Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: qMNnnnEWuzbXSlEwbQUbToN99G8gs6M9yOGtBTPYXX8=
Subject key identifier: 8F:7D:76:BA:FC:25:36:49:0C:60:84:8D:19:C4:55:F8:37:8F:53:45
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1602B7B21B0A0070D83789F0D004F50A2E4F663B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Fri 13 Nov 2026 09:21:19 +0000
ROA not before: Fri 13 Nov 2026 09:16:19 +0000
ROA not after: Fri 12 Nov 2027 09:21:19 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
51.241.236.0/22 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
188.220.108.0/24 maxlen: 24
188.220.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:02:b7:b2:1b:0a:00:70:d8:37:89:f0:d0:04:f5:0a:2e:4f:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 13 09:16:19 2026 GMT
Not After : Nov 12 09:21:19 2027 GMT
Subject: CN=8F7D76BAFC2536490C60848D19C455F8378F5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:00:4e:0d:26:cf:01:32:08:db:77:c7:95:
6d:d2:81:03:57:c9:a1:3a:bc:c3:ee:c0:74:d4:b7:
3f:c6:cc:b1:df:8b:49:e8:a2:c3:76:39:85:75:59:
59:7f:6c:f0:23:c2:5d:80:f8:34:56:e9:c8:64:53:
06:ae:b6:d1:9f:46:55:79:55:40:1a:71:ed:c1:94:
5b:7e:a1:ab:f9:95:cb:f9:f1:c4:3d:06:d0:29:42:
61:0e:6b:a3:2a:6f:2b:08:7f:8b:e9:68:d7:39:01:
2d:76:70:4f:eb:8d:8f:10:8f:ec:22:91:6a:ec:3e:
ec:d0:ae:f4:9e:47:a0:44:47:81:e1:74:a6:7d:34:
82:d5:16:c5:87:17:0a:54:49:f3:3a:09:0a:f8:f2:
ae:7c:09:4c:c1:ff:f1:b3:a8:88:7f:cd:5e:55:77:
f9:f6:47:fe:36:da:eb:29:5e:77:e6:a6:58:2b:86:
02:5a:4a:90:ec:d1:d6:1e:49:f5:dd:17:f3:65:3d:
e7:cd:9e:81:cb:98:d4:e7:be:05:7a:0e:68:a2:da:
81:f9:c0:f0:78:31:fd:ad:c3:35:14:74:e3:3d:79:
74:9b:32:71:29:d1:1f:30:07:6a:45:46:77:66:87:
d6:cd:90:b2:75:59:7c:21:d3:2d:75:bf:c5:84:ae:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:76:BA:FC:25:36:49:0C:60:84:8D:19:C4:55:F8:37:8F:53:45
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
51.241.100.0/22
51.241.156.0-51.241.158.255
51.241.236.0/22
188.220.89.0/24
188.220.100.0/24
188.220.108.0/24
188.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e4:8d:bd:2d:2f:10:00:8f:15:af:14:92:69:a7:ce:78:ce:
77:26:5e:0f:f1:b5:7c:4c:94:e9:33:73:8d:4a:f3:d4:b0:5a:
e1:e5:a1:91:d3:7a:17:34:3e:32:32:0a:04:59:46:65:aa:b7:
cf:4f:ed:2b:0d:23:67:6d:c9:34:e9:76:dd:29:90:b8:a7:90:
32:ea:6f:8d:e0:72:c4:95:19:8b:75:41:eb:b3:b6:91:c0:8b:
96:8e:d1:d7:22:36:b1:43:67:59:a1:13:87:fc:33:87:f7:ff:
03:68:ca:95:d9:a5:fb:1f:3f:99:cd:58:39:8c:81:9e:ea:fe:
af:b8:33:ee:c3:ca:40:7f:cf:75:2b:da:1e:b5:bc:dc:a8:56:
0a:b5:c1:09:08:e8:21:e1:97:aa:67:c1:16:4a:01:9c:44:e3:
9f:3e:59:84:9e:11:6e:69:95:50:65:9b:8d:2e:31:3c:e3:64:
5c:8b:e6:da:e2:54:24:da:01:f2:33:6c:4b:75:b5:63:d0:f0:
e1:3b:7a:b8:90:8b:42:74:45:2f:15:90:d4:3d:b3:e4:1e:dc:
cc:77:bd:3b:ee:38:49:ef:3e:3f:e9:9b:18:d5:01:62:ed:0b:
7a:f3:b6:dc:18:e1:2b:92:19:62:02:94:00:8e:07:04:f2:94:
7c:5a:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:22 2026 by rpki-client