Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: P8DmhJsncHi0EBvNqJdQyayoYQMgC0giCFsK8IjCCMA=
Subject key identifier: 1C:86:4C:A7:3F:B4:F4:B3:AB:3C:01:36:43:41:C5:34:E0:49:06:9A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26F67B9F9B80C59E8362E53B7D1B20B319713828
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
Signing time: Sun 19 Jul 2026 11:44:05 +0000
ROA not before: Sun 19 Jul 2026 11:39:05 +0000
ROA not after: Sun 18 Jul 2027 11:44:05 +0000
asID: 2914
IP address blocks: 82.21.98.0/24 maxlen: 24
82.21.99.0/24 maxlen: 24
82.26.139.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
82.26.143.0/24 maxlen: 24
82.26.144.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.38.12.0/24 maxlen: 24
82.38.62.0/24 maxlen: 24
82.38.93.0/24 maxlen: 24
82.38.94.0/24 maxlen: 24
82.38.95.0/24 maxlen: 24
82.38.98.0/24 maxlen: 24
82.38.113.0/24 maxlen: 24
82.38.120.0/24 maxlen: 24
82.38.131.0/24 maxlen: 24
82.38.144.0/24 maxlen: 24
82.38.145.0/24 maxlen: 24
82.38.146.0/24 maxlen: 24
82.38.151.0/24 maxlen: 24
82.38.169.0/24 maxlen: 24
82.38.172.0/24 maxlen: 24
82.38.175.0/24 maxlen: 24
82.38.181.0/24 maxlen: 24
82.39.164.0/24 maxlen: 24
82.47.30.0/24 maxlen: 24
82.47.40.0/24 maxlen: 24
82.47.43.0/24 maxlen: 24
82.47.44.0/24 maxlen: 24
82.47.53.0/24 maxlen: 24
82.47.107.0/24 maxlen: 24
82.47.110.0/24 maxlen: 24
82.47.111.0/24 maxlen: 24
82.47.113.0/24 maxlen: 24
82.47.116.0/24 maxlen: 24
82.47.118.0/24 maxlen: 24
82.47.119.0/24 maxlen: 24
82.47.122.0/24 maxlen: 24
82.47.135.0/24 maxlen: 24
82.47.151.0/24 maxlen: 24
82.47.156.0/24 maxlen: 24
82.47.163.0/24 maxlen: 24
82.47.173.0/24 maxlen: 24
82.47.178.0/24 maxlen: 24
82.47.183.0/24 maxlen: 24
82.47.209.0/24 maxlen: 24
82.47.210.0/24 maxlen: 24
82.47.213.0/24 maxlen: 24
82.47.215.0/24 maxlen: 24
82.47.223.0/24 maxlen: 24
82.47.248.0/24 maxlen: 24
84.75.128.0/24 maxlen: 24
84.75.131.0/24 maxlen: 24
84.75.136.0/24 maxlen: 24
84.75.137.0/24 maxlen: 24
84.75.147.0/24 maxlen: 24
84.75.163.0/24 maxlen: 24
84.75.167.0/24 maxlen: 24
84.75.168.0/24 maxlen: 24
84.75.173.0/24 maxlen: 24
84.75.208.0/24 maxlen: 24
84.75.244.0/24 maxlen: 24
84.75.245.0/24 maxlen: 24
178.83.116.0/24 maxlen: 24
178.83.119.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.160.0/24 maxlen: 24
178.83.162.0/24 maxlen: 24
178.83.170.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
178.83.179.0/24 maxlen: 24
178.83.184.0/24 maxlen: 24
178.83.189.0/24 maxlen: 24
178.83.193.0/24 maxlen: 24
178.83.194.0/24 maxlen: 24
178.83.202.0/24 maxlen: 24
178.83.204.0/24 maxlen: 24
178.83.212.0/24 maxlen: 24
178.83.213.0/24 maxlen: 24
178.83.214.0/24 maxlen: 24
178.83.223.0/24 maxlen: 24
178.83.227.0/24 maxlen: 24
178.83.241.0/24 maxlen: 24
178.83.246.0/24 maxlen: 24
178.83.247.0/24 maxlen: 24
178.83.253.0/24 maxlen: 24
178.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f6:7b:9f:9b:80:c5:9e:83:62:e5:3b:7d:1b:20:b3:19:71:38:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 11:39:05 2026 GMT
Not After : Jul 18 11:44:05 2027 GMT
Subject: CN=1C864CA73FB4F4B3AB3C01364341C534E049069A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:d7:bf:ec:a1:1a:23:e5:17:2a:7c:b5:1f:
17:7c:3f:74:1e:93:d5:49:b6:39:1f:c3:ce:1d:27:
6d:43:ea:02:8d:e0:e2:35:8e:6f:82:75:bf:94:b4:
b6:c5:92:42:72:85:9e:89:cc:65:50:ff:ce:55:97:
2a:d5:71:cd:4a:52:42:fe:65:8b:05:6e:a0:91:01:
30:33:9a:4e:69:50:42:9c:7b:ee:74:63:4a:27:c1:
25:37:b7:2e:a8:49:f6:cb:27:e5:40:fe:59:0b:2c:
16:90:49:9b:e0:60:b3:b1:9d:8b:1c:41:ab:84:33:
d0:d5:08:bd:26:d2:46:fe:e7:35:12:53:c5:00:72:
c4:86:ce:96:9c:c9:28:c0:8f:e3:97:38:31:be:6b:
1d:95:74:13:f1:92:b1:55:4a:fc:d5:c1:af:d3:33:
73:a9:5c:4a:5c:23:ce:ee:ea:60:8e:40:d2:3a:8f:
f2:f3:07:4a:6f:01:62:1e:7b:40:a2:e8:19:38:ee:
84:98:c6:f0:8f:3a:98:05:42:25:7d:45:33:9e:7f:
fa:dd:72:a5:05:25:52:ad:89:dd:bd:15:e4:7e:27:
f9:d9:6a:8e:97:54:c3:b1:fb:5f:99:4e:66:1a:e9:
eb:fc:56:90:6a:97:2c:68:16:e2:4e:66:2d:e5:46:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:4C:A7:3F:B4:F4:B3:AB:3C:01:36:43:41:C5:34:E0:49:06:9A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.98.0/23
82.26.139.0/24
82.26.142.0-82.26.144.255
82.29.48.0/24
82.38.12.0/24
82.38.62.0/24
82.38.93.0-82.38.95.255
82.38.98.0/24
82.38.113.0/24
82.38.120.0/24
82.38.131.0/24
82.38.144.0-82.38.146.255
82.38.151.0/24
82.38.169.0/24
82.38.172.0/24
82.38.175.0/24
82.38.181.0/24
82.39.164.0/24
82.47.30.0/24
82.47.40.0/24
82.47.43.0-82.47.44.255
82.47.53.0/24
82.47.107.0/24
82.47.110.0/23
82.47.113.0/24
82.47.116.0/24
82.47.118.0/23
82.47.122.0/24
82.47.135.0/24
82.47.151.0/24
82.47.156.0/24
82.47.163.0/24
82.47.173.0/24
82.47.178.0/24
82.47.183.0/24
82.47.209.0-82.47.210.255
82.47.213.0/24
82.47.215.0/24
82.47.223.0/24
82.47.248.0/24
84.75.128.0/24
84.75.131.0/24
84.75.136.0/23
84.75.147.0/24
84.75.163.0/24
84.75.167.0-84.75.168.255
84.75.173.0/24
84.75.208.0/24
84.75.244.0/23
178.83.116.0/24
178.83.119.0/24
178.83.155.0/24
178.83.160.0/24
178.83.162.0/24
178.83.170.0/24
178.83.177.0/24
178.83.179.0/24
178.83.184.0/24
178.83.189.0/24
178.83.193.0-178.83.194.255
178.83.202.0/24
178.83.204.0/24
178.83.212.0-178.83.214.255
178.83.223.0/24
178.83.227.0/24
178.83.241.0/24
178.83.246.0/23
178.83.253.0-178.83.254.255
Signature Algorithm: sha256WithRSAEncryption
4d:b8:d0:c8:f8:51:d9:91:2f:45:61:fa:f7:fe:3b:9c:64:16:
2b:09:cb:62:c5:4c:99:ff:46:e9:2e:dd:81:73:fd:24:aa:6b:
07:cd:d7:86:1f:ff:33:1e:35:79:72:e8:a7:eb:c5:6c:b4:97:
74:f4:63:37:0a:ca:3e:af:35:33:d2:72:e2:03:b5:e1:a6:e5:
3e:97:3a:73:17:08:0d:be:dc:a4:5f:ca:22:a1:51:a7:1d:2d:
ef:fd:29:29:a9:e8:51:b6:dd:01:95:71:92:a3:db:17:b4:23:
9e:ac:f9:af:41:da:3b:b1:00:cc:6f:ea:f4:bf:e6:1f:aa:43:
29:8d:b7:1c:29:18:9b:26:e6:0f:5e:01:8d:7e:1f:83:14:14:
a6:4a:81:0d:7f:b9:50:57:9b:ae:da:fe:d0:74:50:61:c4:10:
f8:c0:8b:0c:70:88:3c:ae:16:c4:58:6d:dd:69:cb:87:e8:8b:
ce:50:6b:e5:f9:f0:84:e3:f2:8b:bd:ea:ef:30:ee:11:5e:b5:
bd:29:3b:9e:cf:6b:c9:65:2b:4b:e1:93:d8:98:1c:65:71:41:
f2:94:04:a3:e5:e7:c4:d0:8a:e5:95:dd:7d:77:65:53:ac:bc:
65:b0:e9:bb:9c:58:59:78:fd:fc:92:d1:a6:c7:70:b9:7a:84:
3e:8d:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:40 2026 by rpki-client