Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: jLem4ZIZAUaw4uS6xgqX36/x3IdR7gRbMAMSyhlWt1w=
Subject key identifier: 34:3C:8C:0D:8A:B2:52:A9:FA:47:06:9B:51:B4:C6:3B:88:A2:6D:F3
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1106889B140287F9E845EAE777F79F5A822B2D85
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2856.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 2856
IP address blocks: 79.176.53.0/24 maxlen: 24
79.176.67.0/24 maxlen: 24
79.176.218.0/24 maxlen: 24
79.182.22.0/24 maxlen: 24
79.182.41.0/24 maxlen: 24
79.182.66.0/24 maxlen: 24
79.183.244.0/24 maxlen: 24
109.66.188.0/24 maxlen: 24
109.66.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 04:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:06:88:9b:14:02:87:f9:e8:45:ea:e7:77:f7:9f:5a:82:2b:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=343C8C0D8AB252A9FA47069B51B4C63B88A26DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:76:22:87:4a:7f:7c:16:82:17:bc:2c:7c:
a5:ac:ba:d0:df:87:48:c9:fb:57:d5:29:46:3c:8a:
c1:a5:70:77:5d:82:08:12:4e:c2:b4:48:25:9d:9a:
db:b0:7a:30:e7:e1:4f:f1:e1:3d:a4:14:1a:3c:8c:
3b:1d:38:fd:a9:18:14:82:33:e4:07:41:bb:35:d9:
0c:0e:2f:b7:94:98:71:e3:9f:4b:b9:ca:8a:cc:76:
bb:70:a6:9e:03:53:4d:94:e7:5c:e2:3f:be:85:84:
a3:25:37:f2:1d:f5:30:21:0b:49:9f:79:cd:ae:60:
d0:b8:46:71:93:a7:14:94:a6:8d:4c:7b:a3:86:63:
2a:e0:c4:36:7a:da:c8:db:fb:26:6f:3a:34:aa:d9:
fb:5b:fc:99:bc:3b:58:71:a1:8e:87:ca:45:87:fb:
e1:fb:b8:0c:8f:9a:73:fe:88:a4:23:4c:50:fb:be:
42:3b:cb:7e:50:03:e7:25:84:ef:c5:3d:cb:89:a3:
de:92:ad:48:bb:42:b8:96:6c:3a:36:ec:4a:61:af:
93:50:41:a1:c9:6a:2e:0d:a0:5c:4e:a2:87:e9:ac:
81:2d:ee:4a:fe:50:90:1f:73:d2:31:03:ff:a2:ea:
c4:4a:e2:36:f9:57:8b:47:23:a1:38:dd:c4:ee:d5:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:8C:0D:8A:B2:52:A9:FA:47:06:9B:51:B4:C6:3B:88:A2:6D:F3
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.53.0/24
79.176.67.0/24
79.176.218.0/24
79.182.22.0/24
79.182.41.0/24
79.182.66.0/24
79.183.244.0/24
109.66.188.0/24
109.66.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bc:29:00:93:b9:69:88:1f:30:39:fc:16:95:ef:00:4d:49:
d6:da:43:40:06:dd:0e:7f:34:76:bb:cb:2f:04:32:18:a9:79:
67:3f:09:6c:c9:54:57:30:ce:10:b8:32:ed:93:21:20:84:87:
24:4c:d7:71:48:66:fc:09:19:18:17:f0:13:16:df:76:ca:23:
3b:cc:9c:92:91:55:98:7d:cb:1a:44:93:37:2a:d0:dd:6e:3b:
2d:e3:82:c3:e6:d6:42:3d:2b:41:e6:66:22:83:09:1f:b1:2b:
29:d8:4d:2f:0d:09:fe:d8:c8:7b:da:d8:af:fc:1b:78:4d:ca:
c8:4a:b3:3d:e2:1e:7f:22:62:58:03:ea:fd:62:3b:41:c7:f9:
ec:f3:dc:c0:6b:b8:ed:26:fd:b7:b4:c9:1d:df:e0:87:52:2f:
a6:f2:b3:8f:3b:7e:88:83:c5:f1:cc:4f:22:7f:cc:60:57:0b:
21:8c:e0:35:a2:b3:aa:96:08:21:8a:20:e8:b5:b4:af:90:42:
b7:d9:1f:3c:4d:37:1d:13:36:5c:4c:40:e5:32:a0:80:71:4a:
58:cc:b9:69:14:87:5e:77:3e:3f:1e:a2:0b:90:e3:19:89:1e:
45:61:10:4e:dc:64:29:90:00:a4:91:30:98:62:f4:16:4c:39:
26:ab:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:23:39 2026 by rpki-client