Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: NKCukg8Y0IXdfsPP+TVT+4R5QcAPsSA21G7bo46yBrQ=
Subject key identifier: 46:A7:18:05:CB:CB:EB:83:D7:75:61:E2:14:CA:A2:3D:71:D7:96:7C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 424A088C28A957A9FA503E2DCCA904A4F589D425
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2856.roa
Signing time: Thu 17 Jul 2025 14:04:34 +0000
ROA not before: Thu 17 Jul 2025 13:59:34 +0000
ROA not after: Thu 16 Jul 2026 14:04:34 +0000
asID: 2856
IP address blocks: 178.92.112.0/22 maxlen: 22
178.92.180.0/22 maxlen: 24
178.93.104.0/22 maxlen: 24
178.93.192.0/22 maxlen: 24
178.94.244.0/22 maxlen: 24
178.95.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 17:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4a:08:8c:28:a9:57:a9:fa:50:3e:2d:cc:a9:04:a4:f5:89:d4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 17 13:59:34 2025 GMT
Not After : Jul 16 14:04:34 2026 GMT
Subject: CN=46A71805CBCBEB83D77561E214CAA23D71D7967C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:ba:97:45:87:b1:5d:70:86:1d:78:32:0b:
71:a0:75:dd:e8:36:66:3b:0e:da:e2:fb:4d:16:ab:
0f:45:fd:dd:83:e4:09:d4:94:6b:0d:45:5e:3e:90:
8c:e2:05:40:1f:66:23:8e:4f:87:73:d0:c2:56:4f:
cb:c6:16:ae:be:37:e2:2b:63:98:f2:bc:62:e0:b7:
2e:4b:d2:07:a8:e7:70:e7:d1:bb:29:f7:5f:6b:38:
be:00:56:78:fa:35:3e:29:a5:c1:4c:93:8f:4b:68:
e1:83:fc:c8:de:c8:a2:66:03:20:89:66:35:d8:b8:
25:cb:16:57:55:1a:dc:91:6f:6b:cb:9f:7a:de:d1:
6e:1e:ca:f9:93:06:64:48:ba:e2:18:98:49:f9:a4:
b8:1c:c4:ce:d0:64:f0:fc:e1:56:31:dc:c6:f5:bf:
80:a4:49:c1:5c:a6:2e:e9:aa:a5:9e:c7:36:d1:c0:
4d:69:76:ee:28:41:2f:37:53:0f:aa:b4:2a:0a:90:
de:92:7d:be:96:96:7f:e8:22:13:6d:b7:83:a8:f4:
ba:d4:29:e5:10:77:1b:2d:c5:9a:05:85:f1:7d:c0:
e8:75:0f:16:af:5c:ec:77:56:1e:23:72:34:20:b7:
cd:76:d9:d0:ca:5e:20:57:3d:da:a6:59:06:5e:8a:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:18:05:CB:CB:EB:83:D7:75:61:E2:14:CA:A2:3D:71:D7:96:7C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.112.0/22
178.92.180.0/22
178.93.104.0/22
178.93.192.0/22
178.94.244.0/22
178.95.60.0/22
Signature Algorithm: sha256WithRSAEncryption
95:17:94:32:96:f2:aa:ac:37:27:45:47:73:4b:20:fd:b2:47:
f4:0c:79:54:b7:16:1c:00:5e:68:b3:a3:37:54:af:3a:73:ff:
f1:b8:21:5a:ba:0c:d9:19:07:d1:e5:58:bf:b0:34:94:60:6d:
ee:12:0f:51:2e:d3:03:16:4a:37:2d:ff:34:23:af:70:b8:05:
9d:61:7f:0b:01:0e:61:43:2d:05:12:f8:d3:6e:d4:5c:6f:52:
19:7c:f2:cc:a4:0f:41:52:ed:3a:05:53:e6:e9:7c:05:ed:98:
7f:72:a2:d7:6b:1e:86:92:9f:ed:4e:db:6a:14:d5:9a:c8:5c:
ef:61:a6:7b:05:7c:ac:77:32:51:5e:61:c7:21:07:00:c4:54:
78:c4:4c:1c:c3:99:e4:2d:31:72:5b:f2:68:5b:ea:07:12:df:
f8:b4:49:34:23:1a:5b:69:cb:19:20:4a:95:e7:73:d7:d9:54:
3a:4e:1a:91:0f:81:be:7c:92:0a:ef:91:9d:a8:b8:83:aa:41:
77:d8:11:f1:c1:0f:66:b8:1e:d5:26:24:d7:a2:4e:08:93:4a:
f3:40:f1:5d:a2:c0:6b:e0:cc:d2:ff:97:b3:ac:1c:25:73:15:
a6:26:f5:16:f5:5b:2a:6e:e8:af:67:07:5e:62:79:e6:ce:9a:
0a:8a:c9:2c
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUQkoIjCipV6n6UD4tzKkEpPWJ1CUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MTcxMzU5MzRaFw0yNjA3MTYxNDA0MzRaMDMxMTAvBgNV
BAMTKDQ2QTcxODA1Q0JDQkVCODNENzc1NjFFMjE0Q0FBMjNENzFENzk2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnObqXRYexXXCGHXgyC3Ggdd3o
NmY7Dtri+00Wqw9F/d2D5AnUlGsNRV4+kIziBUAfZiOOT4dz0MJWT8vGFq6+N+Ir
Y5jyvGLgty5L0geo53Dn0bsp919rOL4AVnj6NT4ppcFMk49LaOGD/MjeyKJmAyCJ
ZjXYuCXLFldVGtyRb2vLn3re0W4eyvmTBmRIuuIYmEn5pLgcxM7QZPD84VYx3Mb1
v4CkScFcpi7pqqWexzbRwE1pdu4oQS83Uw+qtCoKkN6Sfb6Wln/oIhNtt4Oo9LrU
KeUQdxstxZoFhfF9wOh1DxavXOx3Vh4jcjQgt8122dDKXiBXPdqmWQZeio+JAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQURqcYBcvL64PXdWHiFMqiPXHXlnwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjg1Ni5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEArJccAME
ArJctAMEArJdaAMEArJdwAMEArJe9AMEArJfPDANBgkqhkiG9w0BAQsFAAOCAQEA
lReUMpbyqqw3J0VHc0sg/bJH9Ax5VLcWHABeaLOjN1SvOnP/8bghWroM2RkH0eVY
v7A0lGBt7hIPUS7TAxZKNy3/NCOvcLgFnWF/CwEOYUMtBRL4027UXG9SGXzyzKQP
QVLtOgVT5ul8Be2Yf3Ki12sehpKf7U7bahTVmshc72GmewV8rHcyUV5hxyEHAMRU
eMRMHMOZ5C0xclvyaFvqBxLf+LRJNCMaW2nLGSBKledz19lUOk4akQ+BvnySCu+R
nai4g6pBd9gR8cEPZrge1SYk16JOCJNK80DxXaLAa+DM0v+Xs6wcJXMVpib1FvVb
Km7or2cHXmJ55s6aCorJLA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:49:51 2025 by rpki-client