Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS56582.roa
File: AS56582.roa (raw, json)
Hash identifier: a4n49Gh3flDwRMGrqpSyiOSNYfoWPIvUbCHMTHz3LZY=
Subject key identifier: 43:66:10:DA:AE:68:13:B1:7E:0B:B2:4C:4F:DC:81:CF:A5:69:F2:FC
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 433E6EC93E02BFB026F8ADE16EF728177972D711
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS56582.roa
Signing time: Tue 07 Jul 2026 11:59:56 +0000
ROA not before: Tue 07 Jul 2026 11:54:56 +0000
ROA not after: Tue 06 Jul 2027 11:59:56 +0000
asID: 56582
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3e:6e:c9:3e:02:bf:b0:26:f8:ad:e1:6e:f7:28:17:79:72:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 7 11:54:56 2026 GMT
Not After : Jul 6 11:59:56 2027 GMT
Subject: CN=436610DAAE6813B17E0BB24C4FDC81CFA569F2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:65:29:fc:92:44:74:34:d2:52:e7:13:f3:
84:2b:40:89:78:be:95:15:a6:3f:18:fc:48:4b:0c:
4d:78:f0:63:0e:ba:ff:ce:6a:00:11:98:2a:1b:56:
bb:1f:00:b3:29:11:5a:82:9f:41:67:96:38:40:a8:
00:34:2f:31:60:6d:27:ae:60:60:47:1a:68:95:92:
a1:95:9a:c5:2f:a3:f8:a6:ef:cc:74:5c:38:a2:81:
33:72:07:b5:67:42:76:18:fa:f2:81:6c:c7:45:3e:
f8:9d:6f:8c:83:50:80:09:2f:04:ef:f3:13:9e:98:
01:05:04:88:f2:f6:70:3e:d6:a0:09:1f:7e:76:75:
74:17:44:d4:45:cd:ce:0c:d9:dc:b1:5f:c4:57:84:
9c:38:55:06:4e:27:34:87:12:0b:33:77:23:da:b2:
3f:15:e4:b0:a1:c6:fe:36:0f:08:bf:88:7c:32:40:
6e:d1:d2:f8:bf:93:9f:09:90:a9:43:02:fa:d2:ec:
0e:ad:ff:3a:f0:84:6b:1e:08:1a:bc:e4:62:2f:91:
ce:10:46:66:13:ab:26:c2:07:ba:1d:36:0a:49:de:
d3:1a:68:ee:53:5a:6f:64:64:21:5f:ec:4c:98:ed:
dd:85:53:47:94:82:30:55:57:e1:92:7a:5c:b6:89:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:10:DA:AE:68:13:B1:7E:0B:B2:4C:4F:DC:81:CF:A5:69:F2:FC
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS56582.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:40:3d:7d:6f:13:64:1d:89:67:69:7d:22:5f:91:97:00:
d3:b7:ad:36:09:15:7d:8d:aa:e8:a0:3e:6e:1f:6c:53:55:fb:
49:2b:70:9a:1d:2c:9a:54:c0:bf:ed:49:cf:aa:95:8d:2d:fb:
2c:7b:54:6b:30:56:41:1a:19:59:bb:8c:05:0d:9d:8a:8d:40:
ad:e8:a2:bd:90:23:7a:97:f5:82:45:ba:8b:6b:b4:5a:36:41:
e9:7a:82:84:a7:cc:d3:a8:9b:38:ec:87:c6:c3:fa:72:87:47:
c6:b9:18:50:1f:4a:0a:ce:8d:13:3a:c5:c5:f3:8b:76:c5:04:
43:98:77:94:bf:b5:eb:d6:77:b9:bb:c9:81:46:f2:4f:58:d9:
76:46:b1:ca:41:f7:03:8b:aa:fe:89:3f:6b:71:d6:c8:21:00:
44:aa:b9:58:d7:9e:1e:4d:58:50:b6:a6:2a:e2:e6:72:1a:9f:
5b:3c:02:53:cd:35:48:96:5a:2f:7a:63:08:0e:1f:f7:64:dd:
ff:7b:e3:d0:87:0f:56:a0:2e:27:2d:05:e0:3f:b4:57:b3:52:
2e:17:d8:c4:b2:7f:40:cc:da:b7:24:ec:c4:4f:87:df:28:c7:
19:2c:9c:c5:20:74:65:35:79:ad:cb:99:34:45:55:24:3e:a9:
38:80:1c:00
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUQz5uyT4Cv7Am+K3hbvcoF3ly1xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA3MDcxMTU0NTZaFw0yNzA3MDYxMTU5NTZaMDMxMTAvBgNV
BAMTKDQzNjYxMERBQUU2ODEzQjE3RTBCQjI0QzRGREM4MUNGQTU2OUYyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuWUp/JJEdDTSUucT84QrQIl4
vpUVpj8Y/EhLDE148GMOuv/OagARmCobVrsfALMpEVqCn0FnljhAqAA0LzFgbSeu
YGBHGmiVkqGVmsUvo/im78x0XDiigTNyB7VnQnYY+vKBbMdFPvidb4yDUIAJLwTv
8xOemAEFBIjy9nA+1qAJH352dXQXRNRFzc4M2dyxX8RXhJw4VQZOJzSHEgszdyPa
sj8V5LChxv42Dwi/iHwyQG7R0vi/k58JkKlDAvrS7A6t/zrwhGseCBq85GIvkc4Q
RmYTqybCB7odNgpJ3tMaaO5TWm9kZCFf7EyY7d2FU0eUgjBVV+GSely2iXnfAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUQ2YQ2q5oE7F+C7JMT9yBz6Vp8vwwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNTY1ODIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUV8Qw
DQYJKoZIhvcNAQELBQADggEBAGufQD19bxNkHYlnaX0iX5GXANO3rTYJFX2Nquig
Pm4fbFNV+0krcJodLJpUwL/tSc+qlY0t+yx7VGswVkEaGVm7jAUNnYqNQK3oor2Q
I3qX9YJFuotrtFo2Qel6goSnzNOomzjsh8bD+nKHR8a5GFAfSgrOjRM6xcXzi3bF
BEOYd5S/tevWd7m7yYFG8k9Y2XZGscpB9wOLqv6JP2tx1sghAESquVjXnh5NWFC2
piri5nIan1s8AlPNNUiWWi96YwgOH/dk3f9749CHD1agLictBeA/tFezUi4X2MSy
f0DM2rck7MRPh98oxxksnMUgdGU1ea3LmTRFVSQ+qTiAHAA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:15 2026 by rpki-client