Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: IFeTxKHj6Aj9Bo+YqdZfR0BVq8/YvmtYzsp8Q4PIip8=
Subject key identifier: 0C:17:40:11:90:E2:B9:A6:E0:EB:93:9C:7E:A2:5E:70:74:D9:FB:92
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 14764553070B812A9BF081FADE9C39EFC6693171
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
Signing time: Wed 23 Sep 2026 09:58:56 +0000
ROA not before: Wed 23 Sep 2026 09:53:56 +0000
ROA not after: Wed 22 Sep 2027 09:58:56 +0000
asID: 2914
IP address blocks: 51.194.148.0/22 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.156.0/24 maxlen: 24
51.241.157.0/24 maxlen: 24
51.241.158.0/24 maxlen: 24
51.241.236.0/22 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
188.220.108.0/24 maxlen: 24
188.220.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:76:45:53:07:0b:81:2a:9b:f0:81:fa:de:9c:39:ef:c6:69:31:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 09:53:56 2026 GMT
Not After : Sep 22 09:58:56 2027 GMT
Subject: CN=0C17401190E2B9A6E0EB939C7EA25E7074D9FB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:d9:93:6a:7b:d8:8c:a0:b8:6f:66:f9:28:
17:6c:3b:df:ef:f9:db:57:bb:4c:1c:33:08:15:49:
84:5e:b3:00:7b:61:ba:f5:45:2c:f1:87:3a:c6:c7:
3e:4a:35:01:d9:b5:32:a6:5d:35:f4:ce:38:19:65:
d3:2d:77:f1:69:27:cd:99:07:e5:60:e0:bd:0b:02:
a0:83:9b:73:a0:c3:2b:95:ea:ce:ca:bd:39:18:49:
47:db:76:be:26:20:93:48:5d:36:a0:9d:a2:35:c2:
7f:7d:10:be:3f:b1:65:cb:2a:ea:c7:8d:7e:fb:30:
da:de:84:91:d6:bf:69:43:47:96:3f:3f:f2:e9:a9:
3c:4d:a5:ba:21:38:1d:20:c0:08:c4:b3:5c:60:b0:
72:0c:ce:63:cc:8d:bf:f0:98:a2:0b:54:b0:73:35:
1a:02:6f:72:30:29:76:9d:6a:53:98:02:f3:c4:74:
73:81:36:b9:dc:48:0f:20:94:27:03:d1:5d:93:26:
aa:e1:be:e6:a9:b1:50:32:26:e9:4b:6f:71:6c:9d:
b9:8f:53:ab:35:00:3f:f4:42:a5:57:27:17:5e:aa:
7f:2c:2d:00:bd:df:20:0e:a5:97:4b:3c:dd:f1:23:
e2:ae:45:73:f1:f9:11:8c:1d:48:33:0a:f0:a3:8b:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:40:11:90:E2:B9:A6:E0:EB:93:9C:7E:A2:5E:70:74:D9:FB:92
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.148.0/22
51.241.100.0/22
51.241.156.0-51.241.158.255
51.241.236.0/22
188.220.89.0/24
188.220.100.0/24
188.220.108.0/24
188.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6b:b0:00:90:dc:ed:76:90:4f:7e:e9:44:55:91:fb:e3:4c:
93:cc:dd:b8:47:b8:6a:e7:2b:23:49:1a:82:1d:1b:71:03:66:
33:42:5d:6d:07:f9:a2:c4:7a:87:8c:ae:79:0f:be:8d:fe:6f:
72:4a:54:a9:34:dc:e5:98:6f:e4:65:8c:78:7f:a0:55:d8:26:
4c:40:3a:49:89:a5:4a:70:46:41:9a:71:36:7c:22:09:b5:64:
9e:c2:08:48:f7:65:14:07:70:94:bd:59:86:46:e7:3f:7a:7e:
a5:41:28:b4:f5:44:a9:3f:b7:5c:79:9c:68:b8:82:1e:b3:a7:
6b:53:46:31:db:97:a4:05:3d:c0:07:8a:fb:f8:4b:ad:21:53:
5b:f0:9c:85:cb:95:5a:1b:29:39:04:d5:47:d9:bc:b8:a0:d5:
b1:52:eb:8d:a0:59:9b:6f:ea:70:0d:cb:59:d1:79:6d:45:56:
a5:76:03:f8:31:4b:a0:df:8f:96:90:09:ce:ae:ba:52:e3:1c:
2f:b3:d2:ad:ee:b6:90:b0:a2:10:4c:02:69:ab:aa:9c:19:ae:
b6:f9:7c:47:50:1a:c1:29:9e:bc:b8:17:eb:7a:0d:b5:cb:a6:
0c:d7:19:c7:02:50:82:10:81:ad:f4:f1:3b:fc:ab:da:d7:b7:
64:15:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:13:13 2026 by rpki-client