Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa
File: AS56655.roa (raw, json)
Hash identifier: Omtf/UTO9c6LmL+OGA/N/l0T0i1RmTOrPNQksobSILs=
Subject key identifier: 20:D9:E6:48:84:64:12:20:A6:AA:82:B4:A5:80:1C:B8:FC:2A:67:ED
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2FC612D96D1B89E7E7119B6DDF37A56C3ACECBC0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa
Signing time: Thu 17 Sep 2026 22:05:38 +0000
ROA not before: Thu 17 Sep 2026 22:00:38 +0000
ROA not after: Thu 16 Sep 2027 22:05:38 +0000
asID: 56655
IP address blocks: 46.202.0.0/24 maxlen: 24
46.202.12.0/24 maxlen: 24
46.202.13.0/24 maxlen: 24
46.202.14.0/24 maxlen: 24
46.202.15.0/24 maxlen: 24
46.202.39.0/24 maxlen: 24
46.202.40.0/24 maxlen: 24
46.202.41.0/24 maxlen: 24
46.202.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c6:12:d9:6d:1b:89:e7:e7:11:9b:6d:df:37:a5:6c:3a:ce:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 17 22:00:38 2026 GMT
Not After : Sep 16 22:05:38 2027 GMT
Subject: CN=20D9E64884641220A6AA82B4A5801CB8FC2A67ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:2b:8d:83:e1:db:26:40:28:98:28:fa:36:
c1:32:46:46:6a:4d:bb:fe:81:dd:16:ea:6f:e7:dc:
96:3f:47:db:77:2d:09:35:22:9b:6e:a6:df:e0:af:
af:43:fc:2b:10:ab:3a:de:a1:21:78:32:3a:ed:9a:
18:aa:23:04:82:6c:c8:27:f2:ac:09:f8:42:b3:e3:
3d:f6:39:c8:d8:58:e1:a1:fd:44:0a:2e:32:e3:15:
fa:2b:28:2d:71:5d:a8:f2:48:bd:fe:45:8f:4b:3d:
1f:50:ad:dd:d8:b6:7c:34:80:f5:56:58:86:69:f7:
66:40:10:12:03:1e:39:35:86:c4:d6:5e:20:a6:41:
cb:d5:83:ed:3e:59:80:fd:65:3a:c6:b8:b2:be:af:
c0:45:03:50:71:58:31:3c:73:fa:87:a7:04:ec:6c:
4e:06:3d:b7:a9:91:d7:cb:1f:42:d4:6e:e6:c4:9c:
d7:35:a9:ec:30:1d:47:d5:59:d1:2b:e9:1b:40:65:
23:1b:ce:37:49:78:5b:b5:08:24:3f:5f:c8:3b:a1:
b7:50:3c:38:70:03:6f:9b:45:bd:11:47:ef:2d:6c:
45:fb:82:40:f4:21:a5:cb:dc:de:02:05:ce:02:a3:
09:c6:57:82:76:4c:11:8d:fc:cb:d5:35:04:32:53:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:E6:48:84:64:12:20:A6:AA:82:B4:A5:80:1C:B8:FC:2A:67:ED
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.0.0/24
46.202.12.0/22
46.202.39.0-46.202.41.255
46.202.45.0/24
Signature Algorithm: sha256WithRSAEncryption
67:22:2d:65:e2:75:b2:c0:b7:81:7a:6c:cf:5b:42:28:15:bc:
ae:22:e0:49:e8:bd:75:c2:44:4d:d2:6e:35:aa:f1:09:bf:70:
44:a3:de:1c:a9:e4:0f:69:e4:20:6f:a6:ce:cf:ce:cf:7a:ff:
cd:9d:ab:6e:9a:43:cf:0d:8c:b3:da:f9:ea:fd:ab:3d:50:a0:
e5:ac:c3:8c:13:f1:ae:a4:27:f9:23:58:1e:cf:55:bb:73:92:
61:6a:d7:7c:20:88:0a:2b:c7:2a:72:d8:4c:04:23:3a:4a:ab:
ae:cd:5e:4c:a9:0a:5c:5b:6a:f4:12:47:76:8c:1c:a4:68:79:
81:e4:69:2b:36:bb:d3:db:c0:69:b5:5b:15:4d:5a:e2:65:e3:
78:41:be:fd:11:50:b8:ce:3f:50:64:1d:33:ba:2e:52:9c:11:
17:ae:80:a9:18:40:7f:da:d3:2c:c6:cb:ff:c0:4a:f1:80:04:
2d:0c:58:98:34:a8:33:b9:59:15:c6:35:7e:f2:b8:5e:95:77:
fe:03:41:ce:59:e8:47:59:ca:b1:74:cb:ea:d7:7d:46:bd:e4:
e8:aa:b8:6f:f3:f6:c0:83:3f:54:63:1d:05:3f:f8:77:9e:ef:
3d:df:96:d9:b5:c2:6e:69:84:94:e5:9a:7f:d7:6d:0f:50:6d:
d5:a1:7e:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUL8YS2W0biefnEZtt3zelbDrOy8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTcyMjAwMzhaFw0yNzA5MTYyMjA1MzhaMDMxMTAvBgNV
BAMTKDIwRDlFNjQ4ODQ2NDEyMjBBNkFBODJCNEE1ODAxQ0I4RkMyQTY3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MSuNg+HbJkAomCj6NsEyRkZq
Tbv+gd0W6m/n3JY/R9t3LQk1Iptupt/gr69D/CsQqzreoSF4MjrtmhiqIwSCbMgn
8qwJ+EKz4z32OcjYWOGh/UQKLjLjFforKC1xXajySL3+RY9LPR9Qrd3Ytnw0gPVW
WIZp92ZAEBIDHjk1hsTWXiCmQcvVg+0+WYD9ZTrGuLK+r8BFA1BxWDE8c/qHpwTs
bE4GPbepkdfLH0LUbubEnNc1qewwHUfVWdEr6RtAZSMbzjdJeFu1CCQ/X8g7obdQ
PDhwA2+bRb0RR+8tbEX7gkD0IaXL3N4CBc4CownGV4J2TBGN/MvVNQQyU0TNAgMB
AAGjggIjMIICHzAdBgNVHQ4EFgQUINnmSIRkEiCmqoK0pYAcuPwqZ+0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTY2NTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADBAAuygAD
BAIuygwwDAMEAC7KJwMEAS7KKAMEAC7KLTANBgkqhkiG9w0BAQsFAAOCAQEAZyIt
ZeJ1ssC3gXpsz1tCKBW8riLgSei9dcJETdJuNarxCb9wRKPeHKnkD2nkIG+mzs/O
z3r/zZ2rbppDzw2Ms9r56v2rPVCg5azDjBPxrqQn+SNYHs9Vu3OSYWrXfCCICivH
KnLYTAQjOkqrrs1eTKkKXFtq9BJHdowcpGh5geRpKza709vAabVbFU1a4mXjeEG+
/RFQuM4/UGQdM7ouUpwRF66AqRhAf9rTLMbL/8BK8YAELQxYmDSoM7lZFcY1fvK4
XpV3/gNBzlnoR1nKsXTL6td9Rr3k6Kq4b/P2wIM/VGMdBT/4d57vPd+W2bXCbmmE
lOWaf9dtD1Bt1aF+Fg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:29 2026 by rpki-client