Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56655.roa
File: AS56655.roa (raw, json)
Hash identifier: 5uNahnt2L3Uo9xFTHt/JoVFtPs7MqveBwCKB9y1UOlA=
Subject key identifier: 57:8D:A5:43:D2:68:60:33:2E:2C:F8:CD:58:03:1B:45:89:B0:37:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6CA6AEC6EBC8F1AEF6D4D88E89A80D0F86DBD66E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56655.roa
Signing time: Mon 14 Sep 2026 17:49:35 +0000
ROA not before: Mon 14 Sep 2026 17:44:35 +0000
ROA not after: Mon 13 Sep 2027 17:49:35 +0000
asID: 56655
IP address blocks: 82.22.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a6:ae:c6:eb:c8:f1:ae:f6:d4:d8:8e:89:a8:0d:0f:86:db:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 17:44:35 2026 GMT
Not After : Sep 13 17:49:35 2027 GMT
Subject: CN=578DA543D26860332E2CF8CD58031B4589B03736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:81:9d:c0:cc:19:bd:e6:6c:79:35:6a:e9:
c0:81:95:fd:92:13:1f:0c:48:03:62:eb:c8:a8:74:
8c:ce:d6:1d:29:2f:ae:70:a6:3b:1a:91:19:11:72:
7b:08:9e:d1:9d:69:13:e8:ae:25:12:5c:2d:8d:c4:
13:1a:1e:68:bd:0a:3d:4d:bd:49:43:a9:8f:f5:2d:
e7:88:4f:6b:e1:59:70:4d:e5:90:ff:ce:1c:5a:26:
e5:8d:49:b4:e2:4c:6c:74:38:66:cc:47:75:a0:1b:
c8:cb:59:e0:0b:0e:0a:7d:1f:e8:3a:86:20:4e:20:
01:7d:04:f9:2a:10:35:67:41:5c:36:7e:3d:13:21:
f1:33:a5:60:a9:44:b8:f4:a5:b9:9e:5b:cc:0e:87:
48:11:a9:89:ab:1a:40:7f:c4:c7:20:c0:b1:8c:4b:
f6:43:e1:46:57:e9:13:e0:84:c6:5a:43:60:40:5a:
55:01:97:0c:51:60:9c:ad:6b:9f:c0:55:3b:7a:95:
c0:82:84:3c:49:bc:2f:af:f3:a4:d6:72:c2:3d:76:
2b:ee:09:3b:ef:bb:b6:76:2c:5a:8e:6e:a6:bc:73:
e2:e1:c1:bc:4e:78:e5:ba:f6:8a:fb:66:06:d3:f0:
78:10:03:13:b2:74:87:fe:c2:f3:fe:b2:55:3f:1b:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:A5:43:D2:68:60:33:2E:2C:F8:CD:58:03:1B:45:89:B0:37:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.59.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:aa:44:89:1f:69:57:ae:29:81:07:61:70:63:87:c2:27:
01:17:ce:a4:ea:a3:23:07:2c:a3:de:e2:67:ea:6f:82:65:89:
11:a0:a6:5c:f0:bd:24:b5:b9:fd:0c:2c:a6:c7:73:06:36:b8:
48:60:eb:24:d7:26:97:c5:29:7d:50:a2:b8:53:b4:c8:c3:35:
be:a1:37:6f:8c:97:07:16:08:bb:54:fc:8f:71:cd:06:c9:d7:
5e:2a:4e:1b:80:1e:2d:36:be:60:0a:0c:0d:a7:7f:9c:69:b0:
e6:80:88:88:5b:74:47:26:e5:c2:6c:32:da:8c:9d:1f:e9:7c:
f5:86:01:8d:f8:4e:ec:92:ad:11:25:a1:46:4d:b1:c5:17:77:
67:2f:29:ab:80:77:2e:61:56:ff:06:83:52:f4:56:36:98:a8:
6e:8a:5d:6a:88:87:ce:b9:9b:ce:b8:a2:87:8d:df:5c:b7:90:
9f:e5:4a:4a:75:51:5a:70:a1:61:6e:96:10:1a:cd:16:fd:9c:
5e:96:42:17:34:86:5b:4a:03:a6:f2:db:22:29:c9:aa:e9:f1:
e8:6e:c9:69:84:0a:7c:8d:16:91:b1:06:78:fd:bd:e0:fc:ac:
ec:a1:5d:9b:c6:e8:8f:1f:39:38:e6:51:30:59:1d:c2:8b:82:
f2:1d:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:52:20 2026 by rpki-client