Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS2856.roa
File: AS2856.roa (raw, json)
Hash identifier: 35nd3w8K58dQkXhqg/qvLtcBQjgQWcczD9Htw4aVtcA=
Subject key identifier: 1E:6D:CD:FE:97:2D:AF:94:E0:0F:61:60:AF:F2:5C:2C:D0:2D:D9:67
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 237D984B8E3683234C4B065D76AC6FF020699734
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS2856.roa
Signing time: Thu 09 Oct 2025 11:18:06 +0000
ROA not before: Thu 09 Oct 2025 11:13:06 +0000
ROA not after: Thu 08 Oct 2026 11:18:06 +0000
asID: 2856
IP address blocks: 147.78.68.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7d:98:4b:8e:36:83:23:4c:4b:06:5d:76:ac:6f:f0:20:69:97:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 9 11:13:06 2025 GMT
Not After : Oct 8 11:18:06 2026 GMT
Subject: CN=1E6DCDFE972DAF94E00F6160AFF25C2CD02DD967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:39:35:b8:c9:e7:7c:89:e4:85:3a:27:31:
70:69:22:67:6a:b0:ba:d2:58:00:1d:e8:39:10:3a:
3c:8d:1d:fc:76:c3:e8:17:22:7e:54:e0:b2:18:a6:
cb:cd:a4:7f:0e:0e:52:a9:8e:9c:90:9e:78:b7:a4:
0e:9a:dc:19:ce:16:82:63:2a:fe:70:58:d0:b2:af:
3f:7c:73:30:49:4f:4d:ad:d6:c1:42:c2:d8:b9:9f:
1f:20:a0:fd:52:d4:0a:73:fd:38:54:f7:50:36:8f:
0a:43:4c:d8:33:04:26:b5:e6:e3:c5:87:92:7a:31:
63:eb:c0:ba:26:6c:76:bc:55:00:8a:71:bd:ec:31:
d0:c9:46:e6:24:db:94:ab:42:25:97:68:28:68:af:
0b:f9:e1:92:6b:70:10:00:64:14:56:98:03:fc:92:
6d:01:bd:a4:bf:44:5f:8d:62:98:4e:84:75:41:00:
bd:f0:aa:d4:aa:28:a2:c6:54:80:e7:91:38:24:4c:
73:4c:6a:f9:2b:08:ce:32:e0:f1:d8:27:dd:33:dc:
af:ba:5f:10:db:8d:66:5e:74:66:55:b4:bf:13:42:
b7:10:6e:dd:70:bc:31:6a:00:cf:d0:8b:9c:6e:90:
2b:61:71:5d:df:31:af:14:fb:6c:ad:cd:84:6f:84:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:CD:FE:97:2D:AF:94:E0:0F:61:60:AF:F2:5C:2C:D0:2D:D9:67
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS2856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.68.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:17:49:63:a6:b5:07:17:26:a4:d7:e5:cb:0c:16:5f:98:34:
a9:a7:71:5b:9d:c5:e4:ce:9e:d4:fb:61:80:4d:89:ba:98:4d:
e5:b0:2c:5a:8c:26:a2:87:e3:87:7d:7b:ce:35:5e:7e:ef:df:
de:47:14:67:e0:7f:42:e1:22:02:05:4f:7d:8b:61:75:5f:23:
c2:d5:1f:f9:57:90:94:18:89:e4:c5:c7:e5:e8:a7:b0:83:61:
60:97:9c:a1:34:81:fd:81:f8:0c:ca:8b:2a:a8:7c:22:d0:49:
a2:fc:93:97:fa:25:17:d5:59:c1:1d:42:09:d8:3c:ec:90:21:
03:14:07:22:09:e2:16:93:65:23:55:e5:30:9b:ea:8b:cd:22:
7d:c2:9f:16:ac:e6:31:b7:05:64:97:5b:e8:f8:11:65:2d:52:
63:3d:db:b6:e1:86:89:15:30:15:c4:e6:1a:4c:89:52:1b:8d:
38:34:ff:90:80:b0:c6:61:b1:47:fa:bc:f1:5d:21:c3:09:c3:
46:60:a8:f1:07:b6:82:36:0a:ce:fe:78:5c:87:52:4a:4b:af:
a2:90:03:53:1a:99:31:9f:e8:73:7c:d5:30:c3:45:db:9d:60:
e6:68:b6:48:34:bc:f9:6d:db:6a:2c:5b:29:3f:c8:f5:1f:c1:
c4:98:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:36 2025 by rpki-client