Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: 0+fj8jtG30O0/RI8SFRii89bj7KvKIYpaDYQx6D3XR8=
Subject key identifier: 25:C1:48:63:69:A7:98:13:D2:E1:CD:12:70:77:A5:6F:86:C2:70:B0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3266F4FBD15B8B7B03A523C07FBE3A93BF460923
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Mon 10 Aug 2026 00:02:10 +0000
ROA not before: Sun 09 Aug 2026 23:57:10 +0000
ROA not after: Mon 09 Aug 2027 00:02:10 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
51.241.236.0/22 maxlen: 24
188.220.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 12:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:66:f4:fb:d1:5b:8b:7b:03:a5:23:c0:7f:be:3a:93:bf:46:09:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 9 23:57:10 2026 GMT
Not After : Aug 9 00:02:10 2027 GMT
Subject: CN=25C1486369A79813D2E1CD127077A56F86C270B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:38:9f:8f:ed:e3:76:e3:6c:bf:1f:9b:5e:
80:48:6a:cf:63:96:7b:7e:2f:ab:51:15:ad:61:3d:
01:b7:e0:9a:d4:68:5d:00:0f:c1:a8:ba:c6:bf:9f:
62:7f:57:a1:5f:98:ea:fb:78:bc:bd:1f:df:13:20:
3c:f8:da:fc:6f:e5:db:f7:6d:43:bd:c7:28:da:a6:
e7:7f:a2:c3:21:7e:1b:d1:49:66:9f:b0:c7:28:40:
07:8b:f0:c8:4d:84:b8:bd:f6:1a:97:de:a9:91:7e:
8c:e4:a4:56:dc:51:9e:08:e1:28:d4:e8:b4:ca:e9:
db:35:f5:c8:75:5d:80:5a:09:38:bd:94:1a:59:9f:
44:8e:69:a5:04:ac:5f:7a:a3:56:e2:13:79:9b:1c:
3d:cf:84:f4:ef:87:67:86:2c:e3:19:64:fa:12:4b:
d6:fd:96:e4:0b:6f:44:d2:07:19:f6:9a:31:48:a9:
26:29:35:10:e5:ef:36:f3:a3:10:79:e1:7f:34:4a:
e7:20:2b:69:72:7c:27:ae:48:40:62:91:05:d8:5e:
8d:09:68:e9:62:f3:7e:be:6b:de:01:e2:49:16:61:
54:28:7a:90:24:36:c9:30:45:18:09:69:39:84:1b:
38:a6:a5:27:4f:56:11:7b:92:ab:95:05:65:7e:d8:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:48:63:69:A7:98:13:D2:E1:CD:12:70:77:A5:6F:86:C2:70:B0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
51.241.100.0/22
51.241.156.0-51.241.158.255
51.241.236.0/22
188.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:04:9e:e7:21:26:f7:b2:85:d9:03:f4:e3:fc:47:dc:6c:78:
eb:f0:e2:b9:95:e3:cc:03:44:21:ae:53:57:7d:c3:69:55:15:
89:9f:d2:46:5c:51:d5:6e:9a:e6:9f:71:61:fc:c3:bb:59:a8:
b2:bc:8a:f6:f5:7e:cb:0d:bb:7b:50:4f:6d:a0:aa:93:63:55:
a4:8d:34:dc:5c:58:fa:be:1a:ed:1f:23:a2:41:1b:89:03:5b:
15:8b:72:ff:d5:06:44:2e:7e:3b:9f:5f:4b:9d:bb:c3:fc:72:
22:b2:33:46:b0:3f:4d:2f:08:d9:3f:b1:02:f0:5f:76:b3:1d:
80:c0:a1:81:99:ac:ac:06:a2:4d:83:3c:ce:2f:21:11:7e:b3:
79:09:89:f3:8a:74:af:b8:c3:ca:3f:27:06:5b:ba:a9:50:72:
89:d7:97:c5:c6:a3:d4:38:a7:f9:2a:95:21:48:7d:a8:39:8b:
9c:14:5c:0a:af:70:f3:d7:3b:95:3b:8a:9d:d5:e6:e7:8e:80:
76:5f:2b:9f:ae:3d:bf:6d:c9:4f:e2:d7:5b:4d:df:47:0c:22:
02:46:8a:8d:57:26:f7:b9:7f:7c:50:af:b2:ee:63:5d:9a:83:
9d:bf:d6:3d:4c:7d:31:be:9a:51:a8:24:d1:3f:9a:11:cf:c1:
14:09:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:25:07 2026 by rpki-client