Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
File: AS55286.roa (raw, json)
Hash identifier: nyt9BR3RFMKliBIwIz20rJC8mi39EFInn9JLRguDKSc=
Subject key identifier: FA:71:0C:94:F3:1E:B4:CD:35:24:7D:50:05:DF:ED:BD:48:AB:6A:82
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B90AB3E1F4ACAFDB96066441E88DDB7753D2DBC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
Signing time: Sun 24 May 2026 11:21:59 +0000
ROA not before: Sun 24 May 2026 11:16:59 +0000
ROA not after: Sun 23 May 2027 11:21:59 +0000
asID: 55286
IP address blocks: 155.117.120.0/24 maxlen: 24
155.117.233.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 07:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:90:ab:3e:1f:4a:ca:fd:b9:60:66:44:1e:88:dd:b7:75:3d:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 24 11:16:59 2026 GMT
Not After : May 23 11:21:59 2027 GMT
Subject: CN=FA710C94F31EB4CD35247D5005DFEDBD48AB6A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:ad:3d:92:a4:37:3c:36:c5:1d:5f:ac:f9:
27:91:ce:c9:c9:a7:ed:8d:26:49:ff:d7:85:54:01:
81:dc:bc:f6:b1:d4:05:da:fa:3a:53:2a:cc:f4:78:
36:5b:1a:b9:a5:06:11:b8:7c:bd:ef:62:a2:f2:47:
c1:34:13:34:16:a3:cc:75:45:2a:80:69:00:59:c9:
7f:72:ef:23:21:a1:b6:e2:cc:3a:6e:99:88:a9:02:
17:5e:20:61:f1:b8:89:40:de:f9:23:96:cb:21:47:
47:a0:7e:73:e9:97:28:61:4a:6e:9d:1b:b8:9f:a5:
b4:27:b8:69:76:62:3f:06:8b:69:2a:f4:b5:6e:f1:
88:92:6b:b2:4d:ae:a3:7c:13:7e:ae:ac:fb:57:7e:
10:a0:af:7a:1c:54:5b:3a:61:12:07:43:1e:8a:70:
bb:8b:6d:f3:0f:55:ec:b7:90:1d:bd:42:05:6a:58:
bb:f4:c6:ea:4e:27:65:77:6c:53:51:98:39:37:b1:
c1:0c:d7:5b:f8:18:72:91:9e:e4:0c:91:75:fe:81:
66:25:9f:ef:61:a9:83:9d:40:a4:c8:35:b3:00:1b:
b7:e7:75:38:89:cd:b4:c9:b6:c7:26:0d:cb:6a:c9:
cf:3c:09:b0:ae:a9:c0:61:fb:97:ac:82:5a:f1:8f:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:0C:94:F3:1E:B4:CD:35:24:7D:50:05:DF:ED:BD:48:AB:6A:82
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.120.0/24
155.117.233.0-155.117.234.255
Signature Algorithm: sha256WithRSAEncryption
15:39:c5:46:e7:c5:de:6d:cf:aa:39:78:f5:dd:2e:37:90:7f:
f6:e4:7f:67:46:c8:3f:aa:d7:46:fe:77:c4:2e:ad:af:d9:c6:
5b:51:0a:ef:b4:b3:f6:c5:7c:3f:2c:15:ab:b1:5e:88:c0:96:
46:85:0c:b7:36:80:1e:fd:34:bc:44:86:6c:67:a3:c0:43:90:
a6:e2:b1:51:91:d9:1d:23:6a:50:bf:9c:07:1b:39:0b:ca:96:
ef:9c:1a:11:a3:80:76:fb:65:1d:c1:88:00:64:6b:6b:a2:c7:
3c:31:ba:37:db:ea:a8:0c:35:84:11:7c:09:8d:ac:df:b9:36:
3a:f5:e1:b1:9e:61:87:04:eb:ee:cf:44:90:10:33:49:ee:3b:
ae:d0:b9:03:6a:0a:c1:b1:a4:c4:92:89:46:0c:c8:4c:22:e5:
77:bf:67:83:32:3d:e9:c3:73:f6:b5:4d:8d:5d:17:3d:72:06:
09:cc:c4:57:54:98:d1:40:52:dd:48:c8:fb:62:27:93:76:7e:
07:91:5b:e4:54:28:c0:b0:c3:10:e2:dc:17:91:98:2f:a4:63:
f5:25:19:44:9b:7a:c0:de:4a:05:12:81:21:46:f1:54:b9:6b:
5e:fd:ae:10:ee:e2:85:4f:d5:16:8d:2b:f9:71:63:2b:7e:de:
54:6e:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 12:14:26 2026 by rpki-client