Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: vHzLzHwdEXhK7U5nMeYW8JEi1x/N70nc8yFa31NIzWs=
Subject key identifier: 99:10:43:6D:33:28:C0:B7:EA:2C:C4:6D:62:2D:B5:0F:61:6F:FA:A5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 67223D5814C9108FC2E5159499C3F4DC53EAFBE9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
Signing time: Sun 26 Jul 2026 17:48:24 +0000
ROA not before: Sun 26 Jul 2026 17:43:24 +0000
ROA not after: Sun 25 Jul 2027 17:48:24 +0000
asID: 2856
IP address blocks: 51.146.40.0/22 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.132.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.235.0/24 maxlen: 24
51.146.252.0/22 maxlen: 22
51.194.36.0/23 maxlen: 24
51.194.40.0/21 maxlen: 24
51.194.88.0/21 maxlen: 24
51.194.100.0/22 maxlen: 22
51.194.120.0/21 maxlen: 24
51.241.3.0/24 maxlen: 24
51.241.201.0/24 maxlen: 24
78.105.97.0/24 maxlen: 24
78.105.136.0/22 maxlen: 22
78.105.151.0/24 maxlen: 24
78.105.175.0/24 maxlen: 24
78.105.179.0/24 maxlen: 24
78.105.188.0/24 maxlen: 24
78.105.191.0/24 maxlen: 24
78.105.194.0/24 maxlen: 24
78.105.198.0/24 maxlen: 24
78.105.200.0/24 maxlen: 24
78.105.202.0/24 maxlen: 24
188.220.122.0/24 maxlen: 24
188.220.151.0/24 maxlen: 24
188.220.157.0/24 maxlen: 24
188.220.167.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.220.212.0/24 maxlen: 24
188.220.229.0/24 maxlen: 24
188.221.168.0/24 maxlen: 24
188.221.177.0/24 maxlen: 24
188.221.184.0/24 maxlen: 24
188.221.188.0/24 maxlen: 24
188.221.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:22:3d:58:14:c9:10:8f:c2:e5:15:94:99:c3:f4:dc:53:ea:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 26 17:43:24 2026 GMT
Not After : Jul 25 17:48:24 2027 GMT
Subject: CN=9910436D3328C0B7EA2CC46D622DB50F616FFAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:dc:15:5d:15:37:75:a3:43:48:97:09:ad:
7d:c2:ef:79:a0:22:73:4c:7a:f0:7b:0c:df:03:91:
34:55:93:2b:d5:c2:e0:5a:c2:ee:48:d2:5c:7b:a4:
a4:18:e9:85:88:31:87:eb:23:57:9a:12:d5:14:d4:
71:89:98:75:17:c0:84:de:5c:fa:3a:a5:d5:c8:f8:
6c:2d:57:3c:5a:5e:97:dd:ef:c7:11:3a:51:ff:9d:
85:89:83:43:7f:95:55:3d:09:9b:fc:75:b3:b6:ca:
77:4f:b9:ba:c9:9b:01:17:47:4e:4d:e4:45:f6:b4:
fb:d5:58:91:26:65:fb:34:b9:8d:b3:96:ba:d2:5c:
00:83:1a:39:cd:41:57:6e:ec:66:29:38:2a:49:fa:
3e:c7:7c:01:e1:a9:cf:da:39:32:06:5b:db:6c:db:
2e:0f:59:e4:22:a6:91:e9:7e:9f:aa:24:7c:98:c6:
11:e1:3e:db:98:bc:32:5f:e5:30:32:ed:9d:7f:16:
f5:5d:b6:c4:d6:b1:02:f8:8b:99:c0:20:48:e6:52:
e3:df:06:53:bd:58:0e:c4:be:4a:d8:33:bd:5c:bb:
84:b8:c5:69:34:d2:d0:cc:cd:28:8b:d9:5f:a0:69:
d5:72:ac:44:b4:8b:a3:68:d7:cb:fb:c3:a8:92:c9:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:43:6D:33:28:C0:B7:EA:2C:C4:6D:62:2D:B5:0F:61:6F:FA:A5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.40.0/21
51.146.128.0-51.146.139.255
51.146.235.0/24
51.146.252.0/22
51.194.36.0/23
51.194.40.0/21
51.194.88.0/21
51.194.100.0/22
51.194.120.0/21
51.241.3.0/24
51.241.201.0/24
78.105.97.0/24
78.105.136.0/22
78.105.151.0/24
78.105.175.0/24
78.105.179.0/24
78.105.188.0/24
78.105.191.0/24
78.105.194.0/24
78.105.198.0/24
78.105.200.0/24
78.105.202.0/24
188.220.122.0/24
188.220.151.0/24
188.220.157.0/24
188.220.167.0/24
188.220.194.0/24
188.220.212.0/24
188.220.229.0/24
188.221.168.0/24
188.221.177.0/24
188.221.184.0/24
188.221.188.0/24
188.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8b:8b:b3:c3:8d:b7:11:3b:d2:9f:77:86:41:b0:18:e7:df:
34:51:94:12:3e:7b:ab:1a:19:58:24:c7:2c:5d:a8:1e:ae:55:
d1:4b:bb:dd:55:af:83:20:85:59:50:1d:dc:f6:16:3b:7a:36:
c9:19:c8:f0:fd:d4:dc:3d:d7:a3:d6:93:15:6f:56:e3:0e:f4:
f7:21:0d:ea:b0:3a:19:7e:fb:0d:1a:8f:dd:fc:bb:f9:62:8a:
3d:9a:23:02:43:f7:78:3c:df:af:96:31:80:a3:8b:13:64:16:
e9:c9:fd:f3:f2:c7:29:96:51:2e:b6:c2:ce:28:bc:5b:64:99:
42:94:d3:f9:9f:bc:8e:97:b7:d6:d0:6b:e0:09:3f:0a:81:f6:
9a:75:c6:d6:82:42:e8:d8:50:2d:e9:3c:9a:7a:0f:92:10:50:
4e:52:e5:d1:32:85:14:ec:4f:fc:3e:6e:a0:39:02:7b:49:1f:
2f:64:d5:17:a8:27:2c:ea:1f:51:f7:8b:fe:65:30:5c:0a:16:
bb:65:71:16:70:66:59:b3:fb:45:26:28:e2:5a:89:ad:28:16:
fe:9d:85:ca:08:01:d5:83:c4:46:47:23:b6:79:cf:20:6e:19:
d0:aa:6c:fa:79:15:fc:08:5d:b6:63:bc:9c:52:85:47:99:41:
aa:4d:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:42 2026 by rpki-client