Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56971.roa
File: AS56971.roa (raw, json)
Hash identifier: XAZRpK9V9PuHMkCrIHvi4SAbTqHlTgP9qERQ5DKnTSk=
Subject key identifier: A1:5E:22:A5:B0:2F:54:95:19:B4:32:D3:B9:12:BE:88:30:1B:1A:A5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4F44ED6D58CA05033F2478CBB9E96540A9F70B21
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56971.roa
Signing time: Thu 25 Jun 2026 12:47:31 +0000
ROA not before: Thu 25 Jun 2026 12:42:31 +0000
ROA not after: Thu 24 Jun 2027 12:47:31 +0000
asID: 56971
IP address blocks: 45.158.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 04:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:44:ed:6d:58:ca:05:03:3f:24:78:cb:b9:e9:65:40:a9:f7:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 25 12:42:31 2026 GMT
Not After : Jun 24 12:47:31 2027 GMT
Subject: CN=A15E22A5B02F549519B432D3B912BE88301B1AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:2f:77:27:fa:fe:c8:6f:87:e8:36:10:63:
c2:db:e6:20:57:9f:42:73:2c:d3:c4:40:05:0d:4c:
32:b2:e9:28:b1:1c:83:c8:ad:14:a1:ad:86:05:87:
3a:d0:b3:08:ab:e8:f8:ba:54:9d:92:c6:cf:18:23:
62:59:06:94:4a:08:3c:38:2a:1b:1c:cc:1a:b0:44:
82:a1:e8:69:3c:a9:21:26:39:f3:45:78:f2:6e:24:
7e:b1:aa:91:67:8a:95:42:fd:94:13:ba:3f:f6:32:
01:28:1f:f4:4e:a7:ee:83:db:ce:e1:70:26:44:77:
f5:80:4f:d1:0e:db:bf:8b:cc:57:27:8e:17:43:40:
2e:8b:2e:f4:a6:4e:5e:14:5f:54:dd:ea:d6:8f:5e:
4a:73:bd:c4:b8:98:4e:b5:30:c9:66:10:33:80:f6:
29:43:ef:fc:54:c8:22:08:06:fe:dd:84:c5:df:92:
12:d5:c9:8c:08:64:8d:aa:d0:0c:f7:8e:60:2f:1d:
b6:2d:8b:89:32:f6:79:b0:a8:20:13:6c:22:3c:a8:
b3:ce:b2:e7:10:21:0a:eb:23:f9:63:45:b2:fe:88:
2b:e4:26:d9:07:1a:7c:d4:72:0a:32:d4:6e:fc:5d:
9c:b7:f2:4b:1e:19:51:a5:8f:7a:0a:95:30:70:e1:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:22:A5:B0:2F:54:95:19:B4:32:D3:B9:12:BE:88:30:1B:1A:A5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:07:33:2e:86:40:86:07:51:4d:ad:cd:59:2c:94:c9:9d:9c:
4d:61:48:9f:ae:d7:62:96:bc:9a:9a:00:e7:6c:34:21:ad:69:
fb:a1:49:a1:10:cf:98:0f:4f:f8:4e:86:02:8a:b3:11:30:58:
49:f5:60:15:92:d7:6a:5f:a6:e6:89:88:95:28:9e:48:ca:02:
a4:bf:dd:e6:87:59:5f:07:f1:a2:43:4c:f2:9c:fa:4f:da:b7:
8a:cf:9c:74:bd:f2:46:be:39:b4:10:26:a4:22:b9:e2:93:d5:
96:7b:64:cb:54:3a:52:29:ec:0f:dc:ae:1c:42:ee:3a:91:09:
c8:f3:84:5a:fd:8f:b2:2f:00:b7:17:99:4f:95:f4:26:39:32:
42:58:e9:92:e4:26:bb:48:13:b4:51:e6:29:b1:81:df:89:5f:
49:37:14:23:90:5f:ac:b7:c2:34:4b:88:b6:00:ca:1c:0f:d0:
3b:4e:90:f3:e8:fe:f0:4f:bf:36:13:4d:43:58:3f:81:85:be:
f6:77:a2:ef:9b:16:4d:38:f4:6f:99:6d:2d:de:4e:03:fd:f5:
5d:d6:78:4d:57:d9:a9:78:6f:c9:82:e0:fe:dd:38:aa:ad:fa:
6b:2d:65:c4:32:03:00:5a:9f:38:f8:b6:ef:c3:5e:f5:0b:4d:
8b:f8:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 15:14:08 2026 by rpki-client