Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: kWow3+77mR8ry3vttfzr8xRLNijLV0P5e5biP7I6k6c=
Subject key identifier: 79:88:4D:29:63:F7:EF:2A:B8:B4:28:44:C6:77:44:8D:29:92:41:03
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 65C84D2444607027255B08613BFD966BDCD795B3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
Signing time: Thu 27 Aug 2026 11:04:01 +0000
ROA not before: Thu 27 Aug 2026 10:59:01 +0000
ROA not after: Thu 26 Aug 2027 11:04:01 +0000
asID: 2856
IP address blocks: 51.146.44.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.235.0/24 maxlen: 24
51.146.252.0/22 maxlen: 22
51.194.36.0/23 maxlen: 24
51.194.100.0/22 maxlen: 22
51.241.3.0/24 maxlen: 24
51.241.201.0/24 maxlen: 24
78.105.97.0/24 maxlen: 24
78.105.136.0/22 maxlen: 22
78.105.151.0/24 maxlen: 24
78.105.175.0/24 maxlen: 24
78.105.179.0/24 maxlen: 24
78.105.188.0/24 maxlen: 24
78.105.191.0/24 maxlen: 24
78.105.194.0/24 maxlen: 24
78.105.198.0/24 maxlen: 24
78.105.200.0/24 maxlen: 24
78.105.202.0/24 maxlen: 24
87.81.112.0/20 maxlen: 20
188.220.122.0/24 maxlen: 24
188.220.151.0/24 maxlen: 24
188.220.157.0/24 maxlen: 24
188.220.167.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.220.212.0/24 maxlen: 24
188.220.229.0/24 maxlen: 24
188.221.168.0/24 maxlen: 24
188.221.177.0/24 maxlen: 24
188.221.184.0/24 maxlen: 24
188.221.188.0/24 maxlen: 24
188.221.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c8:4d:24:44:60:70:27:25:5b:08:61:3b:fd:96:6b:dc:d7:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 27 10:59:01 2026 GMT
Not After : Aug 26 11:04:01 2027 GMT
Subject: CN=79884D2963F7EF2AB8B42844C677448D29924103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:3c:8f:3c:bd:c8:ca:5a:93:69:3d:c4:a1:
98:cd:a5:d6:dc:ee:1e:97:5e:e4:d4:84:c9:48:62:
4e:9f:17:3e:e2:31:f2:01:d2:b4:c5:82:c8:d1:ba:
66:da:59:9f:13:b2:41:db:0f:3e:1c:20:69:d8:92:
66:83:18:bd:c1:f9:ff:21:d3:66:71:c1:08:5e:eb:
d6:58:25:52:17:a1:c9:dd:de:2e:33:71:71:52:d1:
0b:19:f5:52:ee:dd:4f:29:59:74:a5:b8:0d:99:10:
43:24:8d:2d:00:27:ae:e3:74:e7:83:83:3b:27:ac:
92:3d:04:2f:c8:84:25:4e:22:b0:e7:bf:2b:f5:d6:
66:bb:a8:e7:a1:6a:41:85:87:c8:3c:4c:8b:a0:f5:
b9:ab:ec:17:58:3f:62:60:6f:57:b5:4e:a0:df:40:
0b:9b:3c:fb:4b:d8:ba:85:fc:dc:e1:c3:ee:e2:db:
2c:ff:77:fe:fe:87:ed:72:13:01:46:43:35:5c:24:
b6:5e:d0:b2:9b:4f:96:87:a3:88:2b:5f:6e:4b:35:
6e:27:7e:48:cd:c4:fb:a0:33:05:20:54:c4:15:1e:
65:2b:31:12:06:a0:b3:4c:d7:8b:4d:20:0b:04:91:
dc:0c:83:d8:03:9b:06:79:00:3c:79:0c:49:bd:13:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:4D:29:63:F7:EF:2A:B8:B4:28:44:C6:77:44:8D:29:92:41:03
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.44.0/22
51.146.128.0/22
51.146.136.0/22
51.146.235.0/24
51.146.252.0/22
51.194.36.0/23
51.194.100.0/22
51.241.3.0/24
51.241.201.0/24
78.105.97.0/24
78.105.136.0/22
78.105.151.0/24
78.105.175.0/24
78.105.179.0/24
78.105.188.0/24
78.105.191.0/24
78.105.194.0/24
78.105.198.0/24
78.105.200.0/24
78.105.202.0/24
87.81.112.0/20
188.220.122.0/24
188.220.151.0/24
188.220.157.0/24
188.220.167.0/24
188.220.194.0/24
188.220.212.0/24
188.220.229.0/24
188.221.168.0/24
188.221.177.0/24
188.221.184.0/24
188.221.188.0/24
188.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
67:18:f7:4d:32:7e:be:ac:f0:4f:58:8e:02:df:ff:c8:d1:80:
fe:5d:88:a1:50:08:29:b1:1c:3c:7b:b0:72:d1:3a:d0:34:e5:
48:05:65:3c:9c:c2:86:da:92:3a:0d:c7:c0:1c:e4:12:bf:11:
54:4e:de:89:bd:17:25:09:fc:57:f1:79:62:4d:1c:a3:18:99:
ce:ef:e7:5d:cb:e7:04:d6:8c:f3:98:11:b7:a3:41:08:a9:d1:
84:37:23:03:18:e4:6b:2c:1e:1e:90:f3:a1:12:89:08:67:4a:
41:98:bc:92:6c:a1:58:30:e4:93:03:b7:20:4b:0a:3a:0c:01:
8b:c9:2f:2b:07:b7:01:ad:0f:9d:6d:fa:d3:04:38:7f:02:d4:
28:58:68:de:a6:bd:f5:de:0f:20:14:00:cb:39:88:62:09:cd:
a1:a2:23:ff:14:29:f6:85:28:d7:d4:a0:87:99:4e:9f:38:79:
9e:9e:2b:58:f9:91:e2:bb:e0:fa:62:78:f8:58:7f:12:7d:17:
e9:81:cc:22:af:a3:42:a9:3f:a9:43:54:1d:6f:3a:da:14:58:
d6:5c:a5:a8:ef:89:a5:37:e9:f2:e0:96:3d:75:89:6c:4c:d1:
2c:ff:64:be:27:69:f8:f8:23:0a:a9:65:21:33:64:9e:32:1d:
23:12:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:12 2026 by rpki-client