:44:
a0:24:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:10 2026 by rpki-client