Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: Uhmzbchzse76S4m8hvAktRho2lbiCCtwQFrztjDu2Yc=
Subject key identifier: 47:1A:16:0F:B6:E0:3E:93:B2:A3:BE:95:FB:1C:B2:2E:05:48:E3:16
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 494C450A6D75BEEBC9357CCAC2E7F29EB5651719
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
Signing time: Mon 28 Sep 2026 00:06:20 +0000
ROA not before: Mon 28 Sep 2026 00:01:20 +0000
ROA not after: Mon 27 Sep 2027 00:06:20 +0000
asID: 2914
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.53.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
46.203.197.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
46.203.223.0/24 maxlen: 24
46.203.225.0/24 maxlen: 24
92.112.240.0/24 maxlen: 24
92.112.241.0/24 maxlen: 24
92.112.242.0/24 maxlen: 24
92.112.243.0/24 maxlen: 24
92.112.246.0/24 maxlen: 24
92.112.247.0/24 maxlen: 24
95.134.6.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.83.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.134.168.0/23 maxlen: 24
95.134.170.0/23 maxlen: 24
95.134.172.0/23 maxlen: 24
95.134.174.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.92.226.0/24 maxlen: 24
178.92.235.0/24 maxlen: 24
178.92.237.0/24 maxlen: 24
178.92.251.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.37.0/24 maxlen: 24
178.94.0.0/24 maxlen: 24
178.94.4.0/24 maxlen: 24
178.94.6.0/24 maxlen: 24
178.94.7.0/24 maxlen: 24
178.94.21.0/24 maxlen: 24
178.94.27.0/24 maxlen: 24
178.94.32.0/24 maxlen: 24
178.94.66.0/24 maxlen: 24
178.94.73.0/24 maxlen: 24
178.94.77.0/24 maxlen: 24
178.94.79.0/24 maxlen: 24
178.94.103.0/24 maxlen: 24
178.94.110.0/24 maxlen: 24
178.94.120.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
178.94.189.0/24 maxlen: 24
178.94.210.0/24 maxlen: 24
178.94.212.0/24 maxlen: 24
178.94.220.0/24 maxlen: 24
178.94.223.0/24 maxlen: 24
178.94.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4c:45:0a:6d:75:be:eb:c9:35:7c:ca:c2:e7:f2:9e:b5:65:17:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 28 00:01:20 2026 GMT
Not After : Sep 27 00:06:20 2027 GMT
Subject: CN=471A160FB6E03E93B2A3BE95FB1CB22E0548E316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:50:c3:ac:55:ef:18:81:44:c0:1c:4b:d1:
a9:2b:c7:39:06:3a:ad:5b:76:16:d0:ae:f4:be:b6:
98:59:ca:65:29:88:5a:83:5b:30:d9:ab:a1:92:93:
a0:cc:6d:0f:a0:04:49:be:02:18:fa:f5:a9:fe:3f:
7e:a0:0a:08:69:1c:8d:27:87:80:6b:44:a3:4c:fe:
f6:67:ff:3e:83:b8:af:24:9d:29:7c:3d:71:02:62:
13:75:0d:ef:6e:a8:46:f3:50:3d:9d:83:72:87:01:
d9:33:a1:f7:f8:52:00:b3:b1:0d:b6:01:a3:af:88:
25:b2:38:15:d0:ae:7f:79:df:fc:98:24:41:df:4d:
b7:c2:94:cc:95:ec:5a:01:db:9f:7e:85:80:ae:92:
a5:48:ac:be:2b:ca:07:ba:d0:fd:00:77:8e:41:b8:
05:de:f1:70:3e:6e:5c:20:30:bb:82:58:87:64:64:
8b:df:f8:6a:e4:74:9d:f4:ec:be:9f:77:57:7c:1a:
1f:51:13:7d:dc:f7:29:38:aa:fa:50:c3:95:47:b2:
94:52:cf:61:23:aa:4d:23:67:1a:fb:66:fb:72:7d:
8d:15:c5:ef:70:0f:b9:ce:37:91:04:d4:87:f9:4c:
1e:24:32:78:4c:28:87:41:a7:48:ba:2e:8a:b8:6d:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:16:0F:B6:E0:3E:93:B2:A3:BE:95:FB:1C:B2:2E:05:48:E3:16
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.53.0/24
46.203.148.0/24
46.203.176.0/24
46.203.178.0/24
46.203.197.0/24
46.203.205.0/24
46.203.223.0/24
46.203.225.0/24
92.112.240.0/22
92.112.246.0/23
95.134.6.0/24
95.134.12.0/22
95.134.79.0-95.134.80.255
95.134.83.0/24
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.148.0/24
95.134.150.0/23
95.134.168.0-95.134.174.255
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.194.0/24
95.135.223.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.36.0/24
178.92.39.0/24
178.92.45.0/24
178.92.226.0/24
178.92.235.0/24
178.92.237.0/24
178.92.251.0/24
178.93.0.0/23
178.93.37.0/24
178.94.0.0/24
178.94.4.0/24
178.94.6.0/23
178.94.21.0/24
178.94.27.0/24
178.94.32.0/24
178.94.66.0/24
178.94.73.0/24
178.94.77.0/24
178.94.79.0/24
178.94.103.0/24
178.94.110.0/24
178.94.120.0/24
178.94.174.0/24
178.94.189.0/24
178.94.210.0/24
178.94.212.0/24
178.94.220.0/24
178.94.223.0/24
178.94.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4f:78:c1:30:60:ed:2b:b3:61:76:d3:7e:95:84:63:c2:38:
14:13:86:c2:d2:83:e1:47:37:e9:fc:e5:b0:55:45:69:4c:9f:
69:79:5b:ce:30:0a:ab:2f:f4:03:06:6a:01:9b:81:50:c0:9e:
8e:53:d3:af:85:a8:11:eb:9a:1c:45:6c:59:f3:a5:21:e4:fe:
20:6f:a0:68:e8:20:68:ca:21:f4:7d:7e:bb:6a:51:23:d7:55:
d2:43:6d:6a:fa:03:10:50:2a:4c:7d:5c:4e:f2:a4:d4:83:79:
7a:c2:c3:af:2e:1d:c4:9a:f7:f6:ff:db:56:b1:d2:e9:dc:79:
94:44:1e:e0:b6:47:a6:63:6b:29:0d:df:f4:d6:08:13:6d:48:
39:ed:b0:0b:36:0c:96:cd:18:24:2a:ec:ed:de:4d:0f:50:24:
b6:98:12:00:42:87:2f:41:4e:7e:75:86:b0:b2:de:2e:5c:67:
e3:8a:a3:ca:05:3a:6b:f7:46:64:8c:0c:1d:c9:6d:10:16:ee:
db:f7:54:3d:2b:a6:81:13:c4:c4:e0:dd:9a:c5:e5:6f:6e:9f:
33:c9:d6:a0:38:68:d1:ca:e8:39:4d:13:f2:49:fd:f8:1c:aa:
db:25:53:76:eb:32:68:e5:ad:ef:80:cd:8b:c9:f6:92:33:17:
67:f9:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:36 2026 by rpki-client