Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: CadH58tWFVYiz+DTMbsctac580ubthO7NdxJqHR9/Ew=
Subject key identifier: 0A:00:78:1C:30:EB:4F:26:21:6D:42:4C:26:4B:B6:78:EC:3C:62:9C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5C83BEBFA90CE0CB0F1578239E7A725938EE6F52
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Wed 22 Jul 2026 15:32:15 +0000
ROA not before: Wed 22 Jul 2026 15:27:15 +0000
ROA not after: Wed 21 Jul 2027 15:32:15 +0000
asID: 2914
IP address blocks: 96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.144.0/23 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
140.150.153.0/24 maxlen: 24
143.14.60.0/24 maxlen: 24
143.14.61.0/24 maxlen: 24
143.14.72.0/24 maxlen: 24
143.14.84.0/24 maxlen: 24
143.14.85.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.109.0/24 maxlen: 24
143.14.146.0/24 maxlen: 24
143.14.148.0/24 maxlen: 24
143.14.153.0/24 maxlen: 24
143.14.154.0/24 maxlen: 24
143.14.155.0/24 maxlen: 24
143.14.195.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.101.0/24 maxlen: 24
155.117.104.0/24 maxlen: 24
155.117.160.0/24 maxlen: 24
162.141.16.0/24 maxlen: 24
162.141.18.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.37.0/24 maxlen: 24
162.141.45.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
162.141.51.0/24 maxlen: 24
162.141.53.0/24 maxlen: 24
162.141.54.0/24 maxlen: 24
162.141.81.0/24 maxlen: 24
162.141.89.0/24 maxlen: 24
162.141.99.0/24 maxlen: 24
162.141.102.0/24 maxlen: 24
162.141.103.0/24 maxlen: 24
162.141.113.0/24 maxlen: 24
162.141.129.0/24 maxlen: 24
162.141.132.0/24 maxlen: 24
162.141.143.0/24 maxlen: 24
162.141.154.0/24 maxlen: 24
162.141.155.0/24 maxlen: 24
162.141.162.0/24 maxlen: 24
162.141.176.0/24 maxlen: 24
162.141.177.0/24 maxlen: 24
162.141.182.0/24 maxlen: 24
167.148.7.0/24 maxlen: 24
167.148.9.0/24 maxlen: 24
167.148.11.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.13.0/24 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.34.0/24 maxlen: 24
167.148.47.0/24 maxlen: 24
167.148.71.0/24 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.73.0/24 maxlen: 24
167.148.74.0/24 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.101.0/24 maxlen: 24
167.148.103.0/24 maxlen: 24
167.148.107.0/24 maxlen: 24
167.148.113.0/24 maxlen: 24
167.148.114.0/24 maxlen: 24
167.148.124.0/24 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.132.0/24 maxlen: 24
167.148.133.0/24 maxlen: 24
167.148.135.0/24 maxlen: 24
167.148.137.0/24 maxlen: 24
167.148.138.0/24 maxlen: 24
167.148.142.0/24 maxlen: 24
167.148.143.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.147.0/24 maxlen: 24
167.148.150.0/24 maxlen: 24
167.148.151.0/24 maxlen: 24
167.148.153.0/24 maxlen: 24
167.148.155.0/24 maxlen: 24
167.148.160.0/24 maxlen: 24
167.148.174.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:83:be:bf:a9:0c:e0:cb:0f:15:78:23:9e:7a:72:59:38:ee:6f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 22 15:27:15 2026 GMT
Not After : Jul 21 15:32:15 2027 GMT
Subject: CN=0A00781C30EB4F26216D424C264BB678EC3C629C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:48:b5:aa:44:f7:15:4e:24:5e:bf:a6:f0:
c9:94:92:02:d2:47:43:d4:43:a9:f5:7d:9d:be:60:
07:bc:03:9a:7f:c6:99:73:ba:d6:3e:f8:d8:dd:70:
0f:23:b1:b8:21:63:7f:a2:15:10:43:dc:a8:b0:62:
2c:f3:34:a5:66:2d:7c:d9:56:7f:db:d4:e4:74:f6:
57:60:ad:af:e4:47:ec:5f:8d:df:54:d0:0f:b3:e8:
b9:59:8a:a5:e4:fd:58:5f:25:20:f6:b6:1a:35:17:
71:fe:8b:db:c9:fe:e6:11:e2:2e:05:ee:dc:81:03:
9a:4a:6b:92:80:ba:f7:07:d9:0b:4a:3a:30:ab:9b:
0a:c5:82:32:0d:96:84:bf:bb:22:41:37:99:15:96:
c0:4a:7e:0c:ff:b2:6e:d7:84:2d:e5:36:1c:d8:02:
d1:6d:e4:b6:85:0b:a0:41:fa:b5:cb:86:9e:66:d1:
52:77:28:3b:dc:37:d7:2c:d1:f5:c6:c6:a7:9c:76:
80:74:05:b4:db:af:89:70:17:e1:38:89:1b:d3:41:
5a:79:40:ec:e0:1c:c7:ab:df:cb:27:52:4b:17:da:
cf:7f:5d:28:e5:c2:54:3a:ec:42:94:98:a8:0b:f2:
a7:ba:d5:5f:3e:bd:a4:aa:f3:f9:3b:b3:ab:04:4f:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:00:78:1C:30:EB:4F:26:21:6D:42:4C:26:4B:B6:78:EC:3C:62:9C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.32.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.147.255
96.62.156.0-96.62.175.255
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
140.150.153.0/24
143.14.60.0/23
143.14.72.0/24
143.14.84.0/23
143.14.108.0/23
143.14.146.0/24
143.14.148.0/24
143.14.153.0-143.14.155.255
143.14.195.0/24
143.14.197.0/24
150.241.130.0/24
155.117.101.0/24
155.117.104.0/24
155.117.160.0/24
162.141.16.0/24
162.141.18.0/24
162.141.20.0/24
162.141.37.0/24
162.141.45.0/24
162.141.50.0/23
162.141.53.0-162.141.54.255
162.141.81.0/24
162.141.89.0/24
162.141.99.0/24
162.141.102.0/23
162.141.113.0/24
162.141.129.0/24
162.141.132.0/24
162.141.143.0/24
162.141.154.0/23
162.141.162.0/24
162.141.176.0/23
162.141.182.0/24
167.148.7.0/24
167.148.9.0/24
167.148.11.0-167.148.13.255
167.148.30.0-167.148.32.255
167.148.34.0/24
167.148.47.0/24
167.148.71.0-167.148.74.255
167.148.99.0/24
167.148.101.0/24
167.148.103.0/24
167.148.107.0/24
167.148.113.0-167.148.114.255
167.148.124.0/24
167.148.129.0/24
167.148.132.0/23
167.148.135.0/24
167.148.137.0-167.148.138.255
167.148.142.0/23
167.148.146.0/23
167.148.150.0/23
167.148.153.0/24
167.148.155.0/24
167.148.160.0/24
167.148.174.0/24
167.148.176.0/24
167.148.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a4:a7:0a:90:32:b0:c0:ff:67:a8:ae:e6:ac:44:f6:49:6c:
91:7b:0a:81:45:b5:ff:6e:5e:b5:91:a3:df:7c:c7:33:76:c3:
79:db:ac:5b:7f:53:18:e9:5c:11:53:1c:c9:5b:6e:b8:ef:f1:
ac:5e:ef:92:2d:4d:08:7c:ba:33:75:34:d4:40:19:39:c7:64:
86:60:f9:cd:34:ea:60:df:7f:c8:a9:eb:6c:23:d2:f2:4d:49:
cc:7b:d8:cd:6d:d4:da:8c:04:9b:ec:49:59:14:2d:33:01:ce:
7d:5e:ab:e8:a6:35:d3:5e:c3:d4:e8:2d:f2:e0:5f:e8:d5:9d:
e9:e5:5a:27:ac:08:a1:0c:49:29:6a:14:76:8e:61:cb:f6:1b:
2f:a9:1b:93:4d:de:07:1b:5b:62:3c:cf:bc:91:90:05:5f:ea:
a5:e9:45:0f:c8:42:62:22:61:1d:92:7b:26:18:7a:0f:fe:be:
45:7b:f7:ff:ba:e7:63:5e:4b:42:d9:7e:a0:7f:69:7d:b9:40:
28:37:47:b7:0d:27:9f:15:0c:e7:6a:6f:04:c1:44:4c:ad:e0:
94:0d:da:2b:d3:8e:29:9f:75:cf:27:13:7f:41:68:98:cd:28:
ed:55:28:a8:c2:6b:7d:e0:f0:de:dd:f5:40:8e:dd:80:8a:e9:
bc:5d:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:01:04 2026 by rpki-client