Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56683.roa
File: AS56683.roa (raw, json)
Hash identifier: xDXuLOBlF612J4LP15zy54e6JEOFPZkdCkMXn7JnH44=
Subject key identifier: 42:D2:44:22:C5:E0:65:E9:EF:03:B4:9A:14:07:47:30:3C:5E:0F:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3DC4DB611E29747F8A451B7C76163D8057DD2EBE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56683.roa
Signing time: Tue 15 Sep 2026 10:24:26 +0000
ROA not before: Tue 15 Sep 2026 10:19:26 +0000
ROA not after: Tue 14 Sep 2027 10:24:26 +0000
asID: 56683
IP address blocks: 82.25.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c4:db:61:1e:29:74:7f:8a:45:1b:7c:76:16:3d:80:57:dd:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 10:19:26 2026 GMT
Not After : Sep 14 10:24:26 2027 GMT
Subject: CN=42D24422C5E065E9EF03B49A140747303C5E0F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:3c:3c:5a:3e:ad:90:bb:e3:d1:4f:61:8e:
61:4d:8b:d8:b2:11:58:2f:11:a4:74:44:3e:8e:e8:
cd:8f:f7:7f:f4:f0:46:49:37:0e:04:c6:a6:6f:27:
ce:ff:31:09:9e:af:be:4e:1b:74:f7:83:77:0b:d1:
c0:51:54:25:8d:54:a6:11:db:63:a9:14:fe:08:b1:
31:3c:51:d2:6c:dc:31:58:01:6f:88:ca:97:fb:67:
0a:2c:28:d2:8c:ef:2a:0e:81:b1:99:3d:59:9f:40:
7b:f7:d4:b3:2e:a3:9d:7f:7a:19:09:a0:2c:64:bf:
e7:f3:70:ad:be:f0:2a:9b:45:49:50:bb:38:da:79:
4b:52:eb:cc:8d:5f:d6:17:7f:88:54:95:d3:9d:1c:
40:f6:e5:d4:99:33:8e:1a:34:1d:7e:8c:ad:a0:f7:
b5:63:73:eb:96:1a:ce:16:46:ea:69:2e:cf:b9:6d:
12:46:5f:81:9f:75:c9:e3:a5:52:b0:46:ea:b3:a7:
49:90:d7:f3:ef:8c:dd:1a:85:d4:40:75:31:2d:81:
32:2d:3f:2d:d0:26:17:bd:70:fa:cc:86:c0:d0:f9:
a8:d4:88:64:af:d1:30:70:8b:d0:a9:db:ae:35:93:
c4:79:c5:69:59:4a:3b:ef:b6:2b:83:60:b5:c3:95:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:44:22:C5:E0:65:E9:EF:03:B4:9A:14:07:47:30:3C:5E:0F:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS56683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ca:4a:8d:bb:bd:2b:90:ae:24:8e:f6:c2:6d:84:3e:2b:eb:
56:1e:b9:c7:df:8b:de:7a:c7:e3:12:12:8b:1e:1f:68:76:f6:
5b:bd:8e:35:f0:0f:cf:49:f4:50:ca:b8:8d:a8:23:8d:61:0c:
68:c5:29:54:1e:45:fa:e8:62:9d:4a:fb:99:06:fe:80:cb:36:
e6:2c:6b:33:da:dd:43:e2:b7:5d:0f:cb:9c:a9:b3:eb:e4:8a:
ed:35:c4:b8:ae:77:14:51:23:3d:38:f8:73:f2:b4:f9:87:17:
54:78:65:ca:88:8c:c1:84:6d:99:9a:2e:b7:8b:b0:3a:f0:3f:
af:3b:c8:78:da:15:8b:e0:a8:45:19:00:28:f1:8c:36:d7:70:
0d:e4:f1:86:53:63:cb:05:08:dc:d5:a3:e8:e0:b2:8f:5c:27:
a4:b0:40:cb:45:88:b1:7b:74:cc:58:c8:6f:bf:96:96:f2:3a:
95:5f:5a:74:93:c9:36:86:30:86:53:f4:ee:a7:3d:f1:a9:eb:
f5:ed:9b:b8:96:9d:10:5d:24:e7:97:18:17:1e:7f:63:89:56:
43:1e:05:53:17:2b:c9:9c:19:0a:29:c4:79:73:8e:bf:77:86:
8d:3f:5a:39:20:4a:05:91:1f:c7:24:2f:f0:5f:f0:92:dc:b0:
a2:dc:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:51 2026 by rpki-client