Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: hhWZo9kumA1AMp/0z2fb1fxTy9DuhgkCA/L//d2Stug=
Subject key identifier: 21:AC:20:5F:8C:14:4E:7E:A0:22:62:B2:E6:34:9F:D2:3F:7C:12:2F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 47A1094653D27676F69A2FD2DB8FBE56D2DF786E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS2856.roa
Signing time: Sun 06 Sep 2026 09:38:36 +0000
ROA not before: Sun 06 Sep 2026 09:33:36 +0000
ROA not after: Sun 05 Sep 2027 09:38:36 +0000
asID: 2856
IP address blocks: 152.237.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a1:09:46:53:d2:76:76:f6:9a:2f:d2:db:8f:be:56:d2:df:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 6 09:33:36 2026 GMT
Not After : Sep 5 09:38:36 2027 GMT
Subject: CN=21AC205F8C144E7EA02262B2E6349FD23F7C122F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:e8:87:e4:ae:3c:8e:1d:7c:d8:64:00:f9:
cb:fc:66:87:65:85:30:7b:e1:ea:9d:b8:f3:41:ce:
e0:c1:70:c9:d7:32:72:a1:5b:f0:97:a5:1f:16:72:
f7:49:51:ed:66:c9:e5:8c:a9:0a:6d:ef:13:ae:c1:
0b:f5:d0:fc:8f:ab:ac:dc:b9:f2:89:ad:e8:58:30:
ee:c6:21:84:7f:f9:11:9e:5f:d8:03:91:a3:76:9e:
fa:c0:d9:35:d2:03:63:1e:8f:43:61:c5:7e:ee:0a:
5f:86:37:f2:35:27:46:5e:67:ca:2d:f0:ba:27:a0:
f8:ec:f5:1d:ec:2e:e3:0e:58:3b:cb:91:71:73:d9:
f5:98:52:93:58:06:7e:c8:c8:21:ef:b4:b3:d5:37:
53:c1:62:c2:06:e4:d8:0a:19:ee:a6:ee:13:90:49:
26:80:e4:3e:61:06:bb:60:69:52:d3:df:b2:80:f1:
ef:54:45:4e:94:c3:fa:de:0f:2f:3c:54:47:40:7d:
e1:f1:52:04:c0:bb:4e:cc:00:cb:3a:8b:45:72:28:
c8:1b:03:e5:57:f5:06:04:05:ed:a1:fa:44:e1:d4:
af:95:52:37:17:b4:9b:20:62:a3:95:7b:a7:30:45:
e6:9f:52:5d:23:f6:6c:3d:31:fd:ed:bc:50:ce:38:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AC:20:5F:8C:14:4E:7E:A0:22:62:B2:E6:34:9F:D2:3F:7C:12:2F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a5:c8:92:a1:c3:69:42:86:c2:55:c3:f5:ef:56:a1:d8:39:
cf:47:27:ca:db:db:90:13:98:5b:11:13:c5:5e:a9:25:ff:42:
fa:37:fc:67:d2:21:f5:60:a3:7b:5d:5e:f1:2d:65:02:eb:a3:
c9:8c:37:98:40:7e:16:70:17:0d:2a:1a:d3:c2:13:80:21:44:
50:0a:f2:7c:d9:f5:cc:cf:dc:d5:a6:ff:04:a8:cc:b2:03:14:
4d:90:56:99:32:9e:94:ec:70:14:c4:33:59:37:5f:b0:19:c9:
67:54:1d:79:33:2a:ff:0b:a8:f5:a0:9c:e1:13:5d:4d:e3:13:
4b:e1:d2:f2:9a:8a:53:bb:98:7f:6b:80:fb:9e:81:5d:41:85:
a7:a4:73:59:f2:73:30:ab:d9:70:54:ba:ad:32:fd:50:01:11:
45:75:81:ee:ba:6f:0b:b5:ac:34:bd:ef:8b:0a:fa:1e:63:e9:
62:3e:d0:3e:44:6b:0d:d2:8a:51:5f:08:db:51:af:f2:9a:c5:
fd:98:f9:95:d9:00:d4:93:f6:61:9f:db:9a:a6:50:26:55:09:
88:dc:65:0c:4c:b1:12:49:3a:a5:a8:7a:71:67:d8:52:2f:e0:
ae:1b:1f:9b:c3:85:19:d5:b3:90:87:bf:67:2a:f7:e6:2f:f5:
c6:55:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:46:57 2026 by rpki-client