Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55177.roa
File:                     AS55177.roa (raw, json)
Hash identifier:          IFVNIYPPqM6LKguucKwTarSu6pfSOXUh720dWmCr3IM=
Subject key identifier:   D9:11:8B:92:EB:E2:2E:5D:55:91:9F:8D:25:BF:08:25:01:CC:1D:4C
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       6F8CCE13D60762D97FA22C6A304BA1015DBD24EC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55177.roa
Signing time:             Thu 28 May 2026 17:00:42 +0000
ROA not before:           Thu 28 May 2026 16:55:42 +0000
ROA not after:            Thu 27 May 2027 17:00:42 +0000
asID:                     55177
IP address blocks:        179.61.130.0/24 maxlen: 24
                          181.41.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8c:ce:13:d6:07:62:d9:7f:a2:2c:6a:30:4b:a1:01:5d:bd:24:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: May 28 16:55:42 2026 GMT
            Not After : May 27 17:00:42 2027 GMT
        Subject: CN=D9118B92EBE22E5D55919F8D25BF082501CC1D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:6f:00:74:c9:7f:d9:d7:86:7e:fe:90:80:
                    0e:92:e7:98:5a:19:3e:14:8c:b8:f0:aa:4b:06:d7:
                    06:87:50:64:fc:e8:03:0f:dc:f1:0f:5b:d2:34:0f:
                    cc:f8:02:17:ac:c1:4d:52:4a:8a:30:a6:0e:23:78:
                    26:f5:50:55:43:7b:87:2e:98:e5:ee:bd:41:a5:15:
                    ea:31:c7:1b:49:47:72:b7:56:ee:6c:5f:7e:85:a8:
                    8e:ca:ca:b0:00:e9:5f:12:8d:74:99:d5:81:09:70:
                    c8:63:c3:98:51:b4:bf:59:dd:96:04:36:cb:64:81:
                    00:66:51:e4:a1:9e:ad:f1:e7:6f:af:33:d2:19:9b:
                    11:ac:9a:5e:74:dd:89:c9:31:b3:d0:01:3e:c9:4b:
                    3d:54:71:b7:97:17:00:80:17:49:6c:8d:f3:e4:09:
                    84:a8:a1:68:a0:b1:73:2c:b3:d5:5f:48:b9:aa:e6:
                    76:e8:8c:94:0b:58:db:84:db:96:95:8d:64:37:e6:
                    14:f4:20:58:25:72:fa:26:e4:86:6d:e3:15:c9:43:
                    d6:20:ec:9d:a3:5e:51:90:84:b3:e0:79:76:7a:90:
                    54:6e:5a:69:0b:24:40:a4:18:df:32:38:7c:8b:09:
                    4f:71:8d:32:cd:de:93:b6:36:60:0d:9f:01:19:c5:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:8B:92:EB:E2:2E:5D:55:91:9F:8D:25:BF:08:25:01:CC:1D:4C
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.130.0/24
                  181.41.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:a4:df:fa:74:7c:b7:bc:f9:ac:7d:3e:5b:48:2f:cb:66:
         e2:d1:ed:1c:fc:e6:2d:95:db:d8:d4:96:8c:69:fa:82:07:b9:
         d8:3d:79:f6:4f:18:13:bb:71:db:83:7e:57:8f:9b:14:48:ca:
         b5:83:f7:51:d1:ac:f0:c2:82:21:5e:ba:3e:ad:ae:1a:5d:e2:
         76:63:60:83:f4:ce:1b:9a:98:bf:3a:3d:20:fa:ce:99:03:50:
         83:9c:04:f3:39:98:4a:e0:91:0a:51:70:07:54:71:75:80:70:
         63:d1:38:20:a2:a7:24:f7:08:c8:3a:c3:16:bf:47:4e:d0:30:
         59:cf:4a:46:14:89:1a:9c:4c:13:30:be:e3:54:1d:96:2b:fb:
         81:cf:33:9a:1e:9d:01:a6:1a:50:62:2e:c3:e1:80:76:77:fd:
         79:2c:f1:97:e0:c2:57:d0:d5:6a:33:c7:cb:16:87:e2:0d:ea:
         a6:b5:83:4b:60:c6:10:b5:aa:c4:7e:3e:84:2d:08:53:d1:7c:
         0c:07:eb:93:ec:fd:55:29:f8:fd:bc:ac:90:c4:f5:b1:04:88:
         07:e0:4b:5b:f8:b0:2b:56:d4:6a:1f:26:d9:9e:6c:c7:12:80:
         69:33:03:88:80:e4:cb:8e:8b:bb:6c:34:80:84:13:5b:19:83:
         08:30:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:19 2026 by rpki-client