This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
File:                     AS55286.roa (raw, json)
Hash identifier:          i/APl3sU9qq+/NwPjkKDfoh4BOthU2QIS/d8ATmHBZY=
Subject key identifier:   F1:68:1E:D5:4B:23:CC:7D:16:CE:D3:47:45:82:B7:4C:12:87:61:DA
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       7ED9F33F731BC2AF4C5C9DE40A345FAD3C14B377
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa
Signing time:             Wed 07 Jan 2026 09:55:06 +0000
ROA not before:           Wed 07 Jan 2026 09:50:06 +0000
ROA not after:            Wed 06 Jan 2027 09:55:06 +0000
asID:                     55286
IP address blocks:        155.117.233.0/24 maxlen: 24
                          155.117.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d9:f3:3f:73:1b:c2:af:4c:5c:9d:e4:0a:34:5f:ad:3c:14:b3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan  7 09:50:06 2026 GMT
            Not After : Jan  6 09:55:06 2027 GMT
        Subject: CN=F1681ED54B23CC7D16CED3474582B74C128761DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:2f:26:90:6a:e0:9a:b2:8f:23:40:5d:c1:
                    86:58:96:09:42:36:1c:5a:c1:cb:e3:bc:4c:63:7e:
                    f5:54:df:96:60:d9:fd:57:18:9e:43:3d:fe:b7:24:
                    00:90:4d:a8:75:c4:7d:de:75:30:2e:9f:17:ce:a8:
                    0d:5d:30:39:93:e2:9a:77:57:d5:45:e7:3e:26:6e:
                    1d:89:44:58:d9:67:5b:a2:4c:2d:41:c9:60:cd:23:
                    07:e5:38:c9:3a:a6:40:cb:bb:0b:d7:d1:62:85:b3:
                    d0:75:73:21:83:6b:84:7a:2e:45:6b:f0:78:0d:ae:
                    7d:ce:c2:e1:96:14:83:db:d6:3a:d4:92:17:c1:85:
                    e2:0a:3f:f9:22:85:0d:1b:9c:2e:4b:75:af:bb:90:
                    3e:7d:32:d2:a7:ae:07:12:b9:f6:93:3b:fd:d2:bc:
                    7c:07:81:75:ab:9c:a0:86:21:00:8f:23:d0:e7:77:
                    be:a8:f9:a3:15:20:ff:3f:9b:2e:4d:77:d0:16:43:
                    6b:12:bc:62:a3:7c:5c:27:fb:9d:7a:92:8d:ae:2c:
                    10:78:a1:ef:77:51:ad:91:46:9e:c5:d5:7f:65:8a:
                    4c:81:b4:72:86:54:16:fe:f7:55:ab:cb:d0:55:f8:
                    39:f2:2c:d5:0a:f5:4b:2b:d2:71:a6:45:c2:bb:d2:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:1E:D5:4B:23:CC:7D:16:CE:D3:47:45:82:B7:4C:12:87:61:DA
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.117.233.0-155.117.234.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:fd:f5:f1:81:2f:ad:a3:94:ae:bd:1d:4f:f9:9f:05:6a:
         c4:19:6c:6d:03:a3:fe:0e:b5:a2:bc:e7:1a:b7:a6:62:c0:54:
         1b:4f:2a:a3:42:62:2c:a7:74:c3:cc:4e:fd:15:dc:84:41:c7:
         7f:c8:3e:8f:51:7a:2b:79:33:bb:5f:04:d7:26:28:8b:c7:49:
         70:7e:98:31:be:f3:65:35:ba:ec:2f:de:44:75:25:4d:17:de:
         e0:e7:a9:38:1a:e7:14:44:14:12:c5:4b:61:b4:ae:be:86:15:
         29:72:d7:86:09:92:16:5c:d7:ae:99:e5:24:2c:42:60:c8:80:
         e8:e2:78:62:e0:d8:70:8d:ec:fd:3b:1a:bb:1f:5f:79:d8:bb:
         8d:5e:87:73:8c:30:5b:8d:c5:b2:45:e5:1a:fd:db:fd:08:d9:
         9a:6d:04:77:2c:27:60:4f:88:58:bf:6f:14:a1:60:c2:b5:dc:
         8e:05:4d:6e:dc:8c:2a:6d:12:ae:7b:0e:bd:a0:80:55:49:d1:
         61:9e:a6:9f:7a:6e:32:8f:86:52:dc:07:20:73:c2:3c:dd:dd:
         ad:e5:7e:84:93:57:c8:d5:1f:b4:96:3b:e1:fc:70:12:bb:51:
         fe:fe:75:bc:d2:79:14:13:14:5e:a0:db:45:60:0f:d6:2d:c1:
         0c:61:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:39:55 2026 by rpki-client