Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: 32vNfdBySyY7+AbKCc+t/nnbtD2SYeJbYV5WitIoV3U=
Subject key identifier: D6:6B:FB:71:75:CA:10:7D:81:99:FF:33:0D:E6:82:45:3E:AB:89:ED
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2F1B2E5095D7D394B715E4177EABBDA86D8287AB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2856.roa
Signing time: Sun 06 Sep 2026 07:38:48 +0000
ROA not before: Sun 06 Sep 2026 07:33:48 +0000
ROA not after: Sun 05 Sep 2027 07:38:48 +0000
asID: 2856
IP address blocks: 143.20.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1b:2e:50:95:d7:d3:94:b7:15:e4:17:7e:ab:bd:a8:6d:82:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 6 07:33:48 2026 GMT
Not After : Sep 5 07:38:48 2027 GMT
Subject: CN=D66BFB7175CA107D8199FF330DE682453EAB89ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:a6:66:c1:ac:70:44:ab:79:9d:d6:df:99:
ec:76:5b:f8:b5:7c:b7:18:13:2d:2e:98:e7:5c:6f:
05:0e:e5:77:d9:79:42:fb:55:29:a5:e5:f8:c9:32:
57:bd:5b:42:55:c4:7c:93:56:e6:d0:af:19:14:18:
a7:6f:e8:6e:8c:6a:ee:62:05:ad:64:6c:e5:78:dc:
56:dd:3f:5c:bf:43:42:eb:0a:7a:84:5c:70:09:6b:
56:e3:a1:8b:07:24:58:46:17:9c:cd:51:4b:04:5d:
13:1f:9b:ad:a0:f8:0e:8f:92:c2:4a:31:40:18:83:
8c:db:1d:6e:c4:96:db:f9:59:1b:d1:8c:4c:e7:36:
3d:db:00:bc:bc:7c:f3:5d:b3:4d:5d:92:7b:27:32:
91:b6:b0:f5:c4:96:f5:23:07:bb:35:fa:5e:30:ac:
a0:8e:33:27:0f:79:36:ed:fd:ac:f7:fd:8e:54:e5:
fa:40:dc:31:32:19:c7:57:c9:a9:d2:7b:7d:50:62:
e6:3c:0f:c9:e1:c3:7c:da:87:b3:00:cd:2a:9a:c5:
3e:5b:4d:22:cc:de:39:7d:6b:67:8c:98:19:0f:c9:
3a:60:cb:43:38:07:a8:cc:76:fe:00:ba:a4:f5:2f:
69:c1:9f:c2:ef:df:81:06:08:00:d5:79:3a:15:60:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:FB:71:75:CA:10:7D:81:99:FF:33:0D:E6:82:45:3E:AB:89:ED
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e6:b6:91:0e:97:8a:0d:40:43:cc:de:8a:01:41:3d:3c:30:
38:fc:24:1a:f7:09:20:ba:34:cf:1f:47:e0:05:c6:ec:a0:ca:
a8:6f:2c:7f:93:0f:f4:02:ca:d4:0b:ca:22:4a:0a:9a:5c:ce:
cc:6a:7c:91:5a:ae:ab:b1:60:33:37:37:8f:19:cf:ee:ef:09:
8b:95:5f:9a:d1:33:45:a2:81:46:6f:6a:12:11:f4:c8:f3:be:
ad:eb:81:8e:a8:c9:58:c1:57:ca:ef:bf:07:b6:c6:20:59:55:
a3:1d:cd:b0:2d:14:ec:4a:85:42:b6:af:c8:48:57:bb:3a:45:
85:20:86:80:0f:9f:82:55:6c:a2:9d:79:d7:8e:8b:d3:c4:52:
e8:a8:55:67:67:83:8b:84:9f:14:12:e3:4c:e1:7e:62:95:20:
77:ef:b8:09:21:6e:9b:d0:4e:8e:85:a2:0f:43:aa:c4:82:f2:
a5:93:4b:30:e4:bd:ee:cf:c1:93:26:6b:e3:36:b9:67:13:bf:
14:65:02:a4:83:1a:f3:8b:57:90:6c:9a:bf:d8:47:4a:95:a9:
c6:58:a4:c9:d0:8a:1c:f4:42:59:9c:34:a7:3c:87:f4:6f:73:
01:e1:9f:ac:9c:17:a6:98:14:01:c0:03:b3:60:93:cb:f8:21:
c1:55:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:46:57 2026 by rpki-client