Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: Yk2sRmOzzLR9/zPBPlCEwfrAFMI6tQWcJeN+Ao6Rnys=
Subject key identifier: B9:CB:F3:DB:A9:B5:21:31:1D:EF:62:DB:3E:22:21:C1:9F:40:D5:D8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D8A0727498FE3A92200103F82147C5C1284A1AC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
Signing time: Fri 03 Apr 2026 13:29:49 +0000
ROA not before: Fri 03 Apr 2026 13:24:49 +0000
ROA not after: Fri 02 Apr 2027 13:29:49 +0000
asID: 2856
IP address blocks: 51.146.40.0/22 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.56.0/22 maxlen: 24
51.146.60.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.132.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.140.0/22 maxlen: 24
51.194.40.0/21 maxlen: 24
51.194.88.0/21 maxlen: 24
51.194.104.0/21 maxlen: 24
51.194.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8a:07:27:49:8f:e3:a9:22:00:10:3f:82:14:7c:5c:12:84:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 3 13:24:49 2026 GMT
Not After : Apr 2 13:29:49 2027 GMT
Subject: CN=B9CBF3DBA9B521311DEF62DB3E2221C19F40D5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:fc:cb:61:1d:9c:28:fc:75:55:bd:e2:48:
21:58:51:ee:55:d5:36:e5:eb:0f:9c:41:44:2f:bc:
e6:42:ea:04:a0:ee:71:10:07:f2:c1:2a:06:b9:ef:
e2:14:a9:59:e0:d7:0f:b2:f4:89:d0:f6:80:00:2f:
60:92:8a:e1:b7:e0:1c:4a:f8:31:0f:be:51:ce:e1:
cd:e6:ee:21:4f:0e:b5:2a:e5:53:9c:6a:09:70:8e:
15:db:cb:4d:2d:74:4a:a7:e9:fa:66:fc:2f:e1:06:
f3:2d:2c:94:07:24:96:c7:c2:30:b9:0f:4d:df:fb:
f0:40:b7:e7:0d:56:9b:b5:c8:4e:b3:b6:0a:2b:7c:
f2:7e:3e:d9:7e:c5:ea:8a:f4:d9:6e:a4:e7:7c:a9:
29:4b:76:69:85:ff:0d:ac:20:39:91:82:83:bf:32:
8b:2d:52:5b:69:b2:3e:0e:b4:5f:c4:e6:bf:8c:3a:
a8:f4:e7:04:51:0e:f1:b6:6b:80:ae:12:b6:bf:a7:
63:e4:7c:5e:df:d6:88:a0:0c:85:1e:08:18:91:4b:
57:b8:21:04:2e:d9:e5:73:1b:5a:18:f2:52:a1:c3:
d1:ff:1e:06:58:0c:a9:a7:d9:15:4b:79:ec:62:d4:
52:3e:a3:f1:61:55:4f:86:18:15:1a:de:b4:0f:a8:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:F3:DB:A9:B5:21:31:1D:EF:62:DB:3E:22:21:C1:9F:40:D5:D8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.40.0/21
51.146.56.0/21
51.146.128.0/20
51.194.40.0/21
51.194.88.0/21
51.194.104.0/21
51.194.120.0/21
Signature Algorithm: sha256WithRSAEncryption
37:21:b6:fc:ed:65:51:48:c7:89:80:c4:21:be:6f:f9:4b:a8:
f4:3d:54:5e:46:ae:1f:e3:d4:50:e4:b0:78:aa:fa:4b:cd:e6:
de:07:0f:af:3d:86:fb:29:3a:06:b8:90:41:d3:6f:b3:4c:b4:
10:3e:63:17:d7:df:0d:c8:8e:d8:07:4b:83:d8:38:9c:e3:ac:
5f:21:de:63:fd:e6:28:e0:6e:9a:1c:e1:2b:97:32:4e:27:67:
ec:2c:dc:5f:cf:58:92:4a:ad:87:99:ee:cb:e2:3b:bf:67:7e:
6d:50:ab:44:c6:a0:cc:0b:f3:8e:41:a7:5c:98:cd:58:f7:16:
c4:28:f8:94:e7:59:a4:e0:41:81:b3:0f:ce:90:9e:b1:6c:d4:
4b:47:cd:87:b3:0a:fe:d4:20:d0:67:b9:73:81:ca:4b:d4:9b:
ef:62:12:15:c5:13:f0:32:8c:ac:54:60:3d:f5:34:9f:fd:18:
38:ca:df:ee:9b:ee:06:43:35:f0:f2:6c:bf:50:40:07:a8:ea:
a4:55:d3:a5:64:de:bc:51:86:4b:f3:74:0c:fb:09:13:90:bb:
67:f7:a8:ca:b4:a1:08:07:cc:48:f5:3f:d7:bc:8b:fc:58:9c:
6e:8b:7f:ca:dc:fa:3b:b7:02:dc:b9:cf:8a:3b:ea:1b:8b:6d:
4f:7d:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 08:47:23 2026 by rpki-client