Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56655.roa
File: AS56655.roa (raw, json)
Hash identifier: cok5FOvjEANJawEuDbP1igjKnw1pDfZ2T9tugOOdgko=
Subject key identifier: 32:E9:6B:74:C1:BF:CC:E7:AA:6A:59:7E:5B:98:38:C2:A0:D6:84:D4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6780F1C2B644DC87DD3D494F35059B22CF0092FE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56655.roa
Signing time: Tue 18 Aug 2026 12:11:18 +0000
ROA not before: Tue 18 Aug 2026 12:06:18 +0000
ROA not after: Tue 17 Aug 2027 12:11:18 +0000
asID: 56655
IP address blocks: 45.139.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:80:f1:c2:b6:44:dc:87:dd:3d:49:4f:35:05:9b:22:cf:00:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 18 12:06:18 2026 GMT
Not After : Aug 17 12:11:18 2027 GMT
Subject: CN=32E96B74C1BFCCE7AA6A597E5B9838C2A0D684D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:79:55:0c:96:e9:00:46:99:70:5f:46:e6:
24:1a:f2:ba:62:9a:bd:7e:97:e8:ff:46:d7:f5:81:
a0:ce:97:7b:c9:87:7b:71:75:3e:bc:12:d9:7e:97:
4a:5d:61:a0:6a:f4:08:c8:9d:fe:2c:bc:ba:26:89:
e8:58:3f:e7:f1:72:af:d2:85:ae:48:f1:bc:e0:8a:
da:05:30:e8:c6:9d:d4:0f:f7:ae:f0:c3:46:ba:ec:
ee:c9:7b:97:0b:d5:79:5f:23:40:7e:e1:f4:29:b7:
64:dc:ec:5c:c8:1f:b2:e6:f7:4f:ce:da:cb:27:94:
3d:9c:b3:ad:2a:cc:db:3f:3b:57:92:3d:66:ca:55:
78:47:d0:9d:63:aa:d6:96:19:0c:ab:fb:6e:36:5a:
dd:59:11:1b:65:2d:0b:da:2c:6d:f0:e6:af:20:6e:
9e:80:be:a0:d4:6d:69:8b:53:e0:d6:c7:6b:d6:53:
a3:fe:f8:0d:e1:a6:2b:12:c7:72:25:8b:f9:c5:f0:
73:29:d0:93:13:2f:ac:6f:9f:7d:73:f3:a0:7a:d8:
16:23:a5:83:18:63:fd:69:57:a0:d0:87:a0:10:9a:
51:75:e3:a9:10:2d:60:c3:82:f7:3c:f5:e4:51:e3:
b6:0c:c2:2c:ac:68:cc:0c:05:fb:45:56:3a:c1:fd:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E9:6B:74:C1:BF:CC:E7:AA:6A:59:7E:5B:98:38:C2:A0:D6:84:D4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.183.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fb:cf:4f:aa:4a:a5:e8:f2:dd:1e:b8:50:2a:1d:ac:c0:59:
67:3f:48:f5:41:b5:b0:e5:0b:7f:37:2f:f7:f2:4c:f7:f6:c4:
4c:00:3d:61:bd:bd:d1:79:92:64:02:50:7a:81:c4:ba:19:2c:
a1:43:a7:5a:bd:60:54:59:b5:6c:c7:7d:34:3f:74:27:62:85:
30:5c:96:88:62:8e:b9:83:08:d8:81:44:83:26:d0:a6:34:9b:
d4:ae:dc:db:79:39:84:b4:a5:59:55:05:c7:e2:13:43:30:00:
34:62:a5:8b:1f:df:db:f1:da:bb:5c:c1:7f:39:f1:23:9b:11:
b5:15:f1:ab:c5:70:ea:1b:6d:1e:94:fe:b4:e9:a0:e9:6d:0e:
00:2c:82:a5:e8:e6:a1:74:12:d9:19:69:cc:66:b5:5e:2f:a8:
fe:40:43:1f:80:2a:50:0e:4c:4e:fa:53:11:86:30:42:fc:e6:
f3:74:3e:4d:ee:a2:30:1a:2a:1f:cf:ab:47:eb:ef:17:30:dc:
5a:62:66:b0:2f:70:8a:db:9e:0a:6d:e2:03:d0:08:32:6f:c6:
b6:f0:13:85:e4:2d:d6:35:c5:63:8d:19:53:b7:3f:29:d7:32:
b0:99:7c:4b:1f:04:fe:21:a6:ec:68:cb:3d:50:10:83:00:18:
39:42:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:35:10 2026 by rpki-client