Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: xn+PFUnRYq7xLQZh6BEhalMNthitF0S6AWWUo6qs1PY=
Subject key identifier: 7A:9A:DC:A0:CD:B2:A6:F1:8F:FD:BF:03:0E:95:82:2F:D4:3D:A5:60
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B006F10D900DC0E8C37B8BDC7BA3F9E3168FD46
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
Signing time: Fri 13 Nov 2026 07:29:46 +0000
ROA not before: Fri 13 Nov 2026 07:24:46 +0000
ROA not after: Fri 12 Nov 2027 07:29:46 +0000
asID: 2914
IP address blocks: 82.21.98.0/24 maxlen: 24
82.21.99.0/24 maxlen: 24
82.26.139.0/24 maxlen: 24
82.26.143.0/24 maxlen: 24
82.26.144.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.38.12.0/24 maxlen: 24
82.38.62.0/24 maxlen: 24
82.38.93.0/24 maxlen: 24
82.38.94.0/24 maxlen: 24
82.38.95.0/24 maxlen: 24
82.38.98.0/24 maxlen: 24
82.38.113.0/24 maxlen: 24
82.38.120.0/24 maxlen: 24
82.38.131.0/24 maxlen: 24
82.38.144.0/24 maxlen: 24
82.38.145.0/24 maxlen: 24
82.38.146.0/24 maxlen: 24
82.38.151.0/24 maxlen: 24
82.38.169.0/24 maxlen: 24
82.38.172.0/24 maxlen: 24
82.38.175.0/24 maxlen: 24
82.38.181.0/24 maxlen: 24
82.39.164.0/24 maxlen: 24
82.47.30.0/24 maxlen: 24
82.47.40.0/24 maxlen: 24
82.47.43.0/24 maxlen: 24
82.47.44.0/24 maxlen: 24
82.47.53.0/24 maxlen: 24
82.47.107.0/24 maxlen: 24
82.47.110.0/24 maxlen: 24
82.47.111.0/24 maxlen: 24
82.47.113.0/24 maxlen: 24
82.47.116.0/24 maxlen: 24
82.47.118.0/24 maxlen: 24
82.47.119.0/24 maxlen: 24
82.47.122.0/24 maxlen: 24
82.47.135.0/24 maxlen: 24
82.47.151.0/24 maxlen: 24
82.47.156.0/24 maxlen: 24
82.47.163.0/24 maxlen: 24
82.47.173.0/24 maxlen: 24
82.47.178.0/24 maxlen: 24
82.47.183.0/24 maxlen: 24
82.47.209.0/24 maxlen: 24
82.47.210.0/24 maxlen: 24
82.47.213.0/24 maxlen: 24
82.47.215.0/24 maxlen: 24
82.47.223.0/24 maxlen: 24
82.47.248.0/24 maxlen: 24
84.75.128.0/24 maxlen: 24
84.75.136.0/24 maxlen: 24
84.75.137.0/24 maxlen: 24
84.75.146.0/23 maxlen: 24
84.75.163.0/24 maxlen: 24
84.75.167.0/24 maxlen: 24
84.75.173.0/24 maxlen: 24
84.75.184.0/23 maxlen: 24
84.75.186.0/23 maxlen: 24
84.75.208.0/24 maxlen: 24
84.75.244.0/24 maxlen: 24
84.75.245.0/24 maxlen: 24
178.83.116.0/24 maxlen: 24
178.83.119.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.160.0/24 maxlen: 24
178.83.162.0/24 maxlen: 24
178.83.170.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
178.83.179.0/24 maxlen: 24
178.83.184.0/24 maxlen: 24
178.83.189.0/24 maxlen: 24
178.83.193.0/24 maxlen: 24
178.83.194.0/24 maxlen: 24
178.83.202.0/24 maxlen: 24
178.83.212.0/24 maxlen: 24
178.83.213.0/24 maxlen: 24
178.83.214.0/24 maxlen: 24
178.83.223.0/24 maxlen: 24
178.83.227.0/24 maxlen: 24
178.83.241.0/24 maxlen: 24
178.83.246.0/24 maxlen: 24
178.83.247.0/24 maxlen: 24
178.83.253.0/24 maxlen: 24
178.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:00:6f:10:d9:00:dc:0e:8c:37:b8:bd:c7:ba:3f:9e:31:68:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 13 07:24:46 2026 GMT
Not After : Nov 12 07:29:46 2027 GMT
Subject: CN=7A9ADCA0CDB2A6F18FFDBF030E95822FD43DA560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:ed:88:be:11:05:37:48:3c:50:e3:1b:6d:
06:ba:aa:e0:e7:57:fa:9f:d9:e2:83:29:b5:c2:05:
b0:54:36:13:c7:d5:a1:09:2b:f5:7d:a5:ce:3f:1c:
2e:c1:d6:01:8d:73:9d:04:b5:ac:e0:3f:7f:8f:e8:
3b:e3:6a:ee:c2:9d:13:a2:1c:c8:47:13:17:0b:f5:
fd:69:98:93:79:21:88:44:cd:05:0c:5f:08:4d:91:
5d:fd:f2:0b:83:08:0b:a7:a3:43:70:2f:bc:bd:76:
fb:52:37:4c:3a:23:c9:7d:4e:af:4e:7c:37:00:70:
ed:18:a7:f2:bb:b5:dd:fc:52:50:28:14:43:2d:42:
94:76:50:44:d2:78:27:36:3e:68:70:17:bf:0a:e9:
da:94:e9:55:f6:80:a8:89:e2:70:d2:57:24:7c:7f:
a8:13:92:77:8e:a4:ac:a5:bf:49:20:ca:c4:f8:0b:
53:42:76:ca:36:36:36:1b:eb:de:a9:23:45:aa:8f:
00:4f:b4:ad:08:24:30:e8:a0:97:c9:ae:d8:33:2c:
2b:80:f4:66:5b:72:fa:73:57:9b:f2:49:3b:f9:27:
3a:8c:1a:1f:02:38:40:84:78:35:6d:c1:23:79:b3:
a1:89:e0:25:35:24:5e:7a:f2:ad:86:f3:e4:15:da:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:DC:A0:CD:B2:A6:F1:8F:FD:BF:03:0E:95:82:2F:D4:3D:A5:60
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.98.0/23
82.26.139.0/24
82.26.143.0-82.26.144.255
82.29.48.0/24
82.38.12.0/24
82.38.62.0/24
82.38.93.0-82.38.95.255
82.38.98.0/24
82.38.113.0/24
82.38.120.0/24
82.38.131.0/24
82.38.144.0-82.38.146.255
82.38.151.0/24
82.38.169.0/24
82.38.172.0/24
82.38.175.0/24
82.38.181.0/24
82.39.164.0/24
82.47.30.0/24
82.47.40.0/24
82.47.43.0-82.47.44.255
82.47.53.0/24
82.47.107.0/24
82.47.110.0/23
82.47.113.0/24
82.47.116.0/24
82.47.118.0/23
82.47.122.0/24
82.47.135.0/24
82.47.151.0/24
82.47.156.0/24
82.47.163.0/24
82.47.173.0/24
82.47.178.0/24
82.47.183.0/24
82.47.209.0-82.47.210.255
82.47.213.0/24
82.47.215.0/24
82.47.223.0/24
82.47.248.0/24
84.75.128.0/24
84.75.136.0/23
84.75.146.0/23
84.75.163.0/24
84.75.167.0/24
84.75.173.0/24
84.75.184.0/22
84.75.208.0/24
84.75.244.0/23
178.83.116.0/24
178.83.119.0/24
178.83.155.0/24
178.83.160.0/24
178.83.162.0/24
178.83.170.0/24
178.83.177.0/24
178.83.179.0/24
178.83.184.0/24
178.83.189.0/24
178.83.193.0-178.83.194.255
178.83.202.0/24
178.83.212.0-178.83.214.255
178.83.223.0/24
178.83.227.0/24
178.83.241.0/24
178.83.246.0/23
178.83.253.0-178.83.254.255
Signature Algorithm: sha256WithRSAEncryption
28:3f:ba:b7:3e:25:9e:fb:05:10:87:ee:6d:0d:c3:00:e3:83:
fa:eb:69:5d:a2:45:a5:51:e9:99:de:b1:c3:76:33:af:01:10:
e5:52:ff:e1:1f:47:03:a7:47:70:04:a5:49:56:31:dd:40:37:
f3:48:97:da:66:8c:35:cb:c8:ef:93:ef:df:2e:d5:e9:4c:4c:
f0:32:9c:5b:4a:78:14:36:bf:a2:74:56:d6:f8:d2:5e:f5:db:
27:94:cd:bf:e3:58:bb:cc:ef:50:64:9b:fc:8a:77:f0:d5:22:
46:8f:a0:f6:ab:33:ad:2b:27:d5:ac:cf:5e:30:f8:34:e6:9d:
cf:8f:0d:65:2c:3c:43:5a:ca:4d:2d:ff:57:35:0b:69:52:00:
c6:61:ec:48:22:9d:36:af:a4:1b:5c:43:bd:d8:ff:9d:ac:cb:
ed:3a:7b:70:40:8f:f1:c8:60:e2:f5:20:1c:95:6e:bc:e4:d6:
f1:15:84:69:70:b0:f0:1f:17:ea:3b:12:e5:a2:60:07:da:6b:
2f:30:21:89:2b:6e:b0:07:35:5a:81:71:bd:fb:7f:e4:2c:b9:
84:3e:07:92:ee:f1:16:69:99:c0:2b:a3:bf:52:bb:c3:5a:52:
7f:a5:3d:fe:41:23:bb:84:b3:f8:1f:f2:bb:fc:a8:35:a8:7f:
14:48:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:43:09 2026 by rpki-client