Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: mk7vJ0HCDPJbt8EJsFnQrPc/fyW2JcwZCkhK0Ot6kvc=
Subject key identifier: 44:B5:F0:CD:CD:A5:84:ED:53:20:E1:E7:B7:75:C3:25:7E:78:CB:93
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 656C43C30733534A92994B0CF9DE74908EA62875
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Wed 22 Apr 2026 09:31:44 +0000
ROA not before: Wed 22 Apr 2026 09:26:44 +0000
ROA not after: Wed 21 Apr 2027 09:31:44 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6c:43:c3:07:33:53:4a:92:99:4b:0c:f9:de:74:90:8e:a6:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 22 09:26:44 2026 GMT
Not After : Apr 21 09:31:44 2027 GMT
Subject: CN=44B5F0CDCDA584ED5320E1E7B775C3257E78CB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:b0:49:5b:73:cb:78:60:f0:9b:db:07:6e:
68:48:19:6b:79:0e:e0:40:d1:11:c8:e2:af:96:5e:
f3:72:8b:0e:59:3b:89:b4:f4:35:1e:84:2f:28:23:
95:30:cc:6c:e0:7c:f2:4d:41:9a:e4:d9:50:b5:95:
d2:a5:75:61:34:48:7d:b9:39:b1:b8:89:7b:3a:5d:
4f:90:a9:7d:d4:2b:28:45:d2:e3:d6:2c:89:9a:8e:
ca:52:8f:4f:a9:cf:61:33:a7:b3:bb:ba:bc:f9:10:
27:76:3a:45:cc:89:82:43:5a:32:f9:d8:2c:d1:e7:
22:5a:1b:6d:31:fe:83:a1:54:98:e2:13:b4:d1:e3:
0e:a2:62:33:e8:58:69:22:89:f1:c4:81:70:08:a5:
9a:8c:89:0e:42:ff:b8:92:65:bd:cb:b8:3f:52:3c:
a0:61:bb:8f:5c:d5:4f:3c:d2:ce:d6:6c:f9:de:e8:
f0:86:47:f5:7f:58:a6:bd:48:d0:ed:17:59:70:56:
7f:f8:79:2b:b9:78:8d:e5:7a:c8:fe:08:c8:f1:62:
1c:68:1f:f6:a2:e0:15:cb:8d:46:7a:fe:23:a2:73:
05:ab:2f:b7:a8:f8:47:fc:10:31:c1:71:b4:4a:d8:
2a:df:e2:38:14:16:51:73:16:10:60:dd:70:b3:ab:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:F0:CD:CD:A5:84:ED:53:20:E1:E7:B7:75:C3:25:7E:78:CB:93
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:af:5a:73:a7:51:ea:55:44:a8:ce:9a:0c:48:26:d5:af:b5:
23:6d:cf:04:9b:16:5a:e3:da:f4:47:5b:e1:c7:a3:b5:68:17:
e4:29:3a:26:f3:92:d8:8d:de:db:85:79:d3:5b:cf:b8:6d:18:
9a:83:74:91:e6:15:82:d6:f5:1c:b8:24:4d:b6:42:f3:95:4b:
ac:70:49:f4:36:7a:3f:ef:b4:82:9c:01:e3:3f:90:8e:60:ce:
8e:ea:ea:a1:f8:3c:05:8b:94:ae:f3:af:3a:c2:27:dd:f4:6b:
25:6e:c1:88:2f:cb:a1:8d:87:ca:d3:56:6a:3e:38:49:4c:c1:
37:a6:f0:02:15:73:d6:4c:13:a5:99:63:3f:7f:41:f9:4d:1d:
be:65:2e:c3:b7:3a:17:ac:9b:a9:4a:53:f5:86:91:4a:2b:01:
a1:cd:e6:2f:f6:04:8e:c0:e3:7a:06:ab:d5:c2:6a:fe:d0:d4:
f5:7e:15:46:1b:cb:cf:3f:28:a9:0c:de:16:ad:7a:e1:7b:53:
a4:47:8f:dc:a7:77:6c:57:28:f6:6e:ae:2b:b0:c7:21:91:61:
ac:67:e7:51:d9:4b:f7:c4:2b:13:5f:eb:40:2b:eb:7a:dc:cf:
70:80:14:b0:cb:8e:93:88:1f:c8:dd:db:c8:f6:aa:15:d3:00:
6f:a0:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:22 2026 by rpki-client