Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56683.roa
File: AS56683.roa (raw, json)
Hash identifier: /ezPYRPpf+5/eusgO4QJSYpFoSeWODM4N5L/ZUvXxpg=
Subject key identifier: C7:53:EC:0E:9C:28:D4:78:EA:86:C6:7B:A2:01:E4:48:7D:CC:FE:30
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5A6FF47BC2A0CBA34BB42A63D10BCA5A517B591E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56683.roa
Signing time: Tue 15 Sep 2026 09:19:01 +0000
ROA not before: Tue 15 Sep 2026 09:14:01 +0000
ROA not after: Tue 14 Sep 2027 09:19:01 +0000
asID: 56683
IP address blocks: 168.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6f:f4:7b:c2:a0:cb:a3:4b:b4:2a:63:d1:0b:ca:5a:51:7b:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 15 09:14:01 2026 GMT
Not After : Sep 14 09:19:01 2027 GMT
Subject: CN=C753EC0E9C28D478EA86C67BA201E4487DCCFE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:ea:ee:31:7f:cd:4e:3a:49:9b:d5:1e:1e:
88:96:a1:82:07:49:ad:77:e1:ad:4c:ac:c5:63:73:
16:db:93:09:01:2d:14:b0:53:0a:57:b9:fb:3a:f4:
95:32:c4:b8:2e:79:87:fb:56:9b:77:69:d3:eb:e2:
32:d0:5a:6e:a4:08:ac:71:03:7e:60:c5:69:53:a3:
09:e5:6c:08:0a:ec:21:57:f0:48:f8:79:a0:cc:6e:
f4:52:b9:80:11:5b:10:36:5c:96:d3:75:a9:07:e5:
70:e6:38:29:c2:e1:07:73:eb:3e:2e:d0:99:7f:54:
52:08:42:4b:13:04:b5:6d:4e:aa:6b:1a:5d:94:ec:
55:1f:20:87:1b:0b:e6:ac:9d:f1:84:d2:56:70:12:
ab:c6:09:3f:51:8e:d3:ca:16:0d:66:15:7a:a6:89:
20:7e:dd:19:ed:9a:3e:a3:83:67:d0:a0:99:ec:71:
db:f5:97:3c:d8:e5:76:ef:6d:db:7a:67:35:41:01:
f0:1e:ec:0d:c5:e2:b2:58:84:d1:e6:68:b3:7a:1e:
e5:ba:f6:73:a3:d6:83:3c:b1:87:ff:36:eb:38:17:
23:4d:9d:7f:e0:b2:23:11:47:d2:3a:bb:b4:44:d2:
a0:63:c8:4d:a6:1b:08:41:c8:0f:7c:5a:38:78:a4:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:EC:0E:9C:28:D4:78:EA:86:C6:7B:A2:01:E4:48:7D:CC:FE:30
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS56683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:53:64:9a:c5:6f:7a:4d:1f:1b:a8:40:87:da:03:86:2f:20:
31:dd:01:22:49:17:99:20:34:c2:ff:c4:03:51:1c:c3:59:83:
d5:58:77:b7:c7:fa:70:1c:61:ea:cc:c6:28:05:17:a3:82:75:
7b:46:4d:49:95:e3:74:47:77:a9:c3:7e:d2:57:44:6c:8a:fa:
43:c4:76:48:f2:bf:fb:1a:d3:fc:06:51:a4:14:97:95:8b:9d:
be:ca:15:ad:8b:e3:88:cb:17:34:d6:4f:c6:3a:c8:8f:61:62:
4c:68:c2:88:86:6d:45:f4:f4:78:27:36:4e:f3:6a:62:20:5a:
ec:f7:69:c9:4e:f1:ef:f7:37:5f:54:f4:e7:bb:99:76:08:1a:
e6:df:27:c5:5e:ac:2e:a5:db:ce:9e:b5:83:68:d2:a9:ea:37:
37:b3:2a:00:93:c5:00:b1:60:36:a1:98:e5:24:1c:c1:ce:dc:
7f:50:f2:12:3e:ac:d1:52:2d:f8:1a:e3:e2:6d:c1:60:23:15:
72:ee:f2:16:86:2d:28:06:00:5f:dd:ae:77:b0:f7:17:e1:f6:
a1:3d:12:db:6f:c0:45:5e:b9:3a:4d:44:b1:0b:f3:59:e3:63:
73:97:83:39:dc:fc:52:49:1f:a6:4e:4f:ba:fe:5b:2e:47:e8:
48:2c:6a:d2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUWm/0e8Kgy6NLtCpj0QvKWlF7WR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MTUwOTE0MDFaFw0yNzA5MTQwOTE5MDFaMDMxMTAvBgNV
BAMTKEM3NTNFQzBFOUMyOEQ0NzhFQTg2QzY3QkEyMDFFNDQ4N0RDQ0ZFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0geruMX/NTjpJm9UeHoiWoYIH
Sa134a1MrMVjcxbbkwkBLRSwUwpXufs69JUyxLgueYf7Vpt3adPr4jLQWm6kCKxx
A35gxWlTownlbAgK7CFX8Ej4eaDMbvRSuYARWxA2XJbTdakH5XDmOCnC4Qdz6z4u
0Jl/VFIIQksTBLVtTqprGl2U7FUfIIcbC+asnfGE0lZwEqvGCT9RjtPKFg1mFXqm
iSB+3Rntmj6jg2fQoJnscdv1lzzY5Xbvbdt6ZzVBAfAe7A3F4rJYhNHmaLN6HuW6
9nOj1oM8sYf/Nus4FyNNnX/gsiMRR9I6u7RE0qBjyE2mGwhByA98Wjh4pLHFAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUx1PsDpwo1HjqhsZ7ogHkSH3M/jAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTY2ODMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo3i8w
DQYJKoZIhvcNAQELBQADggEBAH1TZJrFb3pNHxuoQIfaA4YvIDHdASJJF5kgNML/
xANRHMNZg9VYd7fH+nAcYerMxigFF6OCdXtGTUmV43RHd6nDftJXRGyK+kPEdkjy
v/sa0/wGUaQUl5WLnb7KFa2L44jLFzTWT8Y6yI9hYkxowoiGbUX09HgnNk7zamIg
Wuz3aclO8e/3N19U9Oe7mXYIGubfJ8VerC6l286etYNo0qnqNzezKgCTxQCxYDah
mOUkHMHO3H9Q8hI+rNFSLfga4+JtwWAjFXLu8haGLSgGAF/drnew9xfh9qE9Ettv
wEVeuTpNRLEL81njY3OXgznc/FJJH6ZOT7r+Wy5H6EgsatI=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:22:16 2026 by rpki-client