This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
File: AS55286.roa (raw, json)
Hash identifier: i/APl3sU9qq+/NwPjkKDfoh4BOthU2QIS/d8ATmHBZY=
Subject key identifier: F1:68:1E:D5:4B:23:CC:7D:16:CE:D3:47:45:82:B7:4C:12:87:61:DA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7ED9F33F731BC2AF4C5C9DE40A345FAD3C14B377
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
Signing time: Wed 07 Jan 2026 09:55:06 +0000
ROA not before: Wed 07 Jan 2026 09:50:06 +0000
ROA not after: Wed 06 Jan 2027 09:55:06 +0000
asID: 55286
IP address blocks: 155.117.233.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 15:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d9:f3:3f:73:1b:c2:af:4c:5c:9d:e4:0a:34:5f:ad:3c:14:b3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 7 09:50:06 2026 GMT
Not After : Jan 6 09:55:06 2027 GMT
Subject: CN=F1681ED54B23CC7D16CED3474582B74C128761DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:2f:26:90:6a:e0:9a:b2:8f:23:40:5d:c1:
86:58:96:09:42:36:1c:5a:c1:cb:e3:bc:4c:63:7e:
f5:54:df:96:60:d9:fd:57:18:9e:43:3d:fe:b7:24:
00:90:4d:a8:75:c4:7d:de:75:30:2e:9f:17:ce:a8:
0d:5d:30:39:93:e2:9a:77:57:d5:45:e7:3e:26:6e:
1d:89:44:58:d9:67:5b:a2:4c:2d:41:c9:60:cd:23:
07:e5:38:c9:3a:a6:40:cb:bb:0b:d7:d1:62:85:b3:
d0:75:73:21:83:6b:84:7a:2e:45:6b:f0:78:0d:ae:
7d:ce:c2:e1:96:14:83:db:d6:3a:d4:92:17:c1:85:
e2:0a:3f:f9:22:85:0d:1b:9c:2e:4b:75:af:bb:90:
3e:7d:32:d2:a7:ae:07:12:b9:f6:93:3b:fd:d2:bc:
7c:07:81:75:ab:9c:a0:86:21:00:8f:23:d0:e7:77:
be:a8:f9:a3:15:20:ff:3f:9b:2e:4d:77:d0:16:43:
6b:12:bc:62:a3:7c:5c:27:fb:9d:7a:92:8d:ae:2c:
10:78:a1:ef:77:51:ad:91:46:9e:c5:d5:7f:65:8a:
4c:81:b4:72:86:54:16:fe:f7:55:ab:cb:d0:55:f8:
39:f2:2c:d5:0a:f5:4b:2b:d2:71:a6:45:c2:bb:d2:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:1E:D5:4B:23:CC:7D:16:CE:D3:47:45:82:B7:4C:12:87:61:DA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.233.0-155.117.234.255
Signature Algorithm: sha256WithRSAEncryption
2f:ef:fd:f5:f1:81:2f:ad:a3:94:ae:bd:1d:4f:f9:9f:05:6a:
c4:19:6c:6d:03:a3:fe:0e:b5:a2:bc:e7:1a:b7:a6:62:c0:54:
1b:4f:2a:a3:42:62:2c:a7:74:c3:cc:4e:fd:15:dc:84:41:c7:
7f:c8:3e:8f:51:7a:2b:79:33:bb:5f:04:d7:26:28:8b:c7:49:
70:7e:98:31:be:f3:65:35:ba:ec:2f:de:44:75:25:4d:17:de:
e0:e7:a9:38:1a:e7:14:44:14:12:c5:4b:61:b4:ae:be:86:15:
29:72:d7:86:09:92:16:5c:d7:ae:99:e5:24:2c:42:60:c8:80:
e8:e2:78:62:e0:d8:70:8d:ec:fd:3b:1a:bb:1f:5f:79:d8:bb:
8d:5e:87:73:8c:30:5b:8d:c5:b2:45:e5:1a:fd:db:fd:08:d9:
9a:6d:04:77:2c:27:60:4f:88:58:bf:6f:14:a1:60:c2:b5:dc:
8e:05:4d:6e:dc:8c:2a:6d:12:ae:7b:0e:bd:a0:80:55:49:d1:
61:9e:a6:9f:7a:6e:32:8f:86:52:dc:07:20:73:c2:3c:dd:dd:
ad:e5:7e:84:93:57:c8:d5:1f:b4:96:3b:e1:fc:70:12:bb:51:
fe:fe:75:bc:d2:79:14:13:14:5e:a0:db:45:60:0f:d6:2d:c1:
0c:61:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:39:55 2026 by rpki-client