Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: 3Ab4rZjNz6N6Jo8V1/SzsKv7iGRZesKL1Ov+tzhFmN0=
Subject key identifier: 93:48:FA:78:09:EB:E5:4B:4E:73:D9:BD:47:7E:E8:59:31:51:21:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 57269744F76A36C7563A6F757803440F0972FCBC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
Signing time: Wed 08 Jul 2026 00:04:40 +0000
ROA not before: Tue 07 Jul 2026 23:59:40 +0000
ROA not after: Wed 07 Jul 2027 00:04:40 +0000
asID: 2856
IP address blocks: 51.146.40.0/22 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.132.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.235.0/24 maxlen: 24
51.146.252.0/22 maxlen: 22
51.194.36.0/23 maxlen: 24
51.194.40.0/21 maxlen: 24
51.194.88.0/21 maxlen: 24
51.194.100.0/22 maxlen: 22
51.194.120.0/21 maxlen: 24
78.105.97.0/24 maxlen: 24
78.105.136.0/22 maxlen: 22
78.105.151.0/24 maxlen: 24
78.105.175.0/24 maxlen: 24
78.105.179.0/24 maxlen: 24
78.105.188.0/24 maxlen: 24
78.105.191.0/24 maxlen: 24
78.105.194.0/24 maxlen: 24
78.105.198.0/24 maxlen: 24
78.105.200.0/24 maxlen: 24
78.105.202.0/24 maxlen: 24
188.220.122.0/24 maxlen: 24
188.220.151.0/24 maxlen: 24
188.220.157.0/24 maxlen: 24
188.220.167.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.220.212.0/24 maxlen: 24
188.220.229.0/24 maxlen: 24
188.221.168.0/24 maxlen: 24
188.221.177.0/24 maxlen: 24
188.221.184.0/24 maxlen: 24
188.221.188.0/24 maxlen: 24
188.221.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:26:97:44:f7:6a:36:c7:56:3a:6f:75:78:03:44:0f:09:72:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 7 23:59:40 2026 GMT
Not After : Jul 7 00:04:40 2027 GMT
Subject: CN=9348FA7809EBE54B4E73D9BD477EE859315121FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:dc:75:f8:6f:ff:28:dd:b6:e5:fb:d4:9b:
6c:5b:c8:44:a0:32:03:25:b0:43:d2:99:ae:ee:a3:
3a:16:d5:a5:89:32:55:a2:be:74:79:71:d2:ac:fb:
85:4a:8e:af:b2:2b:96:b0:0c:46:9d:34:63:83:cd:
f2:68:6b:7a:f8:06:65:b4:ec:b0:00:33:e6:e8:73:
c2:47:c5:7d:e1:9d:f3:ee:1e:80:7c:b1:18:97:3d:
79:60:28:3b:fc:aa:bd:b0:1d:6b:d4:55:29:c2:2f:
19:5f:2e:04:1e:2d:8f:b9:a6:5c:b4:ed:6f:40:cf:
3d:3a:fe:b9:d1:75:aa:ac:86:67:29:ff:18:34:77:
9c:cf:0f:b1:e3:5e:04:c1:07:bd:2d:db:66:af:ed:
87:da:1b:01:0c:43:3b:39:be:17:58:6d:6e:8c:6f:
b8:db:f7:87:06:1a:38:55:e3:3c:5e:27:1a:dd:9f:
d7:58:a1:05:d5:f5:d6:b7:2d:e2:12:80:37:9e:94:
18:55:de:16:c5:2b:e2:f0:34:9a:32:48:83:60:25:
f5:64:e4:58:a8:ad:b8:a5:18:33:9f:fb:1f:10:e5:
08:ab:0f:8c:9c:48:88:0f:c1:34:69:bd:6c:ac:4b:
70:b5:61:b6:23:85:4c:99:b9:cf:72:cb:ad:b1:a3:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:FA:78:09:EB:E5:4B:4E:73:D9:BD:47:7E:E8:59:31:51:21:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.40.0/21
51.146.128.0-51.146.139.255
51.146.235.0/24
51.146.252.0/22
51.194.36.0/23
51.194.40.0/21
51.194.88.0/21
51.194.100.0/22
51.194.120.0/21
78.105.97.0/24
78.105.136.0/22
78.105.151.0/24
78.105.175.0/24
78.105.179.0/24
78.105.188.0/24
78.105.191.0/24
78.105.194.0/24
78.105.198.0/24
78.105.200.0/24
78.105.202.0/24
188.220.122.0/24
188.220.151.0/24
188.220.157.0/24
188.220.167.0/24
188.220.194.0/24
188.220.212.0/24
188.220.229.0/24
188.221.168.0/24
188.221.177.0/24
188.221.184.0/24
188.221.188.0/24
188.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:43:21:86:80:3b:d5:bc:f2:3b:08:b9:4b:cc:c7:2f:e3:f3:
f9:36:d5:9c:3d:92:f5:aa:3b:b7:bb:10:ef:38:00:f0:54:d8:
25:af:ee:20:f8:3c:c0:68:b6:01:4a:56:1c:6a:66:12:53:14:
90:6c:5b:79:71:f5:f3:88:2c:bd:61:b2:e8:6f:03:ee:2e:1a:
f2:f3:19:f2:e6:19:73:65:2f:ee:65:ae:28:c4:cb:52:38:2e:
66:21:11:fd:89:c3:93:54:19:41:4c:97:a9:12:a0:fd:2f:d5:
56:23:ac:65:52:89:01:e0:5b:22:5b:61:a6:67:8e:88:d0:0e:
93:a0:37:a7:0a:16:3c:6c:c0:1a:97:47:37:5c:e9:7b:d0:aa:
2a:f2:78:ee:4b:8d:ac:fb:10:d3:90:a2:dc:1b:30:8c:93:05:
39:7b:4f:63:96:74:c2:89:6c:16:86:10:01:39:82:fd:3e:bb:
88:94:7d:9a:85:41:2c:93:33:16:bf:13:fc:b9:43:d5:a1:d5:
89:f0:a5:7c:9e:9f:80:03:69:fb:f0:64:b0:88:f3:d6:99:64:
55:61:e2:be:aa:d5:6b:b1:71:cf:b5:78:49:d6:dd:7a:25:89:
74:a1:6b:a4:8c:9b:36:06:10:f9:05:a5:e6:c8:3a:9c:2a:ce:
e9:1d:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:22 2026 by rpki-client