Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: q2jiw83J0KgEFIOCWudUyI/l5e1pG9wa0IAc+9Y7qnI=
Subject key identifier: 82:25:95:C5:3F:83:12:5C:AD:90:F7:A0:9C:42:DA:62:6E:C3:18:A4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4732C5D2B2ABC07C00E63E1F74FFCEF40F4E24DE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
Signing time: Fri 13 Nov 2026 09:25:36 +0000
ROA not before: Fri 13 Nov 2026 09:20:36 +0000
ROA not after: Fri 12 Nov 2027 09:25:36 +0000
asID: 2914
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.53.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
46.203.197.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
46.203.223.0/24 maxlen: 24
46.203.225.0/24 maxlen: 24
92.112.240.0/24 maxlen: 24
92.112.241.0/24 maxlen: 24
92.112.242.0/24 maxlen: 24
92.112.243.0/24 maxlen: 24
92.112.246.0/24 maxlen: 24
92.112.247.0/24 maxlen: 24
95.134.6.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.83.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.134.168.0/23 maxlen: 24
95.134.170.0/23 maxlen: 24
95.134.172.0/23 maxlen: 24
95.134.174.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.92.226.0/24 maxlen: 24
178.92.235.0/24 maxlen: 24
178.92.237.0/24 maxlen: 24
178.92.251.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.37.0/24 maxlen: 24
178.94.0.0/24 maxlen: 24
178.94.4.0/24 maxlen: 24
178.94.6.0/24 maxlen: 24
178.94.7.0/24 maxlen: 24
178.94.21.0/24 maxlen: 24
178.94.27.0/24 maxlen: 24
178.94.32.0/24 maxlen: 24
178.94.66.0/24 maxlen: 24
178.94.73.0/24 maxlen: 24
178.94.77.0/24 maxlen: 24
178.94.79.0/24 maxlen: 24
178.94.103.0/24 maxlen: 24
178.94.110.0/24 maxlen: 24
178.94.120.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
178.94.189.0/24 maxlen: 24
178.94.210.0/24 maxlen: 24
178.94.212.0/24 maxlen: 24
178.94.220.0/24 maxlen: 24
178.94.223.0/24 maxlen: 24
178.94.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:32:c5:d2:b2:ab:c0:7c:00:e6:3e:1f:74:ff:ce:f4:0f:4e:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 13 09:20:36 2026 GMT
Not After : Nov 12 09:25:36 2027 GMT
Subject: CN=822595C53F83125CAD90F7A09C42DA626EC318A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:1c:48:cc:f6:18:73:44:73:fc:1a:de:26:
63:38:15:3f:2d:7e:73:dc:45:fe:2f:45:4d:7c:da:
f7:66:00:c8:3d:b8:d6:ee:88:31:25:e2:52:64:61:
2d:fb:5a:ea:10:89:0a:19:30:11:89:50:94:d0:75:
ff:4d:3f:5e:e1:7f:d4:c9:d0:50:00:92:65:3a:69:
48:9d:77:05:a3:ea:12:24:6f:67:31:7b:c2:4d:8e:
90:fa:31:96:44:a3:7c:18:10:cb:f1:63:f7:fe:8f:
99:ea:11:4d:74:be:00:af:26:3d:58:a6:80:23:d6:
17:04:1f:9b:99:00:40:c6:e8:81:2f:87:73:e0:61:
58:40:ef:18:7e:b3:44:47:f6:93:f5:09:9c:eb:20:
1d:f8:11:7e:96:9f:14:bb:f5:be:41:39:1d:a3:52:
ca:eb:2a:a5:84:44:37:6f:e7:70:1b:62:df:c8:a9:
cc:c7:4d:50:dc:0d:30:a0:ea:8a:5b:02:86:28:b1:
0b:20:a1:8b:3e:ae:6c:6b:4a:20:25:13:ac:13:c8:
d5:5d:77:8f:b1:ec:91:a6:15:40:bc:ce:e4:00:b4:
fe:2a:43:d2:27:c3:1a:f7:24:d1:c2:76:7a:87:b8:
7d:e3:aa:91:ff:94:ce:46:87:97:59:b6:67:0d:a1:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:95:C5:3F:83:12:5C:AD:90:F7:A0:9C:42:DA:62:6E:C3:18:A4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.53.0/24
46.203.148.0/24
46.203.176.0/24
46.203.178.0/24
46.203.197.0/24
46.203.205.0/24
46.203.223.0/24
46.203.225.0/24
92.112.240.0/22
92.112.246.0/23
95.134.6.0/24
95.134.12.0/22
95.134.79.0-95.134.80.255
95.134.83.0/24
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.148.0/24
95.134.150.0/23
95.134.168.0-95.134.174.255
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.194.0/24
95.135.223.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.36.0/24
178.92.39.0/24
178.92.45.0/24
178.92.226.0/24
178.92.235.0/24
178.92.237.0/24
178.92.251.0/24
178.93.0.0/23
178.93.37.0/24
178.94.0.0/24
178.94.4.0/24
178.94.6.0/23
178.94.21.0/24
178.94.27.0/24
178.94.32.0/24
178.94.66.0/24
178.94.73.0/24
178.94.77.0/24
178.94.79.0/24
178.94.103.0/24
178.94.110.0/24
178.94.120.0/24
178.94.174.0/24
178.94.189.0/24
178.94.210.0/24
178.94.212.0/24
178.94.220.0/24
178.94.223.0/24
178.94.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4b:73:f7:5b:9a:a0:e2:a5:61:73:14:0b:e1:20:e6:8b:15:
52:7d:47:3a:7c:37:19:5f:3d:90:01:cf:4b:b4:6a:e2:c9:e5:
77:8b:4c:b1:75:94:ca:bd:a8:bf:c9:4f:f1:b4:8c:c9:46:f4:
73:32:1f:e2:bb:30:1c:ef:ce:51:7c:aa:b8:7e:54:60:ce:f6:
93:c5:19:96:e1:01:12:08:54:7c:2d:87:70:4c:da:59:da:44:
4f:5d:4b:81:c5:8c:df:47:8a:75:23:e2:7a:c2:c6:fe:d2:55:
f7:af:06:68:52:94:ca:71:ad:e0:86:30:83:e7:2a:68:fa:10:
d4:5d:a6:50:c2:82:39:b3:39:07:be:29:7d:42:b5:b6:d3:a5:
6c:9e:25:52:58:ba:be:87:c5:d1:7d:b3:73:fe:cc:02:63:67:
e0:7c:62:47:29:24:74:f2:38:7b:6a:44:84:07:8b:81:1a:8d:
e4:f4:f1:1e:ee:d8:6c:a8:71:60:b5:d9:3e:3c:28:c8:78:72:
26:fe:47:d2:f1:89:d8:b3:1d:5e:1d:8b:bd:f4:90:0c:1d:03:
06:03:63:c7:37:ab:d8:a3:7f:1b:7b:6b:85:c8:dd:9f:9d:9c:
2c:48:4d:0b:4e:49:ce:2c:51:23:c1:83:4f:47:73:9e:ca:d9:
76:44:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:29:43 2026 by rpki-client