Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53755.roa
File: AS53755.roa (raw, json)
Hash identifier: PhftL/qqH88Offtd5ZaZ92rSO7E2TCZx0LnzNB3+Br8=
Subject key identifier: 55:FE:D4:34:E4:65:6C:23:F4:80:60:89:3D:ED:C6:C0:D9:1D:C5:6D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B01CED3633931BFF552E5520545AB66CE4CF050
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53755.roa
Signing time: Wed 25 Mar 2026 06:16:44 +0000
ROA not before: Wed 25 Mar 2026 06:11:44 +0000
ROA not after: Wed 24 Mar 2027 06:16:44 +0000
asID: 53755
IP address blocks: 168.222.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:01:ce:d3:63:39:31:bf:f5:52:e5:52:05:45:ab:66:ce:4c:f0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 06:11:44 2026 GMT
Not After : Mar 24 06:16:44 2027 GMT
Subject: CN=55FED434E4656C23F48060893DEDC6C0D91DC56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:67:fe:b1:e6:00:38:5c:1b:8e:8a:c7:a7:
a5:8f:c4:58:02:d8:0a:79:b0:8c:33:6d:99:6d:dc:
12:03:9d:57:96:2b:63:54:25:2a:b7:57:c9:4d:db:
59:51:17:bc:ea:e6:19:a6:9f:e3:f5:e1:b5:fd:ba:
01:46:4b:b2:77:a2:eb:3a:0c:5f:52:24:70:6d:57:
39:c6:34:9e:4a:12:ad:d2:45:51:59:15:58:1d:85:
9a:54:df:ba:73:9f:d9:2c:f6:3c:03:59:89:86:a9:
78:7e:b3:ea:57:a4:da:7c:8b:43:05:4e:ce:a7:e2:
97:1a:49:37:c2:d0:b1:c9:cb:58:f7:dc:c0:10:b0:
7e:37:6a:05:25:5b:ae:8d:f4:5c:27:79:d6:27:b1:
bf:1e:2f:b7:d6:08:ac:3a:eb:e7:da:a9:3a:56:b4:
4a:9a:a3:ae:3c:d8:c1:78:b9:d9:76:99:61:de:07:
50:b4:ee:31:dc:b2:4c:29:a7:38:65:65:e2:2a:29:
eb:48:ea:29:67:2e:ec:f0:ac:18:1e:53:83:83:f9:
47:05:f5:78:b9:f8:4e:81:a3:3b:fa:7f:bd:5c:ef:
36:2c:9e:c3:cd:79:85:4c:9a:79:99:5b:a6:19:7a:
93:54:fe:b2:86:5b:43:99:4f:f7:2f:90:b6:20:ee:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:D4:34:E4:65:6C:23:F4:80:60:89:3D:ED:C6:C0:D9:1D:C5:6D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.26.0/24
Signature Algorithm: sha256WithRSAEncryption
90:82:d6:c2:72:e6:ac:df:4b:61:11:86:4a:81:ee:15:50:e1:
d8:db:ff:1a:a2:c0:7a:16:5b:7b:12:14:c6:ca:11:7a:b4:ed:
7f:ce:13:2c:4b:76:14:6f:80:18:8f:96:fe:c1:7c:23:43:8a:
9a:cc:04:9e:41:83:af:4a:f9:36:63:96:9b:05:8d:ba:e1:fd:
bc:73:c1:0e:e8:a1:9e:b2:97:8e:f7:69:75:a6:9c:c9:f6:96:
d1:33:65:a4:72:5c:ca:0a:c9:0e:4c:c6:a9:48:6e:35:0f:0d:
90:2e:06:2d:0a:ec:a4:7b:aa:e1:35:31:e6:79:a5:aa:e3:ae:
6f:9e:b1:57:be:58:df:2a:bb:56:6a:e9:f7:67:f1:1d:f6:e6:
db:de:f1:f0:9b:ed:d9:67:90:a4:bf:67:af:b7:44:74:fd:35:
15:0c:9f:51:0c:e0:48:cc:a1:7f:b7:fd:a3:14:50:16:c7:2b:
3d:93:88:a4:10:8d:91:99:98:69:af:a0:ef:c9:ea:1c:93:2f:
06:76:8c:a8:40:27:ee:db:2b:2c:03:2c:a0:7f:7a:e2:87:5f:
19:af:47:98:12:d2:a7:82:79:47:fb:dd:c9:fe:df:17:e1:31:
e3:4e:5b:f1:48:d6:ee:f3:96:90:5c:f3:36:6a:0d:b0:78:d4:
cf:3d:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 03:22:06 2026 by rpki-client