Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: Zy2iyzI8CatJYoIymGbcZdTsNFMvu9uDOMvBuV+gIhg=
Subject key identifier: 08:C9:6B:EC:06:45:42:86:5E:81:35:3E:1C:A6:B6:67:D2:27:E3:3D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 203EFB0804C7A5659423533A23B7D47164320FA2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS55720.roa
Signing time: Thu 24 Sep 2026 04:49:35 +0000
ROA not before: Thu 24 Sep 2026 04:44:35 +0000
ROA not after: Thu 23 Sep 2027 04:49:35 +0000
asID: 55720
IP address blocks: 143.20.31.0/24 maxlen: 24
143.20.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3e:fb:08:04:c7:a5:65:94:23:53:3a:23:b7:d4:71:64:32:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 24 04:44:35 2026 GMT
Not After : Sep 23 04:49:35 2027 GMT
Subject: CN=08C96BEC064542865E81353E1CA6B667D227E33D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:47:aa:89:bd:ee:07:b5:a7:8e:6f:c7:b1:
7a:bd:d7:a6:80:25:6a:a9:91:c6:5d:7c:b6:f6:76:
0d:6a:79:3f:50:96:52:ff:e9:42:ea:22:4d:c9:53:
93:9a:ad:d9:d8:1e:ec:36:18:48:19:98:72:95:b0:
78:a8:b1:19:97:26:10:17:99:bd:a1:94:43:ee:1a:
53:09:bc:90:44:fe:51:8b:48:09:35:4e:90:35:00:
a7:37:6a:ef:10:67:40:47:19:48:69:41:95:f9:3d:
60:8d:3e:c3:1d:38:6c:21:02:3c:df:8e:72:c3:71:
d2:1a:dd:11:e1:4b:5d:ac:47:5a:a2:1c:dd:4f:84:
07:11:d5:18:96:93:81:d3:3a:5b:d9:61:d7:34:95:
8c:73:c6:d9:40:b4:63:ee:a7:26:f0:5a:d4:0b:2c:
da:8a:5c:49:c2:33:bd:43:d6:8a:dc:d0:14:25:d7:
bd:3d:e3:9c:05:c6:84:e1:c1:ed:af:19:3e:a2:20:
12:3c:7a:7a:f2:31:b6:76:c4:e5:6d:75:e4:45:67:
b1:71:c6:1e:f7:6c:45:fb:c2:16:13:dd:e2:a9:18:
91:8c:a2:ba:c9:28:be:a5:40:f3:0c:9e:0c:52:4c:
13:1b:66:d6:69:9d:94:76:50:4f:c0:55:9d:a6:6a:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C9:6B:EC:06:45:42:86:5E:81:35:3E:1C:A6:B6:67:D2:27:E3:3D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.31.0/24
143.20.166.0/24
Signature Algorithm: sha256WithRSAEncryption
11:43:bb:a6:24:b0:0b:76:dd:93:f8:c9:53:d1:d6:09:c4:70:
9b:a8:3c:99:c3:ed:75:72:18:39:7a:12:cf:30:73:d9:ae:3a:
5b:9c:a2:94:48:73:9f:12:26:09:3b:68:a2:ca:ba:be:8e:ac:
1a:d2:4f:5a:6c:30:96:64:4a:40:00:51:0c:43:ff:2d:86:84:
6a:84:14:78:1b:27:a7:05:14:b4:bc:24:67:24:b4:ac:37:12:
16:3c:f1:53:fb:fa:a4:89:bb:f5:5e:32:0e:18:81:e3:b1:0f:
3d:f8:b2:30:c3:55:72:aa:4b:86:55:ea:cd:e4:82:3c:56:b8:
1c:58:21:ea:fc:62:e8:33:14:ab:af:df:72:3e:e0:87:d8:04:
1a:cb:e6:14:59:a7:be:d4:bc:64:ec:79:bc:52:93:bb:2a:29:
0b:e7:92:ec:cd:9c:60:50:77:2e:b9:cd:21:ed:c6:af:31:64:
71:05:75:ca:78:cb:5e:77:3b:ad:f5:b2:66:9b:b1:92:51:d4:
0c:7b:2c:57:e4:66:48:1f:28:c5:0c:85:df:2a:fe:90:42:89:
f0:58:0a:37:f2:1b:0b:18:cc:95:eb:90:8c:70:bf:ef:20:3a:
73:e9:c9:9d:77:8c:d1:b4:7b:54:60:4f:9c:32:2f:9e:73:34:
62:62:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:36:51 2026 by rpki-client