Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: 57wqo5nPZQOvPHP2lgUC8Y0FGlWOSkrMUCM1u0f4ZL4=
Subject key identifier: A8:B2:85:4B:4E:94:84:55:C8:C8:99:2D:07:E2:4D:F0:56:68:32:F9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EB2250BF95391AF5DE5B3F90D44DCF943A0FB47
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
Signing time: Sun 06 Sep 2026 07:38:56 +0000
ROA not before: Sun 06 Sep 2026 07:33:56 +0000
ROA not after: Sun 05 Sep 2027 07:38:56 +0000
asID: 2856
IP address blocks: 51.146.44.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.235.0/24 maxlen: 24
51.146.252.0/22 maxlen: 22
51.194.36.0/23 maxlen: 24
51.194.100.0/22 maxlen: 22
51.241.3.0/24 maxlen: 24
51.241.201.0/24 maxlen: 24
78.105.97.0/24 maxlen: 24
78.105.136.0/22 maxlen: 22
78.105.151.0/24 maxlen: 24
78.105.175.0/24 maxlen: 24
78.105.179.0/24 maxlen: 24
78.105.188.0/24 maxlen: 24
78.105.191.0/24 maxlen: 24
78.105.194.0/24 maxlen: 24
78.105.198.0/24 maxlen: 24
78.105.200.0/24 maxlen: 24
78.105.202.0/24 maxlen: 24
87.81.112.0/20 maxlen: 20
188.220.122.0/24 maxlen: 24
188.220.151.0/24 maxlen: 24
188.220.154.0/24 maxlen: 24
188.220.157.0/24 maxlen: 24
188.220.167.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.220.212.0/24 maxlen: 24
188.220.229.0/24 maxlen: 24
188.220.233.0/24 maxlen: 24
188.221.20.0/24 maxlen: 24
188.221.43.0/24 maxlen: 24
188.221.46.0/24 maxlen: 24
188.221.168.0/24 maxlen: 24
188.221.177.0/24 maxlen: 24
188.221.184.0/24 maxlen: 24
188.221.188.0/24 maxlen: 24
188.221.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b2:25:0b:f9:53:91:af:5d:e5:b3:f9:0d:44:dc:f9:43:a0:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 6 07:33:56 2026 GMT
Not After : Sep 5 07:38:56 2027 GMT
Subject: CN=A8B2854B4E948455C8C8992D07E24DF0566832F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:f7:e2:1e:da:fb:d2:4e:8c:60:6c:44:22:
3f:bc:81:85:a8:58:e6:19:13:4d:53:33:91:45:71:
c2:fb:f8:d1:81:1f:bb:4d:bb:af:a3:ae:8c:36:26:
11:d4:c9:43:8d:91:2a:f4:b9:2d:65:e5:62:bd:f7:
9d:85:39:1b:e1:1a:9e:8a:0c:7b:36:40:75:6b:28:
17:8c:04:93:bd:31:75:38:fb:a5:90:80:f1:90:e7:
49:10:f4:95:70:db:5c:c5:e4:71:8a:af:c7:91:c8:
76:c7:6a:53:6f:8f:09:07:a8:b7:1d:15:87:52:2c:
b3:b2:cf:29:68:06:b8:f2:2b:02:b2:8b:b1:59:19:
a3:53:d6:20:69:45:40:2f:31:e6:0a:d1:ed:3c:15:
38:be:49:c2:dd:1f:a2:7b:fd:1f:37:27:2f:cf:54:
dd:6c:fb:6d:86:2b:b5:d8:0d:0e:47:81:46:52:1c:
d0:16:e4:be:00:a1:d1:5c:c2:25:94:97:af:73:ff:
3b:41:39:37:7e:fa:59:1b:48:01:1c:6f:db:73:28:
3d:a3:0b:bd:92:11:d7:4d:6b:f6:22:58:69:27:4f:
d6:00:ac:f9:50:40:1a:46:c3:af:20:0e:99:d7:5a:
0f:f5:7c:2d:b9:c8:f5:ac:a2:8d:1f:b9:40:99:8d:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:85:4B:4E:94:84:55:C8:C8:99:2D:07:E2:4D:F0:56:68:32:F9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.44.0/22
51.146.128.0/22
51.146.136.0/22
51.146.235.0/24
51.146.252.0/22
51.194.36.0/23
51.194.100.0/22
51.241.3.0/24
51.241.201.0/24
78.105.97.0/24
78.105.136.0/22
78.105.151.0/24
78.105.175.0/24
78.105.179.0/24
78.105.188.0/24
78.105.191.0/24
78.105.194.0/24
78.105.198.0/24
78.105.200.0/24
78.105.202.0/24
87.81.112.0/20
188.220.122.0/24
188.220.151.0/24
188.220.154.0/24
188.220.157.0/24
188.220.167.0/24
188.220.194.0/24
188.220.212.0/24
188.220.229.0/24
188.220.233.0/24
188.221.20.0/24
188.221.43.0/24
188.221.46.0/24
188.221.168.0/24
188.221.177.0/24
188.221.184.0/24
188.221.188.0/24
188.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bd:f4:fc:16:73:a2:2d:4d:38:90:74:68:21:74:a1:08:44:
7e:eb:d9:59:8e:fb:52:f9:f5:fc:2c:f9:46:27:4a:98:02:03:
00:6c:fd:7f:bd:d1:c4:61:09:e3:ca:af:b4:1a:ff:6f:48:cb:
00:2e:57:d9:6c:8b:78:e9:74:02:fa:67:c2:5b:59:2f:52:01:
38:73:82:f8:b1:15:ab:f9:bb:12:e6:4c:07:13:de:83:1a:04:
88:47:85:8a:f2:bd:dd:5d:f3:c3:d9:02:17:14:e0:1f:68:2b:
97:90:0d:06:68:c3:03:76:32:54:4e:72:42:b4:09:5b:d6:1d:
76:4c:13:e1:cb:db:b3:d6:62:bb:73:54:f4:86:44:bc:f2:0e:
e5:3a:c7:cb:9b:ab:4d:99:40:f9:26:ac:77:09:7f:0c:bf:44:
94:f7:4f:5c:09:fd:d3:ac:86:21:4e:0a:4c:2d:64:0c:10:a5:
0b:88:66:64:c7:d2:96:17:7e:f4:f7:97:a0:37:f2:f9:4d:fd:
15:10:21:6c:0f:24:f5:74:b9:dd:46:45:5a:80:0b:58:e4:f2:
fb:e2:72:3d:0d:38:4c:f7:83:7b:26:dd:76:e9:44:ec:ac:45:
de:5d:e2:e2:52:b5:24:38:7f:13:46:b6:b9:70:b5:ea:1d:85:
ac:f3:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:29 2026 by rpki-client