Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS56655.roa
File: AS56655.roa (raw, json)
Hash identifier: UWHowP9qGUzVjSlTALdmNn7bPsQkE2ctrmuAKMYl/7Y=
Subject key identifier: 11:69:8C:4A:12:F2:F5:5E:F4:EC:CE:2F:61:02:08:3D:30:1A:1D:88
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4D0D04F5498B0E150E6FF346F578534A871B9A33
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS56655.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 56655
IP address blocks: 2a0f:85c1:270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0d:04:f5:49:8b:0e:15:0e:6f:f3:46:f5:78:53:4a:87:1b:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=11698C4A12F2F55EF4ECCE2F6102083D301A1D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:35:3a:89:2f:10:17:af:cd:9e:dc:3d:a0:
df:0c:13:05:d2:97:77:86:0e:b4:af:da:70:eb:41:
63:7d:ae:c7:c7:33:c1:c9:f8:81:e5:89:2c:46:de:
fb:86:ae:f6:14:9d:74:e7:5e:4a:10:e8:4c:e6:1b:
2d:3e:46:57:6f:42:cf:24:42:de:e8:0a:5d:f2:54:
42:ad:77:2c:a7:9e:1a:3e:e3:21:58:7e:fa:08:19:
aa:8d:72:4b:37:e2:af:e3:39:96:bd:2c:a3:8f:43:
36:41:55:9a:11:81:3a:a2:88:a9:2a:b5:15:81:75:
8f:f7:39:d6:7c:09:3d:6c:6f:96:5b:d2:9e:72:22:
73:2b:3d:f7:90:e9:ef:37:ed:96:51:b0:c7:ac:f0:
6c:ca:76:d6:66:7f:f5:79:d9:5a:46:d8:f3:7f:cb:
ee:ad:15:8a:fd:e7:32:75:2b:ab:cc:91:03:1e:06:
27:47:aa:4f:65:9c:79:e5:a5:ab:b1:0f:9f:51:46:
ff:75:e1:a0:e5:ea:50:53:16:61:c0:db:4d:9d:20:
8e:7e:97:3b:08:32:08:c2:a3:1a:18:bb:21:26:a9:
dc:18:f6:02:ea:74:81:6f:c6:49:12:54:75:01:57:
08:a5:fa:b0:c5:73:c9:59:21:30:2a:e7:6e:4c:4c:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:8C:4A:12:F2:F5:5E:F4:EC:CE:2F:61:02:08:3D:30:1A:1D:88
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS56655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:270::/44
Signature Algorithm: sha256WithRSAEncryption
1e:59:e4:a9:06:27:df:79:a4:1e:11:de:4e:1d:d5:98:76:ed:
0d:a9:19:7e:a5:70:56:0e:cb:f3:79:04:8c:a5:d8:1d:a8:04:
64:e3:fc:1f:4b:eb:4f:27:b8:9b:ac:a4:4f:a5:0c:a1:aa:75:
56:45:0e:35:f7:7a:c2:fd:8a:4d:37:24:0d:c8:97:96:f8:be:
29:2b:1f:67:e6:64:70:c3:3e:5a:45:1e:ed:d0:76:6a:92:f0:
1e:71:9d:ee:91:b2:0d:e4:4a:c1:7c:6f:cd:78:cd:27:33:db:
ad:8f:90:b5:50:cb:49:89:cf:ed:e5:fa:06:03:89:df:79:65:
df:93:b5:06:18:50:b6:09:7b:97:17:0d:7d:2c:c2:72:c7:41:
1a:f3:a2:ff:31:96:85:ed:ec:95:9b:28:2a:95:56:04:49:4e:
33:3f:49:7c:13:79:50:88:8d:e5:28:a5:ca:23:2a:19:45:50:
04:75:8b:aa:7a:a5:30:34:fa:fc:97:3c:92:e2:f4:b4:0f:c7:
c0:b7:e6:82:ae:0d:10:e3:5d:d6:82:3c:e2:05:2b:ed:27:f9:
92:5a:e7:50:73:15:4c:c0:cd:97:d0:60:4c:77:b1:84:27:43:
72:cb:fc:11:26:71:6d:3e:2f:95:dd:a5:f0:74:29:3a:d6:3d:
fe:ce:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:25 2026 by rpki-client