Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          J0HYLzTH6fr93vdi9torBUuKwwIm3d17s/j7Dr0DgaM=
Subject key identifier:   0E:21:A3:BE:A3:14:43:0C:B5:49:0E:78:F1:F2:4C:C8:0B:F4:82:76
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       027C89CAD5C5A56C7CAE50013B1CC192B89555CC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa
Signing time:             Mon 17 Aug 2026 22:08:02 +0000
ROA not before:           Mon 17 Aug 2026 22:03:02 +0000
ROA not after:            Mon 16 Aug 2027 22:08:02 +0000
asID:                     56655
IP address blocks:        178.94.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:89:ca:d5:c5:a5:6c:7c:ae:50:01:3b:1c:c1:92:b8:95:55:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug 17 22:03:02 2026 GMT
            Not After : Aug 16 22:08:02 2027 GMT
        Subject: CN=0E21A3BEA314430CB5490E78F1F24CC80BF48276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:89:28:0b:54:58:75:dc:9b:8f:1b:34:64:
                    3e:51:d3:5f:36:0d:c0:bd:39:c8:8c:5f:78:80:86:
                    d9:b6:58:4d:99:16:5f:45:61:ec:a8:40:59:ce:00:
                    af:ca:3a:11:46:66:ad:28:27:10:b0:1d:92:2b:89:
                    5b:19:60:61:54:c9:64:1a:ee:cf:65:39:75:d1:32:
                    88:5e:db:c9:59:e7:9d:92:cc:b7:21:80:67:1b:86:
                    05:b8:7a:15:8d:85:f0:c1:15:92:6d:25:53:c9:98:
                    50:6b:9b:24:ec:b8:b2:35:df:cd:d0:32:81:4e:59:
                    d2:0b:4f:e7:72:ed:48:cc:cd:18:14:c5:05:8e:5c:
                    37:18:cb:90:07:d8:57:09:a9:89:ef:a4:72:ad:b4:
                    8b:d6:2c:f9:cb:12:5a:6a:3f:6b:3b:ac:64:41:19:
                    69:aa:ff:8e:8e:98:63:13:2d:8c:24:16:14:64:97:
                    42:61:a0:25:b5:6e:f6:fc:34:f4:98:39:db:d0:49:
                    a3:9b:2c:58:47:7d:98:5e:9d:fe:40:91:84:27:4f:
                    d3:be:85:2b:12:ce:c4:aa:16:eb:a4:22:67:7f:0d:
                    d4:11:09:db:41:a0:84:df:62:a5:08:7d:5e:c1:cb:
                    50:ed:ee:52:74:13:72:33:fb:75:e0:02:5c:58:06:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:21:A3:BE:A3:14:43:0C:B5:49:0E:78:F1:F2:4C:C8:0B:F4:82:76
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.94.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:9f:ad:ab:ee:f0:26:9f:08:e7:35:e7:01:c3:bf:81:25:
         db:6d:90:62:ac:a9:f5:8b:a3:f7:92:c0:a7:d2:3e:09:13:46:
         03:d1:c0:75:f3:4b:03:52:2a:18:56:e2:31:1e:e7:a1:e3:51:
         38:c5:6b:0f:b5:55:7c:13:4d:97:e2:22:c6:7b:b6:87:77:73:
         00:d8:6c:1a:78:e9:83:05:f2:b5:0f:e5:a6:4b:03:b5:51:ba:
         af:ac:18:1b:11:7b:2d:ba:da:c4:db:57:da:86:a0:f8:fa:7a:
         81:ca:de:1b:e4:a4:4c:88:07:43:0e:c9:15:b4:cf:35:c6:93:
         30:c5:9b:06:43:8e:d4:39:7d:68:25:53:bc:63:ca:fc:72:1c:
         70:1f:42:65:2b:b3:31:84:23:51:33:62:86:f0:f1:b1:15:50:
         51:ab:1f:b9:eb:fa:b6:37:94:2d:0d:03:2e:60:30:73:ad:c6:
         33:b9:b3:cc:c4:f7:98:5b:ee:1b:ae:a5:d6:95:97:ac:2b:7b:
         86:12:9a:7e:5b:d4:d9:ee:56:ff:da:c6:e7:59:10:7f:66:5f:
         b7:b2:9d:4e:c1:28:c1:31:13:13:e2:88:b9:0b:df:53:d7:d2:
         8a:b0:73:8a:c2:0e:4d:87:4e:d8:8d:53:58:24:c0:ea:ca:fd:
         bd:fe:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 06:26:48 2026 by rpki-client